Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DtSjPUeB2PQFPvS8FdbPKSkDp5c.roa
File: DtSjPUeB2PQFPvS8FdbPKSkDp5c.roa (raw, json)
Hash identifier: MtcmiVqERElUIZoVUlkKYdWtVVbRKI1Cpze2S2YQNP8=
Subject key identifier: 0E:D4:A3:3D:47:81:D8:F4:05:3E:F4:BC:15:D6:CF:29:29:03:A7:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185978344E03969B6A3BDF4FFDCE0C6663F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DtSjPUeB2PQFPvS8FdbPKSkDp5c.roa
Signing time: Mon 09 Jan 2023 17:10:40 +0000
ROA not before: Mon 09 Jan 2023 17:10:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:83:44:e0:39:69:b6:a3:bd:f4:ff:dc:e0:c6:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 17:10:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed4a33d4781d8f4053ef4bc15d6cf292903a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:b9:68:42:a6:52:42:b4:b0:30:2e:98:25:
1d:81:f8:1e:21:cc:37:d9:ec:57:a3:6e:8a:59:f2:
d3:54:ad:dd:2b:44:01:d4:4c:81:81:5d:61:59:da:
14:98:a9:5f:a8:e4:77:ba:8c:3f:44:1a:21:db:11:
93:52:c0:b8:b6:27:40:32:41:ed:3a:66:0f:b3:61:
cc:be:6b:45:91:0d:41:61:90:12:3e:62:31:01:fe:
c9:db:42:d1:a5:44:0b:a4:a5:3b:cf:ee:ab:31:ff:
79:d9:d1:09:b9:9d:fe:04:49:50:92:52:ae:b4:48:
fe:ee:6d:1e:72:02:55:36:1b:16:db:d4:43:2b:45:
9f:58:90:b7:d2:21:4b:89:a4:97:96:6a:e5:24:af:
16:64:06:16:16:b0:8e:64:4d:a9:d6:10:19:57:2d:
b6:cc:35:56:27:c5:87:bf:34:9c:79:02:4a:9f:f1:
ce:12:36:15:18:f9:f1:47:7d:8a:b4:48:77:22:ad:
47:0c:48:6b:e4:be:99:15:62:a7:29:ef:5f:51:3d:
0b:3a:af:52:43:77:f2:a4:16:c3:a9:77:bb:9d:80:
fe:81:5b:42:8c:76:e2:04:e7:06:98:9b:8f:82:ab:
cd:02:30:c2:2f:17:20:2b:bb:5f:c0:ba:8f:bf:c0:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:A3:3D:47:81:D8:F4:05:3E:F4:BC:15:D6:CF:29:29:03:A7:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DtSjPUeB2PQFPvS8FdbPKSkDp5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c3:18:4a:a0:ba:01:53:b8:de:16:aa:47:5d:05:54:74:fc:
e8:63:c7:0d:9f:eb:9f:8e:b3:09:59:5a:23:1a:c0:c3:58:a8:
03:70:b4:b7:75:90:39:f0:60:30:ba:0d:d5:cb:61:a8:47:28:
c2:1b:38:62:72:f9:70:e6:57:eb:85:fc:a0:4e:44:69:8b:f5:
bd:66:98:e6:e2:0e:1c:a7:2d:ba:f8:90:1b:1d:8f:44:4d:1e:
a6:d8:d9:86:31:b1:5c:61:48:37:af:cf:3e:24:96:1b:84:62:
b7:ed:32:1f:9b:83:9e:fa:08:6d:58:81:65:a5:72:02:0e:15:
28:f9:3e:74:6d:7c:89:2b:49:d4:39:a3:d3:31:0a:5a:65:c7:
1b:ed:0d:e1:16:56:2d:5d:f4:91:23:cc:9e:0a:42:9e:38:5f:
33:71:06:04:3d:75:06:35:70:29:61:fb:ec:95:20:03:29:38:
55:fd:43:1c:18:3e:1e:bc:a3:18:56:d8:3e:8d:0a:2f:40:90:
9f:10:39:9a:c5:e1:30:e1:6f:bf:5f:13:59:66:71:b1:1b:ef:
3e:88:2d:9a:73:0c:32:e9:0c:f3:7f:48:68:74:eb:2e:c4:b9:
b0:f3:77:8c:81:76:9b:ef:e7:2f:23:7d:9c:c1:0f:44:9e:bd:
74:75:d4:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWXg0TgOWm2o730/9zgxmY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA5MTcxMDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWQ0YTMzZDQ3ODFkOGY0MDUzZWY0YmMxNWQ2Y2YyOTI5MDNhNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArna5aEKmUkK0sDAumCUdgfgeIcw3
2exXo26KWfLTVK3dK0QB1EyBgV1hWdoUmKlfqOR3uow/RBoh2xGTUsC4tidAMkHt
OmYPs2HMvmtFkQ1BYZASPmIxAf7J20LRpUQLpKU7z+6rMf952dEJuZ3+BElQklKu
tEj+7m0ecgJVNhsW29RDK0WfWJC30iFLiaSXlmrlJK8WZAYWFrCOZE2p1hAZVy22
zDVWJ8WHvzSceQJKn/HOEjYVGPnxR32KtEh3Iq1HDEhr5L6ZFWKnKe9fUT0LOq9S
Q3fypBbDqXe7nYD+gVtCjHbiBOcGmJuPgqvNAjDCLxcgK7tfwLqPv8C8JQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7Uoz1Hgdj0BT70vBXWzykpA6eXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRHRTalBVZUIyUFFGUHZTOEZkYlBLU2tEcDVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHrDGEqgugFTuN4Wqkdd
BVR0/Ohjxw2f65+OswlZWiMawMNYqANwtLd1kDnwYDC6DdXLYahHKMIbOGJy+XDm
V+uF/KBORGmL9b1mmObiDhynLbr4kBsdj0RNHqbY2YYxsVxhSDevzz4klhuEYrft
Mh+bg576CG1YgWWlcgIOFSj5PnRtfIkrSdQ5o9MxClplxxvtDeEWVi1d9JEjzJ4K
Qp44XzNxBgQ9dQY1cClh++yVIAMpOFX9QxwYPh68oxhW2D6NCi9AkJ8QOZrF4TDh
b79fE1lmcbEb7z6ILZpzDDLpDPN/SGh06y7EubDzd4yBdpvv5y8jfZzBD0SevXR1
1AM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:28 2025 by rpki-client