Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOvImTUVQWI0mYE5Xl5ZL5sqmv8.roa
File: DOvImTUVQWI0mYE5Xl5ZL5sqmv8.roa (raw, json)
Hash identifier: 5bby+gUfrI1YFN5WTzAg7XtyV7/K79/tqdv5+Ty5nzI=
Subject key identifier: 0C:EB:C8:99:35:15:41:62:34:99:81:39:5E:5E:59:2F:9B:2A:9A:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E0AFD3D390F7068361E1BBA1C134BB2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOvImTUVQWI0mYE5Xl5ZL5sqmv8.roa
Signing time: Mon 23 Jan 2023 22:11:37 +0000
ROA not before: Mon 23 Jan 2023 22:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:af:d3:d3:90:f7:06:83:61:e1:bb:a1:c1:34:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 22:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cebc89935154162349981395e5e592f9b2a9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:b6:1c:41:84:a4:fe:6d:a7:ca:63:b8:69:
05:b8:0c:30:19:6a:3a:b8:7c:3e:7f:aa:86:7a:98:
ac:9a:0a:c1:62:61:1a:12:bd:e7:c8:d1:02:5b:33:
b0:1f:65:b5:db:fa:e7:d6:2b:2a:92:64:f4:65:44:
30:7a:83:b5:f8:ba:2f:fa:04:cd:67:c9:47:82:63:
9e:26:e2:62:ef:17:65:9d:82:54:c1:58:2c:2e:2b:
10:2c:34:2c:ca:e6:a5:3f:6c:33:0d:b5:77:a0:cf:
21:29:33:c5:97:3a:be:30:90:fd:fe:40:ac:22:27:
3f:2e:35:e6:05:c4:f2:c7:9e:26:30:a2:0e:a9:8b:
4a:94:0a:e1:b7:26:61:61:4d:07:09:dc:77:fc:27:
68:f9:3c:94:f7:b3:c6:01:f9:86:ff:23:3c:e9:3d:
bf:2e:e8:85:d5:57:b8:d6:14:66:ae:ae:02:d6:61:
20:cd:3e:3a:dd:21:16:2f:f7:ee:de:c8:23:02:68:
d2:d1:73:50:59:eb:f4:a7:23:94:36:e9:e2:a7:d3:
74:18:55:c7:a7:e6:31:48:d0:f8:92:0f:f0:be:d5:
fc:31:10:bc:21:88:07:34:2f:34:54:49:a6:97:22:
a3:2d:74:36:bd:c7:1a:a0:ce:32:d9:42:de:34:3c:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:C8:99:35:15:41:62:34:99:81:39:5E:5E:59:2F:9B:2A:9A:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DOvImTUVQWI0mYE5Xl5ZL5sqmv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:0e:ee:f6:37:6a:0e:73:59:c0:cd:38:6b:70:4c:e9:80:17:
91:4b:ae:0a:64:f2:00:cc:9f:58:6b:cc:26:49:3a:b1:5f:f7:
d7:4d:24:dc:61:18:91:6d:ce:3f:cc:98:32:6a:c7:f7:59:50:
ba:e1:a1:e9:a4:af:e2:84:bf:67:b2:a4:2b:cf:4e:f0:c7:bc:
3b:7b:c6:6f:d9:a9:57:7c:f3:ba:7b:b0:0b:6b:6a:1d:4b:fd:
75:1b:b3:0c:71:a1:3d:77:66:7f:48:90:c0:b3:42:fa:69:1b:
4b:a2:f7:34:fc:f9:e3:2a:a8:7d:74:83:5f:f4:60:84:a2:4d:
e9:00:e7:5b:54:62:0c:76:19:90:0f:82:a4:41:5a:e7:98:fe:
08:e1:1a:ed:8d:a4:26:bb:4f:4f:60:39:43:a0:4f:6d:01:8d:
1b:d7:93:db:0a:53:5d:4a:45:f3:9b:9e:bc:9d:03:92:d0:01:
08:57:de:62:cc:6b:6b:ff:91:77:d8:6f:40:be:91:e0:2e:1e:
12:08:3e:fa:4c:bc:fd:fd:9c:fd:de:2e:9c:64:61:21:50:25:
ba:8a:61:c1:f5:c3:34:32:d8:22:3e:5e:4e:ca:ec:46:b6:a0:
51:e6:99:8d:f7:70:36:2f:1c:29:68:6a:2d:29:6b:b9:83:a7:
fa:cb:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:40 2025 by rpki-client