Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSnF9DzX3782fz_C6p9Y1lCH31I.roa
File: DSnF9DzX3782fz_C6p9Y1lCH31I.roa (raw, json)
Hash identifier: Eypj9VwBQv6Zy2LW629p7NVqVyNwp/3KA2RSfhjNKbo=
Subject key identifier: 0D:29:C5:F4:3C:D7:DF:BF:36:7F:3F:C2:EA:9F:58:D6:50:87:DF:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6ED71C93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSnF9DzX3782fz_C6p9Y1lCH31I.roa
Signing time: Tue 01 Mar 2022 20:08:32 +0000
ROA not before: Tue 01 Mar 2022 20:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859591315 (0x6ed71c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 20:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d29c5f43cd7dfbf367f3fc2ea9f58d65087df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:5e:5b:1e:1e:d7:67:3c:b0:08:56:c8:ed:
50:58:99:84:dd:75:fe:7f:e1:45:9b:9c:91:02:39:
f5:54:ad:89:65:83:80:1f:77:31:41:b2:0d:41:2f:
dc:cf:4c:ba:a8:14:78:fc:0c:61:92:05:43:0f:36:
d9:39:11:c1:fe:b2:18:0c:b4:a3:54:8e:7c:4b:75:
f9:98:b0:07:db:33:ac:38:80:40:5c:a2:76:45:cd:
8e:64:d2:bc:eb:a2:bf:51:c6:20:f4:6b:7d:46:45:
10:ba:e9:9e:c6:bc:95:3b:2e:95:b9:94:32:9e:0f:
f3:1c:11:d6:c4:1c:9a:6d:c7:d6:3d:1a:f0:a2:86:
46:81:29:f9:1c:d2:84:68:25:3c:e4:92:a7:58:c1:
40:0d:b2:45:4f:9a:b8:a8:44:c3:51:ff:30:a6:d3:
fd:88:32:cd:fb:05:6f:87:e6:04:f3:e4:54:ce:42:
7c:6a:93:e4:2f:8e:05:c8:df:66:12:3c:70:bc:22:
ad:61:ef:74:b5:53:57:7d:58:35:28:3c:3a:5a:da:
f6:fd:de:b3:68:b9:fd:c2:ca:4d:5d:e5:4c:82:74:
01:4f:07:dd:4f:bf:b9:6d:db:91:d4:12:fa:ee:09:
4c:61:a0:89:9d:19:e1:f4:b4:e3:ab:04:76:2e:7d:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:C5:F4:3C:D7:DF:BF:36:7F:3F:C2:EA:9F:58:D6:50:87:DF:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSnF9DzX3782fz_C6p9Y1lCH31I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:70:86:4d:87:f4:dc:e7:a8:a3:7a:39:e9:fc:16:df:1c:93:
dc:73:52:80:42:fb:64:44:b1:93:a2:03:ff:44:b2:b8:ba:cd:
da:d8:a6:06:56:3d:7d:c7:b7:a1:87:1c:bf:30:96:a4:03:3b:
ff:e3:28:e7:b3:8c:49:85:46:75:73:f2:cb:bf:81:0a:94:8d:
5c:ce:03:9a:cc:40:e0:28:db:81:71:c4:b3:df:c3:a3:95:4f:
33:f2:50:1f:5b:32:fd:dc:cb:12:dd:3a:12:51:f2:fe:cd:74:
86:83:a0:ba:00:fc:7a:0f:84:d9:5a:84:a1:73:f7:f6:b8:b1:
e3:68:5d:71:fa:ec:4c:b6:e1:30:cf:6a:eb:09:ef:db:de:2b:
7a:66:82:95:23:bd:a4:5c:60:87:dc:e3:3e:6f:e1:b9:1f:8e:
ac:6d:64:42:7c:00:cc:85:85:b5:70:df:4c:3f:75:cb:d5:9b:
0e:27:90:ab:27:a2:4b:e6:5a:e7:74:ac:85:a6:fb:e8:cf:d1:
5d:54:26:7e:23:a3:42:e4:f1:07:14:e3:40:a1:a0:e6:c2:f5:
73:99:90:d0:a7:1a:80:ad:1d:cb:79:94:bc:0d:fa:28:85:80:
96:44:da:a4:a2:11:db:81:e0:a9:e5:b8:2c:c8:2a:25:ec:94:
0d:eb:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:23:12 2025 by rpki-client