Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DEJCoz_4b2Cd0ZMv6DeLsbDNkKw.roa
File: DEJCoz_4b2Cd0ZMv6DeLsbDNkKw.roa (raw, json)
Hash identifier: QDntKgpA8jV6aqAD5dJLGUKaYAUchhz9/tZ8az29P8I=
Subject key identifier: 0C:42:42:A3:3F:F8:6F:60:9D:D1:93:2F:E8:37:8B:B1:B0:CD:90:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91AB6E82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DEJCoz_4b2Cd0ZMv6DeLsbDNkKw.roa
Signing time: Sat 02 Jul 2022 06:10:25 +0000
ROA not before: Sat 02 Jul 2022 06:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443931266 (0x91ab6e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 06:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c4242a33ff86f609dd1932fe8378bb1b0cd90ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:40:2b:ed:06:2c:b5:87:6d:b0:a9:47:86:
5b:94:90:a1:81:10:e4:40:f3:09:e2:7b:55:c2:e7:
3d:f9:f9:56:fa:54:73:f5:e0:89:a6:4a:12:01:18:
03:3b:24:f2:15:35:59:70:99:ea:93:6c:14:52:2e:
71:de:fe:c3:ed:3c:a0:ae:1d:0d:80:33:d3:c6:a5:
c9:39:f8:27:d3:e2:94:d2:91:0b:76:98:3e:70:0f:
90:83:af:84:39:3b:2d:1a:a8:4c:33:7b:39:37:a0:
f7:1d:84:e1:db:d5:78:6b:48:83:1c:da:19:15:37:
e3:43:bd:ea:5e:b0:ed:8e:33:63:47:84:eb:26:b1:
41:d7:7f:80:c9:9d:a6:c0:fb:9d:4d:db:28:4c:8a:
6f:eb:6c:59:83:6a:95:3a:79:69:48:3e:9c:91:fa:
b8:d5:7b:18:23:23:74:85:5e:df:39:21:52:fe:f1:
05:d8:f8:70:65:20:a1:3b:ef:1a:3f:51:73:a4:e5:
63:53:b4:d2:84:96:82:b4:d7:e1:b3:81:9c:a6:be:
d7:a7:62:37:31:0d:0b:9b:b8:1e:ae:04:8c:da:5e:
db:b9:d7:35:22:da:6b:cb:13:c6:52:2e:ee:61:7e:
7f:68:67:a0:45:b1:b0:cc:2c:a2:ab:3d:41:6c:a5:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:42:A3:3F:F8:6F:60:9D:D1:93:2F:E8:37:8B:B1:B0:CD:90:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DEJCoz_4b2Cd0ZMv6DeLsbDNkKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:82:10:c5:fb:7e:d3:1c:63:5b:a6:06:2b:9b:67:16:49:79:
26:c5:30:98:5d:b3:f9:28:0b:80:f2:56:a6:04:46:28:e2:ba:
88:51:05:3e:e4:de:72:b5:e6:70:fd:7c:46:2f:f8:9c:1f:82:
a7:34:bb:0e:1f:2a:58:cb:ee:dd:4b:09:4b:21:1d:90:68:01:
90:ec:1d:f1:24:0c:d8:c4:15:f5:5b:3d:dd:70:7a:7a:72:36:
5f:80:f5:39:71:c4:e0:55:00:93:b2:ce:99:77:d3:93:ca:7d:
8a:50:ea:4d:15:b7:f7:2f:46:3b:ab:c4:bc:dd:65:6a:66:c0:
db:8b:39:0f:2d:94:39:bb:9d:df:cf:9a:74:6c:22:df:83:0c:
1e:f7:75:a8:57:ac:3e:51:5b:67:18:3d:e0:f5:88:30:9c:df:
ed:5c:cf:04:f0:bc:60:99:89:bf:e9:97:5b:e1:45:72:29:d7:
36:d0:84:02:3b:d4:5a:2b:55:9b:7c:c2:81:20:2e:09:a5:f9:
63:ec:12:24:44:98:44:b9:85:07:60:4d:ad:18:28:a4:a2:c6:
58:49:50:3e:99:57:19:e1:85:38:79:6c:35:3f:fa:70:39:b4:
25:6c:b6:98:89:fb:fe:84:2f:62:80:8d:ea:a3:ac:d4:56:49:
5d:b1:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:56 2025 by rpki-client