Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDc_UcGat0HgGdPq8NmeD8GVJqU.roa
File: dDc_UcGat0HgGdPq8NmeD8GVJqU.roa (raw, json)
Hash identifier: 2QxM858J9ZCzl5Q0ddoJKGwDjlf0zCCYqtIHpJbfnxQ=
Subject key identifier: 74:37:3F:51:C1:9A:B7:41:E0:19:D3:EA:F0:D9:9E:0F:C1:95:26:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865B357D3265467244648B2CF40CFDBB7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDc_UcGat0HgGdPq8NmeD8GVJqU.roa
Signing time: Thu 16 Feb 2023 17:11:17 +0000
ROA not before: Thu 16 Feb 2023 17:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:35:7d:32:65:46:72:44:64:8b:2c:f4:0c:fd:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 17:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74373f51c19ab741e019d3eaf0d99e0fc19526a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:78:af:a5:8f:60:8a:2e:b6:4b:e2:ef:8f:
f6:c3:aa:d6:f7:3f:02:a5:c1:73:b3:38:57:65:7d:
3e:39:26:79:46:1f:ad:4c:bc:44:42:8d:34:dd:49:
82:1c:c2:64:58:1b:e6:10:50:6d:93:4a:62:af:da:
d8:fb:71:56:78:22:3b:2c:87:51:f8:73:94:7f:83:
ce:c0:54:97:69:99:36:f0:9e:eb:e4:46:9f:2c:a0:
7c:f1:f3:ec:3d:4c:4f:58:ed:50:e4:cc:ab:ac:a6:
6e:4c:63:b2:4c:a4:b6:0f:0e:39:6d:a0:ae:a0:c2:
82:9e:86:b3:66:e2:c9:ad:aa:56:0b:ac:d1:be:82:
4d:87:0a:b3:97:92:27:74:62:a6:bd:e1:ad:26:7a:
ec:35:d9:70:bb:a6:83:87:f6:a6:bf:20:85:84:24:
b8:bb:d9:d4:c1:77:3a:65:84:75:8b:9b:75:cc:86:
4d:a1:7f:35:49:3e:b8:80:4f:6f:7c:89:58:0e:cd:
e9:81:5a:c2:9b:fe:4f:25:b4:46:c1:2e:02:ad:b4:
c8:5e:68:c6:2c:33:72:09:06:25:8c:52:25:54:62:
b8:ce:ed:5c:97:0b:1a:62:51:01:c1:49:27:99:ae:
b9:af:32:00:16:eb:78:57:e9:94:39:9b:42:c3:99:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:3F:51:C1:9A:B7:41:E0:19:D3:EA:F0:D9:9E:0F:C1:95:26:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDc_UcGat0HgGdPq8NmeD8GVJqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:d1:b2:55:bb:fc:95:27:fd:e6:3d:3d:0e:54:c8:09:af:66:
d9:ac:92:3c:3d:99:07:08:41:1a:b3:da:c1:d1:8d:1f:b9:b3:
ce:d1:27:4a:34:9b:cf:bb:18:8d:fe:e5:5a:63:94:84:dc:6b:
7a:4d:41:a8:d5:96:e6:57:69:ff:12:68:03:0a:ba:7b:86:55:
eb:0a:16:9c:a7:1d:96:20:fc:64:e9:1c:89:87:76:00:f9:c8:
e8:63:cb:63:10:d3:d5:7e:0e:43:49:eb:fa:80:e6:13:de:f7:
99:e2:57:c2:7c:5a:7d:83:51:97:3d:f9:fa:07:f2:fe:b6:79:
84:65:92:04:0f:f7:bf:a9:16:da:e2:4b:28:a5:0f:e4:5b:37:
b8:30:46:7b:59:3f:69:83:8a:67:3f:d0:3c:e7:a7:09:ed:7b:
0d:19:db:51:9c:f5:d5:31:ca:ea:5c:e3:0f:d9:27:20:a2:eb:
79:6b:bf:df:6a:bc:12:18:d4:24:57:4c:82:3a:4d:bb:fd:f4:
b0:73:01:34:82:1d:10:26:12:68:08:a4:d9:05:ee:02:44:91:
f2:e9:b8:bc:76:2b:56:40:f3:5c:59:ad:e2:4d:4b:85:c6:41:
e8:ed:e4:ae:f2:4d:5e:62:26:64:d4:97:d7:fb:96:b0:ba:31:
83:12:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:58:47 2025 by rpki-client