Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMis-SDtAx99GIS1wuOgDoFOq3Y.roa
File: DMis-SDtAx99GIS1wuOgDoFOq3Y.roa (raw, json)
Hash identifier: XMSqQuBcrX5Vrj8D/YneduY5FYPYAsqP2RW3X8dcpLY=
Subject key identifier: 0C:C8:AC:F9:20:ED:03:1F:7D:18:84:B5:C2:E3:A0:0E:81:4E:AB:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66A1D862
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMis-SDtAx99GIS1wuOgDoFOq3Y.roa
Signing time: Mon 31 Jan 2022 12:09:32 +0000
ROA not before: Mon 31 Jan 2022 12:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721882722 (0x66a1d862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 12:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc8acf920ed031f7d1884b5c2e3a00e814eab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:d4:ee:08:01:e3:17:db:bf:6c:47:6d:f6:
f1:bb:f8:c6:0c:51:e8:04:62:8b:01:bf:96:0a:8d:
63:3e:b9:fd:4b:c3:ac:a9:af:4b:64:d2:36:1e:7b:
69:6a:2f:87:b0:23:65:5f:65:b8:4e:66:bf:60:03:
71:0c:0c:68:e8:0a:50:7e:ce:5e:08:73:fa:d1:77:
53:bc:fd:42:a5:09:43:b7:95:2e:3d:6f:6e:13:43:
a0:f9:99:eb:ce:d8:6a:8a:a7:39:63:79:2f:54:62:
7c:74:35:28:91:c2:9e:2d:27:2b:84:83:03:a9:b3:
3b:7d:dc:63:e0:d0:f5:c8:f4:5e:76:b6:64:0f:82:
cc:f8:25:4c:ef:fe:1a:09:45:1b:9c:d3:33:62:0e:
9f:c1:f4:d8:d4:eb:b3:53:a1:35:d2:a5:42:e2:fc:
b1:dd:cd:ca:1b:26:32:54:67:34:da:c7:f1:b3:8e:
61:1b:c4:5b:dc:c0:2b:22:5c:61:84:e8:79:00:9f:
25:4d:8a:f0:9a:58:14:dd:a1:13:0f:6c:15:22:96:
25:a3:b3:e7:1f:23:b6:0e:70:0f:d0:f5:dd:b6:e8:
2e:ec:56:41:c6:30:32:e2:d1:cd:8e:f8:27:7f:7f:
39:4c:a3:88:58:3b:a8:d0:21:7a:e8:21:36:23:2a:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:AC:F9:20:ED:03:1F:7D:18:84:B5:C2:E3:A0:0E:81:4E:AB:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMis-SDtAx99GIS1wuOgDoFOq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:74:ed:c4:19:d0:77:1b:e9:49:da:03:80:3d:96:f6:47:63:
87:f7:ea:06:45:da:f8:fd:c3:c2:f3:53:13:9a:f8:04:a5:84:
29:45:41:58:af:21:02:9e:f7:5e:e0:22:ee:f8:d5:d1:91:68:
06:75:49:bd:23:da:a9:5f:d5:08:63:87:74:70:9f:71:19:93:
a6:3c:78:4d:58:85:40:97:12:38:0b:98:56:95:6a:83:bc:68:
27:8f:ea:94:5a:9d:88:32:ba:7f:38:71:04:2b:89:72:5b:81:
fa:0d:02:19:45:d9:b2:c7:7a:4d:47:bd:f5:73:23:92:49:e9:
f1:39:3a:db:44:b5:f8:9c:23:ab:29:31:12:dc:c9:32:4c:1e:
fc:21:27:99:fe:0c:f9:f6:79:27:a1:8e:cd:01:43:e6:31:23:
84:dd:ff:68:7e:16:4e:66:37:94:94:3c:2d:40:92:ff:96:ea:
68:73:53:42:2b:3c:f7:5f:51:78:ab:34:02:49:93:0d:2b:42:
5c:44:0e:3c:c1:e8:7f:81:74:fc:ef:21:2e:85:77:d9:ee:3b:
39:84:8d:42:d7:34:5e:c5:e8:11:66:a2:cb:24:16:f3:ac:48:
0b:25:aa:e8:dd:fe:66:ae:3f:86:09:53:b8:0d:eb:57:37:fd:
70:8c:29:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZqHYYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDEz
MTEyMDkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGNjOGFjZjkyMGVk
MDMxZjdkMTg4NGI1YzJlM2EwMGU4MTRlYWI3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7f1O4IAeMX279sR2328bv4xgxR6ARiiwG/lgqNYz65/UvD
rKmvS2TSNh57aWovh7AjZV9luE5mv2ADcQwMaOgKUH7OXghz+tF3U7z9QqUJQ7eV
Lj1vbhNDoPmZ687YaoqnOWN5L1RifHQ1KJHCni0nK4SDA6mzO33cY+DQ9cj0Xna2
ZA+CzPglTO/+GglFG5zTM2IOn8H02NTrs1OhNdKlQuL8sd3NyhsmMlRnNNrH8bOO
YRvEW9zAKyJcYYToeQCfJU2K8JpYFN2hEw9sFSKWJaOz5x8jtg5wD9D13bboLuxW
QcYwMuLRzY74J39/OUyjiFg7qNAheughNiMqGhcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQMyKz5IO0DH30YhLXC46AOgU6rdjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0RNaXMtU0R0QXg5OUdJUzF3dU9nRG9GT3EzWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAXdO3EGdB3G+lJ2gOAPZb2R2OH9+oGRdr4/cPC
81MTmvgEpYQpRUFYryECnvde4CLu+NXRkWgGdUm9I9qpX9UIY4d0cJ9xGZOmPHhN
WIVAlxI4C5hWlWqDvGgnj+qUWp2IMrp/OHEEK4lyW4H6DQIZRdmyx3pNR731cyOS
SenxOTrbRLX4nCOrKTES3MkyTB78ISeZ/gz59nknoY7NAUPmMSOE3f9ofhZOZjeU
lDwtQJL/lupoc1NCKzz3X1F4qzQCSZMNK0JcRA48weh/gXT87yEuhXfZ7js5hI1C
1zRexegRZqLLJBbzrEgLJaro3f5mrj+GCVO4DetXN/1wjCnx
-----END CERTIFICATE-----
Generated at Thu May 1 00:42:21 2025 by rpki-client