Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTaTbrl0KGz1fQM-7MPNKmoTv1k.roa
File: DTaTbrl0KGz1fQM-7MPNKmoTv1k.roa (raw, json)
Hash identifier: a/09T2IrDbVugRAd4XA9TuJZlIqWVgSvY3z7toM8cQ4=
Subject key identifier: 0D:36:93:6E:B9:74:28:6C:F5:7D:03:3E:EC:C3:CD:2A:6A:13:BF:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E07B50CCD46A3ECC984623D33FA3A629
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTaTbrl0KGz1fQM-7MPNKmoTv1k.roa
Signing time: Mon 05 Dec 2022 04:11:28 +0000
ROA not before: Mon 05 Dec 2022 04:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:7b:50:cc:d4:6a:3e:cc:98:46:23:d3:3f:a3:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 04:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d36936eb974286cf57d033eecc3cd2a6a13bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:4f:46:ad:8b:5a:a9:93:5f:a6:a0:bc:65:
73:f1:1c:9d:19:4c:98:db:9b:f7:a5:62:3a:83:c0:
ec:4c:37:f3:b6:1f:2b:ae:63:f1:15:4e:91:f7:32:
7d:c6:a9:d9:8a:81:5d:ba:8f:12:0e:76:8d:c1:61:
72:0c:26:42:9d:ea:c2:c7:08:7c:6e:97:6f:92:89:
30:d5:90:0f:6f:0c:62:59:af:30:25:41:77:e9:80:
3d:f7:dc:90:6c:76:72:b4:96:47:5a:2a:83:cc:01:
1c:32:93:f2:7b:c6:d9:be:19:ce:27:e4:e9:6f:05:
0b:73:6e:28:04:50:01:d3:b1:04:7e:76:39:4f:d4:
70:92:3b:9d:0e:90:ee:4a:42:3f:87:20:42:32:09:
08:49:f9:44:25:32:14:e7:b2:9b:23:4e:94:7e:81:
f0:eb:a0:10:73:8a:eb:13:16:b4:f3:71:e0:07:54:
4f:4d:21:1d:44:e5:22:f1:1e:e8:11:c1:65:70:62:
08:59:e4:b2:ea:2f:6e:f5:43:1a:b8:d1:62:13:5b:
74:05:bf:59:7f:26:ae:23:9b:22:b8:00:09:f2:de:
73:0e:da:5c:eb:b7:ee:56:4a:05:22:d1:f0:14:ce:
3f:a2:ad:32:2d:f0:af:86:69:14:a7:3e:08:d5:2b:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:93:6E:B9:74:28:6C:F5:7D:03:3E:EC:C3:CD:2A:6A:13:BF:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DTaTbrl0KGz1fQM-7MPNKmoTv1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:34:6e:2d:21:d8:6e:5a:d9:f0:cb:40:b9:2f:bc:80:ad:50:
cb:9a:46:32:b4:96:22:60:34:04:dc:87:6f:c2:fd:9c:39:ed:
bf:46:c2:ea:c4:74:7f:77:6e:e4:7e:eb:77:b9:75:57:5d:84:
71:10:c1:c5:93:3f:10:74:15:d2:26:76:d1:5e:35:23:9d:dc:
e1:d0:8b:91:25:4b:72:9e:0e:5f:2b:d6:4d:e9:09:36:b9:52:
78:74:52:83:49:4a:78:ba:ba:ff:95:f8:fa:f1:24:13:9a:53:
cb:ad:a2:75:90:ba:0c:d9:a2:10:58:0f:34:9b:d5:5b:ae:95:
b1:0f:a6:ce:93:c0:b2:b8:60:51:9a:ad:1d:c9:dd:be:58:c5:
78:75:f4:6d:cb:36:de:b1:45:b2:e8:39:0e:1e:79:4c:90:d9:
b2:c6:3b:ba:94:49:36:6f:76:d6:86:92:c7:a8:55:aa:c2:86:
d4:65:b3:a3:d0:28:b1:54:f6:c2:0e:34:4e:d2:63:b4:82:40:
74:f5:80:27:0c:ec:32:1b:53:c3:9f:97:14:7e:7e:bd:ee:61:
22:4f:51:af:b0:17:8a:ff:62:52:e6:05:cb:5d:25:9e:16:17:
aa:b7:cd:75:d1:89:a5:16:a9:dd:20:ad:c9:85:3c:2e:6c:f9:
42:48:1d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:31:26 2025 by rpki-client