Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DLJuYqA3gUAcGAAze1hUEQ5x3w4.roa
File: DLJuYqA3gUAcGAAze1hUEQ5x3w4.roa (raw, json)
Hash identifier: YvZOjNtViz1u6wzLkKD1Sc7FoU/RXV4/c1BJ4d8VIM8=
Subject key identifier: 0C:B2:6E:62:A0:37:81:40:1C:18:00:33:7B:58:54:11:0E:71:DF:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865155F01085560E28F122CAF5D1E7F95C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DLJuYqA3gUAcGAAze1hUEQ5x3w4.roa
Signing time: Tue 14 Feb 2023 19:10:31 +0000
ROA not before: Tue 14 Feb 2023 19:10:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:55:f0:10:85:56:0e:28:f1:22:ca:f5:d1:e7:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 19:10:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb26e62a03781401c1800337b5854110e71df0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:32:1f:bc:1a:3b:fe:a0:9e:e7:04:8a:9c:
17:e8:8c:e1:08:8b:c3:37:d7:d1:b5:6b:87:25:36:
fa:ea:59:95:9b:6c:da:19:fa:6f:08:e6:dc:6b:a4:
6c:1e:45:7f:0c:e6:b3:b7:51:76:a1:ca:ed:07:71:
58:d6:56:46:f8:b2:25:0d:00:72:83:1d:3d:fb:c2:
04:23:b1:a5:8c:e5:e6:97:8c:6b:f0:7a:13:ff:be:
84:2c:07:83:8a:5c:05:59:a0:1e:06:0c:d9:8d:34:
7d:13:fc:81:9f:a7:53:51:4c:04:30:10:56:de:7a:
f2:74:d7:b0:6a:ed:81:fe:0f:d6:09:81:ea:68:d3:
cf:a9:db:af:47:c8:8c:c4:76:f7:14:1a:9a:50:44:
29:ca:b7:4a:8a:cb:96:12:e5:3c:16:fb:ec:db:f9:
ef:80:77:b7:27:ab:3c:77:cd:dd:c6:c3:64:a2:39:
c3:dd:f2:e6:4f:48:ae:43:ab:4d:e9:28:49:48:e9:
e3:75:78:ae:27:0c:8f:6e:d8:a7:8f:b3:6c:64:95:
75:95:d5:eb:42:09:bb:8a:32:5c:40:5d:74:08:58:
2e:db:51:53:21:fa:48:89:49:b3:5e:5e:2a:e4:91:
be:86:bb:c5:59:d7:8e:95:1d:69:6a:b8:86:72:54:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:6E:62:A0:37:81:40:1C:18:00:33:7B:58:54:11:0E:71:DF:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DLJuYqA3gUAcGAAze1hUEQ5x3w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d1:2b:ed:8e:2f:93:54:9c:89:9f:b5:e7:7c:c6:bd:41:a7:
8f:c0:cf:e4:58:84:d3:be:35:7a:2d:12:ae:0a:de:cf:61:a3:
37:15:30:38:ab:a7:a4:05:72:15:d2:e3:ce:eb:bb:d9:1b:5d:
17:fe:0b:3e:88:ff:39:ab:d1:95:14:e0:66:02:54:94:1e:d9:
fd:f8:d8:16:ea:1f:5b:b8:3e:d4:99:c7:18:e9:38:0a:2f:82:
ab:c9:64:1b:bc:c3:58:a6:36:cc:26:e2:b6:f7:81:2e:b9:16:
e9:a2:83:64:a1:dd:e4:a7:19:ca:36:b7:04:1b:7d:ca:8a:78:
b5:a1:1f:ed:35:cf:d4:82:8b:4c:03:fc:03:10:7e:19:cf:45:
b0:68:66:87:22:8e:cc:40:a3:16:43:b4:45:a5:fa:6a:7e:64:
eb:57:92:76:aa:46:71:2d:6d:c5:d6:55:90:89:58:af:3f:6d:
54:c8:25:00:95:ba:be:1a:f9:9f:29:e3:e0:70:ee:c5:5b:de:
05:f4:4f:16:f0:be:ad:35:aa:70:c8:5c:bb:66:10:24:60:4a:
0c:fb:d8:c2:7a:6c:bd:90:62:eb:74:fc:34:9a:10:b2:57:38:
9f:a3:ad:b8:cc:35:11:b5:a2:74:c3:4a:dc:24:78:11:50:7b:
96:a5:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:49:59 2025 by rpki-client