Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbHri6ePUAANneNkYT7dfIyYf4U.roa
File: DbHri6ePUAANneNkYT7dfIyYf4U.roa (raw, json)
Hash identifier: 3D/CWOZv6KHcqYTF9vEnBFG2AVW2Oz2dYnhuFaYFG14=
Subject key identifier: 0D:B1:EB:8B:A7:8F:50:00:0D:9D:E3:64:61:3E:DD:7C:8C:98:7F:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79B3B6A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbHri6ePUAANneNkYT7dfIyYf4U.roa
Signing time: Sat 09 Apr 2022 01:10:20 +0000
ROA not before: Sat 09 Apr 2022 01:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041820835 (0x79b3b6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 01:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0db1eb8ba78f50000d9de364613edd7c8c987f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:b0:30:55:7e:5d:e4:7a:92:1a:23:fd:38:
a1:ee:12:59:4b:f1:9a:02:4a:91:74:bc:07:4e:e6:
02:f7:66:6f:d8:21:e4:a7:90:16:b1:d2:3a:01:13:
42:64:cb:e3:eb:a5:9d:c3:74:26:1d:1a:16:16:ec:
72:f1:a6:2d:c4:71:f4:e2:00:cf:e4:16:87:9c:b9:
e7:e3:cb:14:05:c0:ee:62:39:97:28:f4:aa:6f:c9:
6b:99:42:bf:bc:46:16:d2:87:07:f1:68:18:72:40:
9f:8f:4c:67:e6:86:e3:12:3b:0c:05:39:bc:fd:b3:
0e:bc:b5:a8:c9:71:56:55:f1:f3:e1:b7:b5:c4:bc:
a5:90:e4:f5:9b:6e:49:28:18:db:1c:1a:a3:47:42:
08:77:4d:4d:8f:ab:6e:e8:21:e0:62:c5:55:65:9b:
c4:83:c4:28:7a:3b:7a:6d:b0:4d:8f:86:ab:df:9d:
dc:aa:60:01:82:98:24:46:4c:79:8c:16:2b:c2:b9:
93:67:f4:4c:fc:60:e5:7a:e9:4c:93:dd:79:2c:f2:
3d:14:df:16:ec:50:21:22:cc:4d:12:bc:d4:aa:f7:
77:56:41:4e:9b:80:68:87:d2:ce:07:a9:3d:19:e4:
3e:d5:26:98:bd:62:a8:2f:b0:9f:51:05:c0:47:ed:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B1:EB:8B:A7:8F:50:00:0D:9D:E3:64:61:3E:DD:7C:8C:98:7F:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbHri6ePUAANneNkYT7dfIyYf4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:4c:70:18:84:5b:d2:a3:41:5d:e5:2a:11:2d:92:09:02:d8:
ce:93:47:ca:b5:11:b6:d9:aa:c9:9c:8d:24:03:73:64:a7:51:
24:1e:65:67:74:a9:fb:83:9a:07:bd:1a:f1:10:b1:52:f7:85:
db:fe:45:68:93:90:9c:de:6f:c1:28:9e:cf:9c:20:8a:44:87:
41:19:b2:e1:dc:db:44:b6:a4:f7:97:34:b9:5c:54:c9:a4:b5:
33:06:35:60:d9:0a:7d:20:e6:af:39:c4:6b:01:67:f0:e4:cf:
76:04:88:5c:22:44:b9:b8:11:65:41:84:93:20:ee:e9:fd:a1:
82:c4:d3:f4:d0:90:ce:2f:27:3a:ab:d2:37:d2:9d:24:61:bd:
82:69:02:1c:78:01:47:77:4f:cb:e5:60:f6:96:e2:50:1a:5b:
14:93:e2:29:d0:11:38:25:fd:55:40:af:c4:8e:68:4e:aa:3b:
a5:41:c6:52:d1:aa:46:ea:af:6b:ed:61:ed:a5:55:29:ef:9f:
43:1a:e9:ed:80:25:0f:56:b4:7b:70:88:da:2b:17:b8:db:0b:
ed:fc:ab:17:3b:61:f1:80:d9:5b:50:0d:6f:c6:c0:b7:a2:2d:
84:56:bc:27:bb:1b:80:b9:18:9b:99:33:b5:0c:b2:f5:3f:08:
a7:b9:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:22:16 2025 by rpki-client