Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DO_qiipzknt2wuMFpWe91KlEjyA.roa
File: DO_qiipzknt2wuMFpWe91KlEjyA.roa (raw, json)
Hash identifier: w7GkrM+0N8Ua1gz4hDsuklbZ/71ANAxEFjSDMP8Vau0=
Subject key identifier: 0C:EF:EA:8A:2A:73:92:7B:76:C2:E3:05:A5:67:BD:D4:A9:44:8F:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D1E42633AD5530DD326E56AB98F43E09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DO_qiipzknt2wuMFpWe91KlEjyA.roa
Signing time: Fri 02 Dec 2022 08:11:40 +0000
ROA not before: Fri 02 Dec 2022 08:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:e4:26:33:ad:55:30:dd:32:6e:56:ab:98:f4:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 08:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cefea8a2a73927b76c2e305a567bdd4a9448f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:96:8c:bc:ec:38:be:f6:dd:50:39:2c:42:
36:c6:f9:29:78:6a:4c:5a:4f:8f:3c:2a:b7:5b:eb:
fe:e0:e5:cd:cb:46:c6:da:63:89:9c:10:89:45:99:
8d:21:f4:b0:cc:be:3e:5e:6e:99:6a:cd:8e:1b:95:
33:29:74:2c:d6:d3:93:e0:fb:eb:8b:14:c4:a1:af:
dd:31:b5:cc:8a:e5:ab:88:55:f6:a6:1a:5a:4d:d0:
30:63:f4:6b:2a:e7:d1:16:28:54:a4:fc:f0:42:bb:
32:73:fc:b8:68:d8:8d:ff:a2:d2:38:b4:4b:bd:4e:
5c:e0:b1:6c:f3:5d:91:66:b3:6b:e5:dc:99:38:ec:
a0:cd:11:ae:c1:92:8c:77:cd:99:78:97:b7:66:1c:
a7:dd:91:56:60:bb:1d:bd:1b:b3:30:54:b5:86:b6:
a1:11:2a:4c:51:8f:24:32:a2:69:ab:ef:69:3f:42:
ad:21:79:1e:5b:31:cd:cf:88:0b:89:13:b9:15:0d:
fc:b1:e6:2f:1d:b7:1c:e7:a9:8f:98:14:40:fd:03:
7c:1f:df:94:39:c9:16:3e:61:e1:4f:4d:a5:2c:f6:
f5:4b:9c:68:a6:ef:db:50:df:c2:8c:46:b8:ec:5b:
72:32:a9:ea:09:92:6e:07:34:e7:69:aa:76:b7:4c:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:EA:8A:2A:73:92:7B:76:C2:E3:05:A5:67:BD:D4:A9:44:8F:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DO_qiipzknt2wuMFpWe91KlEjyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:45:84:65:92:1b:ca:47:ca:00:8b:50:f0:03:30:81:d8:e4:
b6:f1:58:21:e7:f5:0a:5e:5b:83:4b:c6:02:cf:c4:4c:80:63:
cd:42:a2:49:bb:17:05:29:71:99:47:8f:b2:74:8b:fd:b9:e4:
e0:7f:d6:ee:7b:c9:39:28:98:bf:29:e2:8c:b0:4a:15:d4:64:
01:3f:7b:95:f8:cb:09:0e:35:f1:8e:31:76:b3:5b:fc:77:ea:
c0:5c:17:dc:dc:de:4e:7f:d2:df:b1:e9:a7:c7:a8:04:80:78:
9c:cf:1a:72:86:16:1a:35:75:1a:6f:20:55:5c:d0:53:11:33:
8e:0e:4a:83:84:f1:9a:d0:7d:9c:ec:ce:3b:ce:d5:42:ab:77:
0a:d8:70:69:cc:60:e2:bd:f5:6c:13:fc:31:ed:58:18:4a:4f:
8d:90:78:31:4d:5b:14:64:7c:00:6e:9e:07:8d:4b:94:00:16:
7b:7d:30:8e:de:3d:21:6e:56:a0:37:9b:52:ef:34:c3:16:91:
35:1d:75:60:e2:28:48:37:05:a5:0d:22:79:05:18:74:0c:91:
cd:92:64:7a:b1:84:61:d5:cb:fc:8a:13:6b:f4:cb:16:ee:48:
2f:56:63:91:53:9f:9f:70:7c:9a:2f:f6:2c:ac:eb:ec:84:1f:
87:cc:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:34:39 2025 by rpki-client