Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDxyltgRKyzLBLpuY5dmpd47i6c.roa
File: dDxyltgRKyzLBLpuY5dmpd47i6c.roa (raw, json)
Hash identifier: V3b3MfIIb/eyD9/SPEfMZkYX7BaEyqwOfWafVaOn/JA=
Subject key identifier: 74:3C:72:96:D8:11:2B:2C:CB:04:BA:6E:63:97:66:A5:DE:3B:8B:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184997694732D405668E3013668FB549DA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDxyltgRKyzLBLpuY5dmpd47i6c.roa
Signing time: Mon 21 Nov 2022 09:13:16 +0000
ROA not before: Mon 21 Nov 2022 09:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:76:94:73:2d:40:56:68:e3:01:36:68:fb:54:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 21 09:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=743c7296d8112b2ccb04ba6e639766a5de3b8ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:f3:21:f1:97:b6:0d:a6:d1:79:dc:ac:67:
c1:cc:23:a5:7f:7b:db:2b:e1:5b:4c:ca:74:4a:a3:
ec:c4:f2:00:09:6e:4f:33:0d:72:42:30:88:f5:20:
e8:c1:d6:ef:78:a7:67:5d:d3:63:ed:c8:46:91:c4:
e8:a0:cc:58:8f:2a:7d:b1:c1:37:02:99:60:a8:20:
e3:0b:14:44:d2:2c:66:18:c9:d7:86:6f:a0:ab:7c:
a7:15:34:c6:ee:ba:a3:2f:1f:20:73:b2:8f:d5:53:
23:62:df:9a:8b:87:7a:3b:96:69:fa:95:1c:f9:be:
ba:4d:74:e6:04:5f:dd:e5:78:84:9b:16:90:19:cf:
e8:ad:fc:89:99:3f:db:9b:30:0e:0a:28:4d:cf:a2:
7b:90:21:65:85:ee:2b:11:68:c2:4e:e2:84:ca:2b:
fe:e5:e6:d7:fd:d7:6d:06:2d:db:73:c6:0f:97:2a:
21:30:00:d5:66:32:6e:98:8b:72:0e:63:ee:f8:ef:
02:07:2d:b4:19:3a:d1:d2:e0:f5:0f:30:b6:69:05:
9d:91:0e:c9:71:99:09:b4:37:93:7a:f4:c8:93:31:
04:12:12:3b:dc:b5:5e:fb:36:ef:89:cb:c7:6e:4e:
e5:5d:a7:20:60:85:1a:fb:7f:b5:f9:42:19:65:fe:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:72:96:D8:11:2B:2C:CB:04:BA:6E:63:97:66:A5:DE:3B:8B:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dDxyltgRKyzLBLpuY5dmpd47i6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:35:0a:8f:da:32:1e:b7:a6:a7:b8:dc:b6:0e:16:b5:17:6a:
6f:25:f2:f1:03:27:79:87:50:b3:66:4b:6d:1d:b2:b0:88:29:
3a:50:83:b9:73:d5:88:c7:85:4f:79:12:9c:b5:4f:a5:30:4f:
ac:6a:1a:b6:2a:87:c1:e9:dd:46:8f:18:4e:e7:c6:95:21:76:
81:b4:20:f4:16:e9:f2:d2:17:41:a0:15:71:bc:6e:df:b7:04:
65:5c:23:fe:8d:e7:25:cc:63:3c:b7:4f:de:95:61:18:a7:48:
5d:ef:8f:b2:5a:b8:fd:be:2a:f5:a4:3d:f5:2a:f8:23:f9:7d:
96:d5:7a:ea:15:53:aa:66:9a:f0:6e:3b:02:9a:60:98:c9:aa:
c5:42:d8:51:a9:74:39:57:29:4b:65:9e:77:8c:4f:3b:fb:84:
ea:b5:b4:e7:44:7e:3f:c4:73:30:50:76:9c:2e:14:68:f3:09:
2f:d7:4e:a1:74:1e:c8:61:59:cf:fc:61:cb:82:2f:56:7b:4f:
ee:66:9d:96:d9:dc:c7:62:32:2a:dc:e3:7a:69:b6:6e:b7:93:
cb:a3:c7:af:cd:1c:0b:d8:1e:33:c6:2c:06:ce:f5:84:b2:92:
f7:b4:41:a2:5f:33:14:cf:54:ed:92:08:dd:ce:2f:f6:9b:6a:
18:4c:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:03:19 2025 by rpki-client