Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDML6PVR8Q_BBqD9qCnG5l9tgEA.roa
File: dDML6PVR8Q_BBqD9qCnG5l9tgEA.roa (raw, json)
Hash identifier: ikOvvGqJQBEmrTll74N0Tp7auOGJVPuY97yLncSjRvE=
Subject key identifier: 74:33:0B:E8:F5:51:F1:0F:C1:06:A0:FD:A8:29:C6:E6:5F:6D:80:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F7060BAE3AA020B81CABA93CD8C2C429
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDML6PVR8Q_BBqD9qCnG5l9tgEA.roa
Signing time: Thu 20 Oct 2022 20:11:51 +0000
ROA not before: Thu 20 Oct 2022 20:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f7:06:0b:ae:3a:a0:20:b8:1c:ab:a9:3c:d8:c2:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 20:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74330be8f551f10fc106a0fda829c6e65f6d8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:c4:37:12:8b:fb:f2:3a:d5:0f:3c:64:43:
51:f1:c8:7f:bd:39:cb:36:08:c7:af:ef:99:0e:6f:
eb:a7:f3:fc:fa:22:3b:18:e7:11:e4:13:60:6c:06:
2d:d7:f5:8d:7f:bd:77:8e:a1:ed:6f:cb:40:89:a5:
67:6f:5e:36:5d:be:92:40:90:83:a1:4a:50:8d:57:
cb:26:bd:09:be:d9:8c:0c:e7:2c:68:8b:59:64:eb:
67:3b:33:71:10:5a:ad:5a:69:c7:07:8e:ef:02:64:
f4:d2:14:42:07:46:63:f8:30:10:28:90:cd:2c:d7:
6e:d9:74:29:11:e2:eb:1d:61:3e:ca:2a:6a:27:b0:
58:68:74:1b:fa:0a:a2:97:04:be:1a:dd:ca:51:61:
26:c0:be:06:bd:34:31:2c:05:f1:f4:3e:90:f2:48:
c0:b8:62:88:54:dc:4a:aa:18:20:c7:0f:8a:b5:82:
d3:57:42:68:67:14:87:0a:cf:d7:7e:80:44:fe:78:
06:a3:79:98:d2:48:06:c9:26:97:77:aa:ae:26:db:
e9:72:16:70:c7:2b:bd:d8:b0:1f:0f:1a:43:06:40:
a1:62:50:9f:fc:35:64:d9:e6:5f:d8:17:18:25:12:
8a:be:d3:0b:19:94:79:ea:01:e9:d7:e3:56:90:7c:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:0B:E8:F5:51:F1:0F:C1:06:A0:FD:A8:29:C6:E6:5F:6D:80:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDML6PVR8Q_BBqD9qCnG5l9tgEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:33:eb:61:6e:9c:e2:90:0b:c3:d0:5c:a1:67:5c:3e:7c:3a:
0d:44:48:8f:59:14:d0:d7:59:85:2b:db:08:e3:3e:b1:71:c0:
16:95:45:f0:69:ef:4e:9a:87:2a:f9:6c:88:ee:04:0c:f3:a3:
0e:7a:24:2b:27:b4:1f:8e:a3:c3:c4:ce:7c:68:1b:7a:3f:4a:
50:30:fc:f9:d9:7b:4a:78:2e:2b:67:6d:54:3d:dc:94:f2:79:
63:d5:25:4d:d9:5e:7a:5b:6c:6b:ad:18:fe:c6:8a:c6:06:34:
54:0c:40:96:6f:15:27:17:24:e2:63:cb:75:90:84:5b:c1:cf:
af:ba:16:6f:b3:11:a4:4a:43:a7:ac:10:60:42:76:2a:f6:c9:
5d:cd:d7:fd:a9:14:67:3a:16:eb:0c:3f:48:c2:8e:6e:79:98:
6c:83:b0:a8:7b:5f:5e:3e:3c:7c:b0:b6:e6:b3:b5:2b:e4:c9:
7e:b5:77:c9:49:92:ce:e1:6a:62:ae:b0:aa:c4:7e:23:2d:40:
62:39:43:d3:45:9c:c6:22:63:d4:8a:c4:56:69:fd:fb:56:bc:
7e:68:e2:9d:39:8c:df:94:6b:8a:fe:b9:db:d9:5b:48:b8:be:
f3:8d:5e:50:10:45:c2:09:fd:5b:10:a1:e7:5d:68:78:4c:ce:
7b:63:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:21:13 2025 by rpki-client