Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJbi4CBGe8y8d-NutpOuQe9HIDM.roa
File: dJbi4CBGe8y8d-NutpOuQe9HIDM.roa (raw, json)
Hash identifier: dcpfg23l1ip+R8ZYqRI0/jYkQCRxJhH2EgWcsUDXteY=
Subject key identifier: 74:96:E2:E0:20:46:7B:CC:BC:77:E3:6E:B6:93:AE:41:EF:47:20:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856B4E79542985B3D3048B8DD7CCDE2045
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJbi4CBGe8y8d-NutpOuQe9HIDM.roa
Signing time: Sun 01 Jan 2023 03:09:43 +0000
ROA not before: Sun 01 Jan 2023 03:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4e:79:54:29:85:b3:d3:04:8b:8d:d7:cc:de:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 03:09:43 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7496e2e020467bccbc77e36eb693ae41ef472033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:0d:de:3e:ba:09:58:cb:5f:de:d7:bc:1e:
a4:ac:e3:f2:75:59:b0:6f:c2:41:ee:d7:03:61:4a:
5b:24:db:f8:53:0d:05:b4:ca:cf:8c:b9:d9:75:29:
06:20:13:1e:c1:c7:f9:c6:bf:cf:56:74:2f:b8:19:
34:c8:9d:88:f6:93:87:9f:f6:0e:31:99:59:18:bd:
89:f9:24:81:bc:8e:43:db:fd:74:27:4d:e8:b9:21:
be:f7:76:5f:00:3f:9a:b0:ea:97:c1:fe:01:21:8f:
ec:4c:fc:16:a8:4a:ec:90:28:92:db:1a:58:5c:f3:
56:e3:d0:0d:91:c4:e6:89:f2:ff:c7:3a:e0:24:e5:
b0:6f:e8:4e:8d:99:d2:38:cb:5c:b7:e8:7c:73:61:
22:56:89:c1:c7:d0:5d:fe:c1:00:3e:da:b5:6f:a1:
8f:7f:81:e3:ef:90:d6:3c:b7:3e:21:70:ad:c9:e6:
da:de:f5:b9:46:24:d8:81:60:56:f8:b3:32:23:4d:
b5:65:31:90:ac:37:3c:61:8d:f5:48:85:3c:64:35:
ef:0e:8f:68:7f:18:d6:e5:55:1e:9c:8c:69:df:55:
8c:24:00:05:67:93:fd:e1:fc:a0:52:76:a3:f3:75:
9a:62:6c:2d:8b:c2:13:4f:b3:eb:21:05:23:28:47:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:E2:E0:20:46:7B:CC:BC:77:E3:6E:B6:93:AE:41:EF:47:20:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJbi4CBGe8y8d-NutpOuQe9HIDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f7:59:2f:7a:24:3c:5f:e8:3c:96:21:31:1d:e0:6f:10:02:
d6:76:82:73:91:c7:2e:32:6b:cf:53:32:e4:18:03:25:fc:ee:
1d:2f:a9:37:d7:be:35:5e:67:de:0e:cb:34:0d:54:72:ae:dc:
f9:fe:19:02:23:23:dc:b7:24:55:5f:e0:36:7f:b5:d6:8a:5c:
02:78:e9:7d:fb:06:ab:cd:b5:f9:0d:b9:f5:51:12:aa:8f:b9:
90:e9:77:2b:d5:2b:9c:2e:af:94:0e:b4:24:94:07:0a:30:bd:
f3:cc:65:ba:1f:cd:4a:31:27:c8:12:a7:c5:8a:db:3f:2e:05:
c2:9a:68:f6:f4:4a:65:d5:b5:81:dd:b2:e6:c3:3c:a4:7c:7f:
00:01:b5:60:4f:39:f9:c5:ac:3f:fd:9d:ec:5a:cc:a8:55:0d:
8c:7d:e7:80:a8:40:15:22:fb:c6:a1:14:1c:3a:b1:9d:09:67:
5f:7c:cc:79:9e:86:b3:80:b4:e5:2e:9e:ef:64:88:83:8a:5f:
ba:e8:05:ad:2a:99:62:59:62:64:a7:ed:43:db:32:88:7e:ba:
b6:ba:37:34:fb:fc:47:56:92:86:8e:a9:c7:0e:e3:35:68:7a:
8f:dc:78:30:86:63:40:a0:e4:6d:42:88:bd:6d:db:cd:fb:0a:
4c:76:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:59:02 2025 by rpki-client