Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvS99fd1YiprG9v-mY2Bed2Pfuw.roa
File: DvS99fd1YiprG9v-mY2Bed2Pfuw.roa (raw, json)
Hash identifier: gOsf9ZqOrNN1zO/tjhK7ZdhdDAR8pmP0gr9DM18Uw+Q=
Subject key identifier: 0E:F4:BD:F5:F7:75:62:2A:6B:1B:DB:FE:99:8D:81:79:DD:8F:7E:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 713CD4B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvS99fd1YiprG9v-mY2Bed2Pfuw.roa
Signing time: Thu 10 Mar 2022 07:10:42 +0000
ROA not before: Thu 10 Mar 2022 07:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899812025 (0x713cd4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 07:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef4bdf5f775622a6b1bdbfe998d8179dd8f7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:c1:e7:77:8c:e0:9c:20:6f:d8:0e:13:2e:
e0:25:75:59:98:33:d0:07:3a:1d:77:06:39:a1:43:
5f:39:4e:3d:00:1b:71:9a:7f:bb:56:70:f4:85:0a:
d0:b0:d5:1a:24:d2:2d:50:fb:f3:13:4e:5c:3c:63:
29:d1:0a:e0:45:8d:96:2f:17:58:62:e0:d7:31:94:
5d:39:85:0f:7d:de:6c:f9:94:73:3b:93:a2:6a:8b:
4e:a8:31:1b:ed:4e:25:4b:bb:33:99:43:9f:9a:e8:
10:25:9b:07:f5:e7:ff:4c:3f:f7:a4:b6:78:19:55:
b9:6d:e3:f0:3b:88:6f:3b:13:e4:3b:f9:e5:0e:d8:
68:b6:4f:ed:dc:eb:fa:f2:e3:24:98:73:46:0d:8e:
e7:63:80:34:f3:b9:ff:83:bb:50:be:1a:d6:f0:56:
76:e2:cf:aa:8f:c2:66:57:c6:1c:d3:6c:7b:86:40:
3f:1a:17:14:2c:21:15:4a:83:fc:53:f8:3e:e6:93:
a5:18:1e:1d:fa:83:21:d2:d5:16:28:e2:76:44:12:
c8:64:e1:f3:7b:58:6f:88:e6:fe:d2:82:ff:bd:a0:
18:38:dc:90:ea:57:25:49:cf:f1:27:34:5e:d6:62:
ca:6c:15:26:d9:c6:52:d8:59:41:33:66:57:94:1a:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:BD:F5:F7:75:62:2A:6B:1B:DB:FE:99:8D:81:79:DD:8F:7E:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DvS99fd1YiprG9v-mY2Bed2Pfuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:aa:17:6b:42:91:36:b0:97:47:b2:36:49:7b:b5:3d:6c:99:
c5:ff:5c:f6:b8:73:c7:85:b4:15:a0:1c:29:21:4a:0f:2d:75:
c2:ba:36:84:ba:77:a6:3d:43:67:85:a2:89:74:c9:53:82:77:
8d:b7:73:18:12:d2:c2:e5:57:e1:d4:19:46:fb:f3:9f:5f:e4:
28:58:e2:d5:1b:6d:f3:3a:2e:39:8d:f4:d5:65:08:50:50:bc:
9e:5c:ef:7d:d9:8c:9e:c3:49:48:12:42:97:fe:2e:e2:13:2f:
2e:ac:23:93:63:bd:eb:5b:f2:52:63:90:dd:f1:32:72:65:20:
85:99:9a:c9:e4:71:82:5a:bb:88:c1:dc:b2:87:c9:68:b5:d4:
48:37:74:cc:6a:2a:c1:9d:4a:38:0b:93:0b:f9:aa:dc:4e:0d:
a5:ed:a3:55:95:0b:4e:30:34:2e:dd:51:b6:30:7a:77:38:af:
53:f3:60:ec:94:c9:b2:ae:95:f4:7c:e7:27:72:74:f7:ef:d3:
e5:e3:48:7f:41:fd:7e:7d:fc:74:1e:e5:87:2f:07:2c:83:06:
2f:ac:c1:ee:f6:b1:37:0b:00:bb:32:e9:0d:85:12:9f:63:7f:
e9:54:f1:7b:a0:7b:46:01:b3:b6:5a:5e:c7:34:1f:6e:c8:d0:
4d:3b:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:56:31 2025 by rpki-client