Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DweLY_mZPLwlUz4uEK40GleBv04.roa
File: DweLY_mZPLwlUz4uEK40GleBv04.roa (raw, json)
Hash identifier: GNau43tXgJ1A8ryWcysIefBlJggcxYWRNC9qz0ESRHY=
Subject key identifier: 0F:07:8B:63:F9:99:3C:BC:25:53:3E:2E:10:AE:34:1A:57:81:BF:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8924F727
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DweLY_mZPLwlUz4uEK40GleBv04.roa
Signing time: Thu 02 Jun 2022 00:09:20 +0000
ROA not before: Thu 02 Jun 2022 00:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300901159 (0x8924f727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 00:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f078b63f9993cbc25533e2e10ae341a5781bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:45:66:d6:13:42:17:b0:54:f9:06:27:19:
4d:da:ab:ad:fe:8e:c9:22:2d:e0:4c:62:67:bb:84:
5e:5b:f2:25:55:38:5d:7d:50:fd:eb:15:91:4f:f9:
f0:38:95:72:6e:00:07:46:4a:9e:ba:ad:40:da:b6:
9b:7f:cc:22:d8:47:55:ad:c7:97:b8:56:6e:7a:10:
90:24:8b:84:46:ca:f6:67:98:a4:93:20:dc:17:1e:
af:f4:84:bf:dc:cb:3a:f2:62:ad:e2:8b:57:74:69:
10:de:a1:c3:41:3b:85:50:e4:ec:1d:32:fb:a3:9b:
0b:5d:11:40:ca:1b:97:fe:6c:d2:e7:38:0f:dc:62:
43:df:2c:25:f0:dd:54:a1:c9:63:0b:2e:75:57:e7:
71:f4:ca:03:57:18:0b:5d:05:59:ae:63:74:a0:b0:
ba:f9:eb:ed:1c:79:2f:28:71:f3:6c:f9:bc:b9:2f:
79:c1:e8:9b:18:6d:34:02:9d:38:7d:4f:3d:d1:76:
c5:0f:32:9f:0a:06:b6:37:ac:4d:39:83:6a:32:1f:
b4:15:2f:68:6d:11:1d:d8:b1:30:b4:a2:f1:eb:d9:
93:c5:0a:af:99:33:f7:7f:bd:cf:e9:7a:d3:b6:bb:
55:54:22:20:b6:f8:5b:d0:7a:ab:f7:98:22:f2:2e:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:8B:63:F9:99:3C:BC:25:53:3E:2E:10:AE:34:1A:57:81:BF:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DweLY_mZPLwlUz4uEK40GleBv04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:49:9e:5b:b3:ff:7f:6d:47:d4:31:8e:4e:bf:e8:4e:1e:ce:
38:e9:3e:93:6f:99:47:0d:65:ae:96:45:73:d8:6e:24:d3:2f:
d9:98:36:9a:b2:25:11:bc:0e:14:45:93:1c:f3:38:f7:57:b9:
8d:37:02:a1:8f:fc:6c:1d:68:71:39:b5:62:75:ce:b6:3e:08:
0b:8c:07:7e:a6:59:fd:4c:f6:8c:24:8b:10:84:ac:1b:07:bb:
5d:e9:c4:0a:d4:e5:bc:0e:c1:8a:96:75:9e:18:da:fc:f1:a1:
5a:e3:10:14:56:20:87:11:db:56:e6:87:d0:04:fd:58:79:cf:
12:af:95:14:19:44:5f:70:cd:44:b2:25:e0:9a:cb:1a:0f:df:
2f:5d:c6:f9:30:32:3d:98:cb:39:d1:89:70:cb:b0:05:7e:da:
30:ec:5e:dd:25:e7:e3:fa:b3:ec:96:72:15:95:4a:7e:15:6b:
33:99:47:d7:b8:1d:b6:82:55:04:e7:68:d7:ec:a7:58:e5:b3:
0b:e8:b5:cc:c5:13:49:18:81:48:49:9d:34:43:23:4e:da:f9:
2d:c0:b0:ca:f9:14:2c:1c:42:a6:a1:89:a4:a6:b2:ac:18:04:
43:7a:3d:91:69:01:37:ed:94:15:d0:57:a4:34:23:77:b2:99:
df:b1:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:50 2025 by rpki-client