Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOPqKdf_IaZg3G7AItGHN1RQAqk.roa
File: DOPqKdf_IaZg3G7AItGHN1RQAqk.roa (raw, json)
Hash identifier: ENrrXqazEYESXSC/JHUZB8dmPV8YPB7CKpiew7AYk+o=
Subject key identifier: 0C:E3:EA:29:D7:FF:21:A6:60:DC:6E:C0:22:D1:87:37:54:50:02:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185559DC8689DBE5FFC98DF3D067363F9BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOPqKdf_IaZg3G7AItGHN1RQAqk.roa
Signing time: Tue 27 Dec 2022 22:04:41 +0000
ROA not before: Tue 27 Dec 2022 22:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:559d:6026/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:9d:c8:68:9d:be:5f:fc:98:df:3d:06:73:63:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 22:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ce3ea29d7ff21a660dc6ec022d18737545002a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:98:93:5c:fa:95:d9:11:29:7c:a5:49:ee:
d4:7b:0e:0c:a2:12:d1:c2:48:eb:da:07:83:5c:37:
cd:00:dd:7c:85:f9:2d:0d:c4:03:55:a6:8b:c2:cf:
f2:59:b9:35:c1:14:29:8f:0b:cd:e9:7c:71:4d:72:
ca:17:4f:83:2d:5c:91:1c:82:41:41:f7:c9:15:c7:
6e:14:a9:49:f4:af:a9:5f:c4:11:6c:b4:25:47:11:
39:4d:a8:9c:74:ad:73:8b:e4:98:7a:ed:3b:3a:bd:
07:14:1b:d7:06:71:9d:9f:ab:c7:66:a5:6e:e9:bc:
2f:ec:ee:ee:6a:80:52:6b:f1:b7:00:e2:87:ff:30:
ae:2a:54:32:1e:70:93:e3:9c:cc:64:63:47:61:38:
f7:ea:07:ca:dd:17:8b:26:39:b7:4e:1d:fd:8c:32:
b8:a2:12:b5:e4:bb:3f:ab:1b:62:e5:ef:ae:af:6d:
da:8b:48:b5:17:48:e3:85:4a:58:57:1e:44:2b:ed:
a6:44:dc:61:76:4e:e2:e8:d9:10:5d:06:c5:c4:8d:
a1:d8:0e:da:94:08:3a:ac:da:e9:80:16:52:52:02:
07:94:e6:ec:58:e6:b4:e2:46:82:6b:2c:28:f2:3c:
ff:3f:89:85:a3:20:a3:9b:c9:8e:f6:69:b0:a4:e5:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:EA:29:D7:FF:21:A6:60:DC:6E:C0:22:D1:87:37:54:50:02:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOPqKdf_IaZg3G7AItGHN1RQAqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:ef:8a:9b:74:e1:62:f7:30:0e:0a:5a:21:0b:c9:4b:22:16:
fd:63:de:96:ae:a8:f7:29:5e:74:fc:fb:72:f9:64:a6:5a:b7:
67:cc:83:f2:c9:a6:8a:b9:5a:f0:7f:ba:16:a5:a5:54:ac:1d:
c6:b2:f1:89:ad:cb:b6:03:08:de:13:a3:78:bb:c5:20:82:99:
62:4d:f0:ba:ca:f6:9a:a6:1f:5d:e4:09:e3:22:c3:9d:b0:31:
ec:9c:42:57:85:dc:53:4e:fb:42:12:05:f9:82:39:0e:a3:d5:
82:85:5c:42:35:5e:15:3a:e6:5d:9e:b1:bd:33:01:8e:61:7c:
a2:39:32:07:85:4f:25:8a:0c:e6:1e:64:3b:c8:19:72:1d:5e:
2c:90:bf:29:a1:7a:ef:ff:db:92:a2:0f:ad:f4:4a:b0:da:6a:
24:52:4f:da:f8:05:ff:e7:ba:95:48:a2:ef:e0:4c:d4:e6:98:
fb:da:1c:d3:8e:94:5e:3c:ed:e7:4d:d5:ad:60:f3:0c:35:62:
bc:2e:a7:c7:f5:97:ac:e4:20:d1:1b:0e:3f:6e:f4:0d:d3:c5:
68:59:4a:19:2d:9a:8d:d1:0e:4c:8d:a4:a2:5c:3c:e6:74:c7:
30:03:68:a5:00:0a:9a:54:83:bc:44:25:ea:40:24:9a:a6:de:
12:ee:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:30 2025 by rpki-client