Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmc2weX9G-8P5bFIcu4XE0_pYkc.roa
File: Dmc2weX9G-8P5bFIcu4XE0_pYkc.roa (raw, json)
Hash identifier: 4AY/HXRmve/7TfGQBjr4qwZZNumbyAx64gBOgwPb5pQ=
Subject key identifier: 0E:67:36:C1:E5:FD:1B:EF:0F:E5:B1:48:72:EE:17:13:4F:E9:62:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7044BFD1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmc2weX9G-8P5bFIcu4XE0_pYkc.roa
Signing time: Sun 06 Mar 2022 18:09:27 +0000
ROA not before: Sun 06 Mar 2022 18:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883553745 (0x7044bfd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 18:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e6736c1e5fd1bef0fe5b14872ee17134fe96247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:c7:54:61:0a:7b:97:57:f7:f0:5b:0d:18:
a5:66:c8:7c:cd:7d:40:8a:2d:59:17:b5:c3:44:2b:
a8:18:5a:44:bd:e4:94:5b:1a:ec:97:66:5c:82:53:
38:08:a7:18:fa:bb:66:83:65:63:08:09:e7:62:d6:
2e:32:21:36:fd:31:72:83:17:f4:9c:99:4f:32:5f:
27:ee:ad:c0:c6:fa:b9:d0:d5:af:c2:2f:aa:f2:99:
d8:72:67:56:96:2a:39:cb:e7:9c:04:28:98:20:32:
63:a5:6c:fd:71:0c:6f:87:d2:bf:90:f0:c9:80:ef:
b5:44:8e:e3:57:d3:13:4a:a5:a2:4f:9a:f5:07:cf:
eb:fa:5b:98:d9:00:9e:55:bf:dc:c1:73:90:a1:b2:
8b:4f:8a:22:11:2c:36:2c:ed:79:d9:33:84:1e:30:
9b:4b:b6:89:c9:19:d8:ab:2d:06:52:44:9f:08:bb:
2f:dc:86:97:94:3d:7c:4a:a4:42:79:27:18:7d:08:
33:83:2a:0e:60:ff:ad:a5:d7:b5:8b:f9:1d:d7:5d:
b9:96:18:bd:53:65:25:70:55:8a:28:fb:5c:79:25:
fd:e6:1b:ca:92:c0:4d:12:99:c1:95:8c:52:03:1e:
e9:d6:16:3b:6b:7e:7b:13:11:21:47:33:da:b7:44:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:36:C1:E5:FD:1B:EF:0F:E5:B1:48:72:EE:17:13:4F:E9:62:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dmc2weX9G-8P5bFIcu4XE0_pYkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:6c:0b:e6:63:dc:c7:a7:b0:d6:15:c2:ff:bc:2b:ab:13:f4:
41:59:01:86:ff:60:7f:24:b0:4a:55:ee:fc:97:cd:6c:3e:a5:
2f:5c:94:21:70:69:d1:05:f7:37:a0:53:4c:a9:0d:c4:41:68:
cb:55:32:fc:37:12:48:bb:bb:aa:15:ec:17:cd:bf:60:3d:d7:
e8:13:55:c9:75:0d:8b:a4:80:e3:a9:f6:da:26:b7:fa:36:5f:
08:bb:59:b7:0f:20:e8:06:b7:bd:bd:e7:1e:6e:c2:b5:ff:30:
ca:22:1a:90:7e:61:3d:b7:55:45:a2:28:70:85:19:d3:69:ee:
cd:f6:8d:95:e1:61:7c:41:93:54:fb:12:5e:f0:6c:77:b9:a8:
23:b7:f6:d3:32:11:de:aa:17:af:6f:2a:35:76:4b:b0:bc:83:
3b:c2:66:42:8c:a7:ce:f4:d6:65:3d:89:38:87:36:13:8c:fe:
65:2d:f1:e8:c5:af:3b:a0:71:4a:a0:02:5b:12:9b:43:03:d6:
14:27:20:f3:58:5c:07:74:b6:ac:71:b1:b1:05:db:bc:a5:ec:
1e:fc:01:d1:3c:15:5f:d7:17:4e:80:ce:5d:78:c8:01:50:af:
b9:f2:93:de:39:bc:5d:df:7f:59:83:77:9d:9b:98:c2:d9:2f:
46:ce:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client