Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DkVF760o91_qOb0CNLdFWtj71Cs.roa
File: DkVF760o91_qOb0CNLdFWtj71Cs.roa (raw, json)
Hash identifier: L6Lx8sKCBZ8gr5PNsIf3/p66oGD2hWj6GEzk9sxZJXY=
Subject key identifier: 0E:45:45:EF:AD:28:F7:5F:EA:39:BD:02:34:B7:45:5A:D8:FB:D4:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C0F678E67C32AEB39B8B51F069B3AC68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DkVF760o91_qOb0CNLdFWtj71Cs.roa
Signing time: Mon 10 Oct 2022 08:15:21 +0000
ROA not before: Mon 10 Oct 2022 08:15:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:f6:78:e6:7c:32:ae:b3:9b:8b:51:f0:69:b3:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 08:15:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e4545efad28f75fea39bd0234b7455ad8fbd42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:1d:81:58:57:92:95:ff:9d:45:63:ac:e7:
0a:76:22:72:0a:74:a0:f6:24:1e:13:be:c1:6b:ff:
4f:33:81:ee:35:d8:5a:1d:64:b0:c7:b6:25:6a:8b:
17:c8:9f:cd:fd:ef:8e:4b:10:6d:e4:03:01:fa:b4:
86:6d:a8:d7:7a:05:c8:a8:ef:f4:32:c4:31:a0:63:
04:9f:da:99:38:92:15:33:92:ff:95:ba:00:c1:2b:
af:77:8b:0f:e9:4e:ef:a1:3b:ab:46:61:93:7a:b8:
e8:f8:16:36:bb:73:af:81:58:4c:08:f9:81:33:52:
b3:77:c5:12:67:13:c7:bc:55:31:21:c2:df:c7:1d:
02:28:08:86:99:ae:d6:1e:4e:04:b7:65:74:ac:25:
c1:4a:8f:3d:27:c9:27:bf:8e:b8:41:06:5f:b0:ba:
67:79:eb:c3:42:38:af:c5:7d:14:fb:38:4e:3a:aa:
5e:58:07:59:58:45:d5:d7:24:c2:c7:d1:af:da:99:
a0:50:65:26:35:41:d0:c7:3f:3e:d2:83:1b:c4:55:
2a:01:60:a6:d1:15:be:41:03:f7:bc:d6:3a:30:71:
6e:f0:51:7a:73:02:4e:3d:1d:be:ad:56:24:2f:08:
3a:17:3e:71:63:39:6c:32:56:f9:f1:74:02:db:18:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:45:EF:AD:28:F7:5F:EA:39:BD:02:34:B7:45:5A:D8:FB:D4:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DkVF760o91_qOb0CNLdFWtj71Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:ba:af:07:a0:44:c0:e8:5f:ba:19:11:f1:6e:4a:1d:18:ca:
50:65:3c:cf:b8:c3:95:f1:3e:bc:5b:68:af:3d:0d:96:71:c8:
a4:36:94:f2:1c:cd:3c:b2:33:2a:ba:00:11:05:1b:d8:a7:2e:
86:92:5b:31:48:da:1b:dd:3d:9b:22:3a:95:ca:bc:0e:f1:1c:
68:a6:93:41:65:75:8e:37:34:b2:a1:e9:ac:73:e4:67:ae:c6:
8c:1c:4b:07:c0:0a:d1:dc:3d:6d:b0:4c:03:dd:88:31:69:43:
9f:17:d9:66:06:0c:85:40:d8:c7:b9:41:9f:0d:15:17:80:81:
9c:02:68:61:9f:63:8b:04:52:44:25:9d:c7:e2:d3:d7:d1:7f:
ce:1e:d1:3a:31:60:3c:ea:22:e5:ca:62:a0:81:8d:51:b0:74:
99:f1:ce:ec:b7:1f:d5:2c:b4:37:a7:68:b4:ea:64:54:67:68:
83:19:e0:e9:ae:53:28:dd:e4:80:6f:20:04:36:81:33:31:a8:
15:6d:00:02:8a:65:d2:0c:1e:89:31:db:8f:4b:0e:40:00:84:
e4:d6:fd:a8:0c:4e:c7:09:98:bf:07:75:b2:10:00:c5:26:b2:
8b:c0:d9:94:9d:a5:21:8e:cd:0f:e9:88:2b:b9:7f:83:07:d8:
42:95:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:35:54 2025 by rpki-client