Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DQGUR8Ev-Y-V9FIeVGQK30NP3g8.roa
File: DQGUR8Ev-Y-V9FIeVGQK30NP3g8.roa (raw, json)
Hash identifier: MY8Rzljz89wuimz1zb86oj6kjrNa24YSEB1FEERcBZo=
Subject key identifier: 0D:01:94:47:C1:2F:F9:8F:95:F4:52:1E:54:64:0A:DF:43:4F:DE:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864365C3FE49A14EF420D562945CF33952
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DQGUR8Ev-Y-V9FIeVGQK30NP3g8.roa
Signing time: Sun 12 Feb 2023 02:13:08 +0000
ROA not before: Sun 12 Feb 2023 02:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:43:65:c3:fe:49:a1:4e:f4:20:d5:62:94:5c:f3:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 02:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d019447c12ff98f95f4521e54640adf434fde0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:0b:a3:56:ad:1c:e7:f6:8e:df:07:7e:84:
da:9e:8c:7a:66:86:26:78:22:53:ec:f9:9f:81:56:
a1:a5:a4:51:61:17:0f:fc:bc:90:cd:b4:c1:ff:37:
ed:9b:9c:97:15:b3:b2:75:5e:d4:4f:33:67:74:de:
c6:3e:ce:6c:7b:c9:0f:88:57:6c:a8:e5:68:c4:b3:
9a:1d:12:fc:50:bf:d1:ca:5f:2d:5d:67:ae:3a:e3:
24:c0:92:bd:93:dc:5b:c0:bc:73:34:01:96:b7:b0:
3f:7c:df:a0:22:cd:41:a2:d0:22:ad:3e:18:82:4b:
74:74:68:af:03:2b:8b:6c:67:de:09:01:8d:91:76:
27:74:e6:63:89:32:92:28:12:c0:29:da:94:c6:be:
b6:07:16:71:cf:2c:a3:f9:42:5e:17:8d:51:67:eb:
74:40:fb:06:e4:9c:07:51:25:04:52:7e:40:12:fe:
c8:6d:52:53:a9:81:15:8e:3b:0d:81:1f:bd:15:35:
1d:0e:e1:80:4f:8c:a9:9d:ed:06:24:04:b2:cf:fb:
0d:41:d7:d2:fa:87:27:ec:82:7f:91:a2:72:2b:a2:
26:93:c8:d4:9d:b5:6a:f5:d1:65:ab:d0:70:ba:ca:
7f:f4:fb:80:8c:c3:b0:44:88:9a:05:8a:b9:24:83:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:94:47:C1:2F:F9:8F:95:F4:52:1E:54:64:0A:DF:43:4F:DE:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DQGUR8Ev-Y-V9FIeVGQK30NP3g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:5e:e5:84:2d:40:2a:6d:51:53:65:99:a8:87:04:45:40:15:
66:2f:a9:38:68:e5:e6:12:f4:66:ee:d4:dd:f5:65:74:e1:ea:
ce:6b:58:fe:fc:b4:35:60:09:da:49:c4:01:c0:9e:8f:72:4a:
5d:1d:cb:6f:71:84:d0:9a:12:05:33:39:a8:be:97:d5:05:81:
40:45:03:ad:a4:6b:65:72:7e:98:f1:73:98:68:be:93:2e:4d:
97:11:1b:ab:52:0c:58:4f:07:ca:7d:e0:bf:55:02:cc:22:01:
3b:a4:80:f1:a5:7a:a8:bd:3a:64:af:3d:5f:d6:2b:32:64:35:
76:cf:5e:32:57:36:df:ae:f1:93:2e:ca:59:c2:68:d5:6b:96:
b2:3a:dd:73:5c:0f:34:ba:dd:96:d9:4b:53:d9:8d:0a:98:a9:
43:cf:d7:ae:60:f5:65:e7:d8:19:b5:a0:18:90:e1:2e:5f:3c:
d0:7b:e9:df:6b:da:b1:d1:44:a8:ce:65:27:ed:74:99:6a:af:
1c:5c:22:b7:c9:c5:ac:4d:27:80:e0:9d:ca:b6:92:32:2c:4d:
5f:45:f1:eb:e9:63:9c:f8:5a:19:1c:c6:9b:5e:13:f5:5f:d7:
30:87:13:50:0a:ec:60:1e:6e:48:e6:45:58:d9:d6:2c:64:0e:
00:05:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:13:43 2025 by rpki-client