Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOH-WG07dHwSLWE94tdC4Vupw5E.roa
File: dOH-WG07dHwSLWE94tdC4Vupw5E.roa (raw, json)
Hash identifier: 73rYpGUpBvkAJ1nceIjR+N/I2nwv4nLONXXAlK/6WMQ=
Subject key identifier: 74:E1:FE:58:6D:3B:74:7C:12:2D:61:3D:E2:D7:42:E1:5B:A9:C3:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7701E321
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOH-WG07dHwSLWE94tdC4Vupw5E.roa
Signing time: Wed 30 Mar 2022 17:09:48 +0000
ROA not before: Wed 30 Mar 2022 17:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996612385 (0x7701e321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 17:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74e1fe586d3b747c122d613de2d742e15ba9c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:7e:22:6b:66:62:03:26:ca:1d:5b:e1:eb:
c0:e1:b9:b2:98:0f:bb:09:72:d5:b6:0c:48:01:75:
90:49:b8:88:e4:80:5b:98:b8:ac:55:95:57:2c:3d:
64:e3:96:65:2c:bb:72:98:44:b6:c8:20:61:ee:ba:
58:01:12:d6:21:25:ca:9e:6e:ea:1a:6c:2c:45:e2:
6d:1a:8c:f1:88:5c:b8:61:3c:13:7d:65:ca:3f:86:
90:a1:53:cb:cc:f7:c6:9a:ba:74:c2:c9:62:24:51:
b6:04:e6:89:b6:3b:cf:52:80:f8:9a:03:eb:75:d8:
ab:48:25:da:9d:38:ec:23:9c:45:da:b6:32:27:c9:
ae:5b:6e:59:fb:6c:d2:72:d9:b7:fb:d2:ab:62:21:
db:9c:ea:4b:4e:f1:99:2b:28:22:d7:5e:af:4d:46:
05:c6:75:2c:a4:c9:83:0b:58:cf:db:00:2d:e0:38:
af:c2:3c:b2:4e:36:5b:59:7a:c6:11:ad:d0:f4:1e:
b5:5f:23:ce:53:99:e3:32:07:90:3e:f4:12:11:ac:
7b:11:ea:d1:31:9c:32:52:a5:43:55:79:e6:e3:9d:
8e:ee:d6:28:91:7e:41:6a:ed:15:41:f8:e5:41:e6:
67:1d:ec:b0:3c:38:f4:15:c1:25:bf:be:61:c9:f9:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:FE:58:6D:3B:74:7C:12:2D:61:3D:E2:D7:42:E1:5B:A9:C3:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOH-WG07dHwSLWE94tdC4Vupw5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cc:b8:ac:b4:ef:ce:1d:50:cf:d0:14:06:b4:a6:bd:94:f7:
dd:72:7f:38:7e:27:73:de:1d:22:d1:22:ab:31:f9:f2:b7:78:
1b:03:87:cc:b9:a3:bb:a2:0c:e1:8c:94:92:de:7d:57:2c:2e:
2d:2b:5f:58:70:d3:d9:09:c6:e4:8f:54:1e:7b:0f:eb:02:37:
74:c6:80:7a:ef:b6:14:bc:1f:8f:cf:e4:98:82:49:4a:8e:fc:
0c:7a:cc:1d:8f:f2:7b:ad:0f:73:ab:97:5b:c7:2d:bc:a7:61:
e7:7d:a7:37:87:f7:5d:66:bb:a9:ba:bc:ec:05:54:9e:94:b0:
c4:f8:cd:7b:3c:c1:91:1a:00:0f:3e:92:b3:e2:81:9b:07:9a:
ed:1a:64:85:c6:30:8a:7e:99:78:75:82:fb:34:2a:1d:83:77:
7e:97:d8:f0:2d:5a:ab:cc:bb:4a:c4:c3:34:81:c3:3a:25:ba:
23:cf:58:44:c1:51:9a:1b:21:c1:c0:cc:ef:bb:0a:35:c4:e9:
42:eb:f3:2c:d9:76:f9:1a:33:e4:05:49:7b:54:cb:66:fc:ec:
f5:28:e1:18:ee:15:70:e3:0b:4f:ed:bd:de:ad:f1:db:7e:e6:
00:f1:a9:53:c4:7f:b5:ec:04:f1:37:83:e4:d7:0f:29:76:d6:
c7:e0:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:43 2025 by rpki-client