Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFzhGoAc3YIrFvavTj2cruDv2Bo.roa
File: DFzhGoAc3YIrFvavTj2cruDv2Bo.roa (raw, json)
Hash identifier: dt8QPEOkzG6Hepy+JACWudBPQBw2xbvjOniv9c6lsIA=
Subject key identifier: 0C:5C:E1:1A:80:1C:DD:82:2B:16:F6:AF:4E:3D:9C:AE:E0:EF:D8:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A053552
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFzhGoAc3YIrFvavTj2cruDv2Bo.roa
Signing time: Sat 12 Feb 2022 17:08:41 +0000
ROA not before: Sat 12 Feb 2022 17:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778726226 (0x6a053552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 17:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c5ce11a801cdd822b16f6af4e3d9caee0efd81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:55:4d:00:4d:02:65:ec:7b:c3:62:fa:c1:
3f:48:c3:37:9b:2b:83:41:5a:05:c8:da:a4:46:d4:
b9:83:21:c7:02:3f:13:f2:bc:7a:dc:32:60:59:19:
dc:e8:42:75:56:fe:f0:24:e2:56:f4:49:20:d7:03:
3f:55:da:94:1d:f5:a1:58:7b:02:96:ed:3f:9f:a6:
d7:20:6b:56:7b:86:75:6b:d5:1c:11:7d:d6:7c:25:
a7:a4:05:6a:dc:99:52:b5:54:2b:47:73:b6:41:d8:
89:80:7b:e4:2c:b1:ec:36:94:87:d7:c7:17:04:6d:
e7:85:f7:78:d0:be:21:18:43:f5:b1:d0:38:8a:9a:
d1:84:7e:cb:14:82:da:9a:af:3a:7d:06:e2:9b:27:
41:e6:bc:12:0c:e5:7a:7e:73:6b:8f:75:6f:1b:d2:
3a:a1:13:61:7f:e6:e1:d9:ea:2e:7e:4e:d1:c7:17:
97:4b:7f:88:e5:11:c1:90:91:08:69:5f:1b:cc:7b:
89:0e:87:56:74:2b:ea:a0:a3:77:0e:06:31:b4:c3:
a6:0a:d1:36:e2:4f:16:cf:7f:35:89:04:b7:ac:2b:
22:bb:5a:d6:72:bc:ae:85:d6:d4:8e:c7:ce:be:ac:
55:a2:da:4c:ca:f0:89:05:d4:34:e4:a3:43:84:ea:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:E1:1A:80:1C:DD:82:2B:16:F6:AF:4E:3D:9C:AE:E0:EF:D8:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DFzhGoAc3YIrFvavTj2cruDv2Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:8f:73:cc:66:a1:6d:26:f2:0f:b5:f4:c9:9b:4a:69:a7:3e:
9f:3b:9b:df:9f:e1:67:b8:32:b5:39:f9:21:90:d2:4f:04:7b:
03:87:e6:9c:88:11:e3:3e:4c:2b:3e:39:fb:1e:96:13:7f:78:
f8:ae:ab:fc:67:14:d7:fb:a8:ef:94:66:00:ef:fb:00:01:5b:
7b:1d:60:dc:8f:d3:1d:75:6f:6d:75:ed:a9:25:a9:ac:30:9a:
c8:82:2e:ff:7d:72:8a:a9:13:ea:0c:f1:3d:45:44:f7:7d:b1:
30:10:97:7b:c5:95:61:8d:7d:8d:ea:f3:f3:6c:0d:8a:7e:84:
7c:07:39:04:27:86:5c:94:d4:cc:e5:bb:04:85:8a:b8:2a:17:
d5:76:6d:db:9e:33:ec:41:8c:da:e6:13:4e:97:b9:92:28:af:
04:76:ce:48:7c:c4:80:f5:66:db:5c:c6:c5:3b:ac:c5:3b:c8:
3c:5c:2a:95:bc:29:ab:22:b8:c6:73:d1:7b:b7:42:05:aa:f4:
a4:34:52:31:e1:a7:d0:22:93:a2:79:08:18:23:ad:bb:02:a0:
5e:b0:81:40:89:41:c7:4a:4a:22:22:26:06:30:29:85:06:8e:
e0:21:42:f3:ea:be:2d:65:6c:8a:93:7e:48:fd:f6:f9:ed:51:
20:71:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:09 2025 by rpki-client