Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqSUr_MUWNUN2r7IGeCTkHtMDo.roa
File: DbqSUr_MUWNUN2r7IGeCTkHtMDo.roa (raw, json)
Hash identifier: V7kIem3CV/Wf0e1eLN7MnnzMt3yf+Gh8pdXrCFgDeBk=
Subject key identifier: 0D:BA:92:52:BF:CC:51:63:54:37:6A:FB:20:67:82:4E:41:ED:30:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F241EEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqSUr_MUWNUN2r7IGeCTkHtMDo.roa
Signing time: Thu 28 Apr 2022 05:12:48 +0000
ROA not before: Thu 28 Apr 2022 05:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133073646 (0x7f241eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 05:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dba9252bfcc516354376afb2067824e41ed303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:f8:8b:59:3f:c5:2b:cc:47:a0:bd:f4:92:
fc:66:59:af:56:c6:88:78:57:99:8b:d9:f1:d0:38:
6c:e3:93:62:03:f8:bc:d2:cd:c2:46:b5:3d:d3:e3:
ab:3b:69:45:1d:18:a4:c1:9f:15:13:5b:ff:8a:1b:
22:07:0b:f5:4f:d0:59:36:d4:3c:5a:04:20:82:16:
be:0f:d0:c6:44:4f:1e:6b:33:71:5b:ee:a8:2b:bf:
3d:2e:cf:86:63:2c:fd:36:9b:b7:75:39:9e:45:e9:
46:81:73:98:61:df:74:09:ee:31:08:95:32:12:7e:
b8:02:cf:1a:e2:3c:02:54:e3:13:af:02:fd:15:b4:
a8:0e:68:16:7f:29:99:95:f1:86:ae:a8:42:c1:49:
9f:ca:0a:ee:38:ff:1c:2f:f0:7e:c4:7c:0b:4e:c5:
cf:fe:99:fc:d6:c3:f1:c8:99:a9:e6:73:e0:74:83:
22:3e:b2:1d:20:bc:72:80:49:b0:c6:a4:a6:8e:5a:
b3:c7:ab:25:29:70:cc:e3:db:8f:3d:63:e1:53:e6:
9c:16:67:04:fb:74:4f:a8:1a:fd:81:ef:2c:2d:25:
69:ea:d9:e0:12:66:ca:51:2b:1d:92:a9:cd:db:5e:
cf:19:8e:1c:e0:e2:aa:36:69:08:e8:90:4e:bb:13:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:92:52:BF:CC:51:63:54:37:6A:FB:20:67:82:4E:41:ED:30:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DbqSUr_MUWNUN2r7IGeCTkHtMDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:22:a0:df:8b:18:8f:fb:7b:f9:a8:42:c3:b7:83:69:61:ac:
6c:1c:6c:2a:e7:d9:26:a9:97:7b:7a:6d:67:3b:61:96:83:0d:
d9:0b:61:e4:d9:b0:31:79:da:8b:d2:5b:09:6a:05:3e:80:f8:
1d:a9:34:1d:5f:8e:25:75:4c:fa:5d:f7:b3:55:fd:fd:dc:0e:
44:58:56:69:ac:a5:c3:55:52:30:7a:1f:d7:e8:d0:a2:a9:ba:
76:77:fa:c2:2c:21:96:7c:0e:35:ba:6e:48:25:87:74:38:30:
72:49:28:f4:6a:e3:86:8b:06:ea:ec:74:ca:b1:44:5d:cd:e0:
ab:02:64:c6:93:94:7f:8e:70:96:b0:e0:56:30:e8:01:65:0b:
c8:4d:a0:4e:ad:a6:d6:a5:a3:2f:e8:5c:08:f1:f5:a8:93:a2:
7e:b5:76:d0:52:9f:72:29:c4:b3:b6:1c:55:c0:4a:bc:e9:a9:
6e:a2:17:fd:52:64:ea:55:21:5e:fd:f8:85:84:e4:41:77:e8:
a9:56:f5:91:a9:ee:63:6b:d3:4c:ad:de:2c:44:04:03:b2:00:
ee:09:46:97:ae:c6:7a:2e:37:35:0c:12:c4:1b:9f:a3:b4:fb:
68:a4:2d:e1:90:b7:70:1e:6e:93:ae:ba:42:c8:76:c6:14:a9:
2c:e2:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:50 2025 by rpki-client