Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJngdeDDdv-n0ctmSaN3dg5ZzsI.roa
File: dJngdeDDdv-n0ctmSaN3dg5ZzsI.roa (raw, json)
Hash identifier: bW1NcCZnR3z2YYI8rJgJGqqh8h6CkSJ9MPxef+02wVo=
Subject key identifier: 74:99:E0:75:E0:C3:76:FF:A7:D1:CB:66:49:A3:77:76:0E:59:CE:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186128545C932A700123E3371168E4CD687
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJngdeDDdv-n0ctmSaN3dg5ZzsI.roa
Signing time: Thu 02 Feb 2023 14:26:09 +0000
ROA not before: Thu 02 Feb 2023 14:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:85:45:c9:32:a7:00:12:3e:33:71:16:8e:4c:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 14:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7499e075e0c376ffa7d1cb6649a377760e59cec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:76:d2:7c:6e:58:7e:19:53:35:01:db:1b:
f0:d2:06:d1:fb:77:39:c6:b1:3a:e0:84:59:ed:18:
3c:55:30:cf:b1:db:68:a5:6c:e4:c8:b7:c7:58:fb:
90:a2:80:71:ca:1e:a5:17:0f:e9:6e:2a:03:8c:63:
dc:0a:e2:55:20:ac:61:18:27:a3:1b:88:d8:10:01:
42:2b:e1:14:fc:36:c2:4b:05:74:59:0a:48:31:b3:
a5:35:f3:90:1e:1a:10:2b:65:66:c7:1e:80:a7:50:
63:af:be:9e:6a:75:e1:c6:63:48:ad:3f:78:b8:68:
a0:d3:92:7f:4c:5d:65:9b:66:bd:03:9d:c5:8a:33:
44:82:94:65:ae:f2:03:9c:f4:31:c4:7d:c6:f2:6f:
07:65:ae:5a:18:68:f3:a2:30:d0:5f:6e:e6:31:9b:
9f:dd:a4:c3:03:5e:41:01:a8:f4:3f:6b:ae:4b:09:
5c:0d:7e:97:75:f2:76:03:c9:37:fc:20:b2:f4:d2:
42:8c:69:06:5d:80:89:d0:2f:ef:d3:55:43:a2:0a:
64:5c:0a:db:59:45:20:0b:93:5a:1c:65:e1:e8:5a:
91:40:3d:1f:10:d0:85:34:b9:29:86:25:6e:21:48:
bb:6b:e9:81:7e:5e:80:ba:a8:46:0c:41:0d:f3:1d:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:E0:75:E0:C3:76:FF:A7:D1:CB:66:49:A3:77:76:0E:59:CE:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJngdeDDdv-n0ctmSaN3dg5ZzsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:b0:09:9e:81:83:20:84:20:86:ac:c3:70:b7:9b:fd:51:d9:
4f:56:b4:72:44:63:8e:57:3f:01:e8:f2:75:ce:2c:97:0a:28:
79:c3:3c:7b:8f:b2:cb:8c:9c:57:6b:51:48:f5:98:98:86:4b:
e4:93:c0:b2:86:e4:38:27:ef:a7:dd:e2:85:13:09:54:1f:f8:
51:f3:32:98:cd:6a:e9:da:46:b8:53:78:a9:e0:56:a3:ec:e7:
82:25:1e:79:b6:d0:82:56:94:0e:19:cc:07:18:22:24:0f:4e:
84:e7:99:b0:e7:51:dd:ce:6e:e9:92:32:20:19:59:79:af:30:
d8:dd:93:3b:ac:37:15:2d:e8:90:a9:24:7b:1f:18:13:ef:9b:
28:a5:b1:28:1d:39:64:ee:26:43:4b:c0:43:05:a2:a3:6e:e3:
7f:f9:04:44:dc:9e:4a:46:36:ac:ea:64:8d:bb:6c:a3:4d:ef:
e5:a8:5c:6c:81:c3:cd:97:2c:72:3f:bc:71:47:2c:1c:92:19:
4c:de:d8:3e:28:6b:b0:c2:46:92:1a:f3:38:22:69:50:cb:73:
0e:4f:b1:e0:9f:91:52:e5:2c:95:cf:aa:3d:65:65:6a:0e:30:
e7:9e:13:ab:fd:6e:6f:8e:a0:76:78:2c:ea:ac:29:91:e7:1f:
20:e8:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:39:08 2025 by rpki-client