Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTE96NEUkzbmGQJG8dcivMZVEZE.roa
File: DTE96NEUkzbmGQJG8dcivMZVEZE.roa (raw, json)
Hash identifier: rv/12vJPkW9Vmkm+QbcS3WG/v5/KTxwPBEfRj3Uyi94=
Subject key identifier: 0D:31:3D:E8:D1:14:93:36:E6:19:02:46:F1:D7:22:BC:C6:55:11:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018405D36C07F9C315DB53D4267F55491DE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTE96NEUkzbmGQJG8dcivMZVEZE.roa
Signing time: Sun 23 Oct 2022 17:10:52 +0000
ROA not before: Sun 23 Oct 2022 17:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:d3:6c:07:f9:c3:15:db:53:d4:26:7f:55:49:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 17:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d313de8d1149336e6190246f1d722bcc6551191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:9e:04:ab:de:1b:03:b9:86:e2:ef:48:03:
69:26:22:fd:69:e2:32:bd:b1:60:95:bf:b9:db:54:
79:73:35:fe:1b:32:0c:74:7f:46:b3:65:b6:b4:0e:
39:72:a7:6d:d0:68:7d:83:6b:97:b9:d6:2d:46:80:
0d:fe:de:37:1a:ca:63:89:32:71:c5:dc:ad:f5:94:
72:51:3f:20:16:cc:dc:95:9d:e5:50:ce:2c:8b:24:
67:0e:dc:91:f7:d3:08:18:d6:33:c5:79:81:a7:6d:
7f:ce:dc:9f:d5:e6:6d:12:c9:36:57:c2:99:02:8a:
fa:b9:3c:0f:ac:bf:7e:df:01:a3:b7:8b:8e:13:53:
de:7c:55:9c:96:e2:51:32:0e:bf:52:74:90:77:2f:
dc:2f:34:7c:c1:4f:de:c9:2f:e4:e5:2d:75:66:e4:
d8:25:e8:58:53:3d:59:2d:45:ee:65:d0:3a:14:6c:
ad:aa:a2:40:e2:4b:2a:b1:34:99:4f:ce:11:13:65:
7c:96:f2:3b:3d:7f:cb:a5:b1:27:c6:ac:12:33:3b:
18:13:3d:a8:f4:c9:e9:4a:da:a8:a4:f7:20:39:21:
b8:4e:c9:da:de:76:94:da:25:59:47:50:5a:19:65:
4c:80:c8:9c:dc:3b:26:8b:ed:08:9c:c2:e1:2c:cb:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:3D:E8:D1:14:93:36:E6:19:02:46:F1:D7:22:BC:C6:55:11:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTE96NEUkzbmGQJG8dcivMZVEZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:b5:34:96:94:25:31:c5:1f:4f:81:a9:6c:2a:5f:a1:aa:c0:
84:9c:36:5f:2c:ab:a2:eb:02:4f:aa:1a:37:b5:10:72:35:2b:
9b:9c:43:7a:9c:1f:64:7b:c1:ec:11:0f:bc:17:a1:5f:22:30:
40:1a:ff:b3:78:4c:a6:16:9b:75:da:5e:a9:a7:b4:e1:91:1c:
b8:af:fc:37:18:b8:64:48:43:c6:a6:bc:c8:cb:df:2e:89:2c:
34:22:0b:18:a3:72:8d:d4:a5:9d:5b:3e:7b:e3:ad:59:5a:ad:
0b:0d:f1:cd:de:14:39:c9:ea:a7:3a:96:e0:fd:58:5f:a5:2d:
0b:c2:3f:8a:18:a8:f2:98:3f:c2:c1:7f:5c:22:50:8b:ff:13:
79:62:9c:c5:b6:be:10:47:0c:6a:59:5f:90:c7:eb:1b:72:44:
55:6b:48:9e:9e:6a:89:7b:72:f0:16:34:b0:79:95:5e:ed:b3:
f7:28:e3:20:28:73:7d:61:68:e3:cc:f0:35:49:f6:f6:75:2e:
9a:a1:fa:aa:d3:41:e2:eb:b9:cd:6c:dc:05:18:0f:c6:a0:31:
7f:18:7c:0b:9d:77:40:9a:d6:89:0c:a1:77:b5:3a:a3:38:c1:
00:aa:d5:b5:8d:b9:8d:3a:25:9b:a6:78:9a:e8:35:62:ce:94:
ee:f1:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:48:37 2025 by rpki-client