Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJFjMezL6Zu-hgUWLJti0xLI5Kg.roa
File: dJFjMezL6Zu-hgUWLJti0xLI5Kg.roa (raw, json)
Hash identifier: DTid0n/rLX55mg3MnvWrbAxR6toN1u+KnB17HeZy8Hs=
Subject key identifier: 74:91:63:31:EC:CB:E9:9B:BE:86:05:16:2C:9B:62:D3:12:C8:E4:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7359DC3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJFjMezL6Zu-hgUWLJti0xLI5Kg.roa
Signing time: Thu 17 Mar 2022 22:12:43 +0000
ROA not before: Thu 17 Mar 2022 22:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935268926 (0x7359dc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 22:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74916331eccbe99bbe8605162c9b62d312c8e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:bd:9c:29:4e:81:15:44:02:68:7f:d7:5d:
8e:a1:90:ee:0e:c3:18:28:43:d3:b6:de:33:02:64:
ae:61:b7:86:38:8e:58:8d:a1:a9:29:65:4c:d5:aa:
42:3a:73:d1:c3:0e:a8:f4:9e:76:59:41:7b:ac:91:
30:36:17:b3:b4:d4:d9:f4:e2:46:00:e6:af:1a:33:
6b:26:74:1c:18:4a:79:1b:29:cc:3c:8e:5a:09:99:
dd:59:84:6e:c5:c5:cc:7c:39:a1:39:3e:8e:ee:ec:
ba:18:23:76:84:8b:4c:08:d2:b9:de:3d:52:87:ba:
6a:61:7f:8d:87:ec:95:31:4c:47:27:ff:ad:b9:cb:
c4:d7:43:f2:f0:b8:cc:13:bf:f2:49:6b:b7:1b:f0:
de:a3:f6:50:ea:46:7b:a7:1c:f0:b0:59:6a:b3:c6:
67:c8:53:12:7d:91:82:07:4d:65:ec:8c:2d:d4:59:
0d:0c:65:71:3b:10:34:e3:93:1b:d5:b0:92:a0:55:
79:d2:2c:32:e2:7e:93:86:0e:ba:34:c8:4e:40:26:
c4:34:29:82:ad:cc:a3:ab:a4:70:9a:09:7e:c3:2a:
49:7a:02:7b:8e:84:eb:4b:e8:95:b4:26:6f:30:e7:
d2:6f:6d:6b:ef:a4:e2:5a:d3:09:7e:7b:ed:52:bc:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:63:31:EC:CB:E9:9B:BE:86:05:16:2C:9B:62:D3:12:C8:E4:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJFjMezL6Zu-hgUWLJti0xLI5Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:91:9f:5c:34:94:bd:36:e8:ab:f9:f9:47:fe:5f:76:a1:64:
8f:eb:98:50:0f:8e:93:f2:54:28:55:50:5e:09:58:b2:25:37:
e1:78:23:c1:5c:ea:fa:01:58:9e:7b:7f:78:38:9a:38:99:88:
cd:bf:02:25:12:a3:b5:5e:f7:63:75:f6:71:24:75:46:9a:aa:
55:e2:34:00:b2:33:56:d7:db:69:9b:c8:b9:de:5b:7e:3d:26:
5e:21:33:2a:e0:63:43:90:0d:5c:78:f0:96:eb:8a:0d:fc:e0:
17:71:e3:2f:31:48:41:8a:22:dd:cf:dd:cc:85:57:70:22:63:
2d:5c:a1:0c:1e:4f:a0:40:de:48:e5:6d:59:37:20:b8:f8:8d:
c0:d7:99:13:9f:83:80:e7:d2:3b:cd:72:6e:9c:3e:c8:4e:a9:
59:93:80:cb:1f:af:8b:ef:63:d9:6d:ba:6b:70:64:48:29:3d:
36:dd:13:c0:3a:28:85:ac:cf:8d:db:e6:2f:76:a5:fc:5c:b7:
fe:7d:72:67:4c:c0:23:7a:18:b3:22:c8:d1:10:fa:00:48:32:
0b:90:61:89:ec:04:b3:36:a3:da:bc:ef:f8:02:3a:78:ee:c8:
ed:44:6c:92:d4:57:c3:60:97:8c:f3:cb:b3:8b:1b:67:ff:5f:
e7:6e:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:37 2025 by rpki-client