Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOwFyKciLcf13qD3rhVRVmosk5E.roa
File: dOwFyKciLcf13qD3rhVRVmosk5E.roa (raw, json)
Hash identifier: KWyILHE3hZ1c1SyrJVHn0SJ4jy7ckHhtkDnKyfIB50M=
Subject key identifier: 74:EC:05:C8:A7:22:2D:C7:F5:DE:A0:F7:AE:15:51:56:6A:2C:93:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 709005E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOwFyKciLcf13qD3rhVRVmosk5E.roa
Signing time: Mon 07 Mar 2022 19:04:26 +0000
ROA not before: Mon 07 Mar 2022 19:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:65c4:bcff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888486880 (0x709005e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 19:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74ec05c8a7222dc7f5dea0f7ae1551566a2c9391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:f6:12:e0:72:ac:eb:45:77:59:3f:ca:53:
91:78:cc:2c:27:a4:2b:4c:9d:6a:b5:5e:63:c6:52:
a4:ba:d4:70:e1:37:8a:b9:46:4a:fc:d8:74:dc:4c:
e3:b6:87:51:2a:c6:d8:21:e4:3a:cf:50:4b:dd:bd:
63:dd:46:cf:39:d6:c1:86:ea:a0:fb:77:e3:87:aa:
37:93:bf:9a:9f:27:0d:9b:6c:70:06:08:dd:53:79:
11:7e:bd:20:0c:2c:8f:6f:17:1b:33:81:11:fd:f7:
97:2e:72:75:e5:cf:d9:1c:0f:d2:37:1b:ce:4f:2b:
07:ba:35:c6:4b:d1:c3:3e:b5:73:b7:3b:30:f0:25:
fa:7b:a5:76:d3:73:40:c1:4c:d4:62:ff:d1:9a:a6:
18:7e:1a:e7:a8:5f:24:6a:b9:70:04:cc:b7:14:d6:
22:b6:26:4e:05:79:4f:64:f2:32:b3:38:a4:52:04:
0e:ac:5c:78:6e:7f:17:35:36:38:c7:7a:bd:92:42:
d3:eb:f6:6d:cf:ba:39:df:d1:66:6f:70:94:4b:a6:
a6:65:bb:e0:51:4a:9e:59:bc:c4:4b:c8:27:37:bb:
11:3f:22:90:9e:4b:28:78:2a:b6:27:38:88:9d:9e:
85:e7:e8:ca:c7:c4:6d:ec:34:9e:05:58:28:b0:92:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:05:C8:A7:22:2D:C7:F5:DE:A0:F7:AE:15:51:56:6A:2C:93:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dOwFyKciLcf13qD3rhVRVmosk5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a2:92:45:ca:95:bf:f5:63:9b:82:e6:90:be:28:92:56:e0:
9b:cb:31:a4:f9:18:86:d5:36:8c:db:9e:be:59:c7:76:58:dc:
bb:4f:c2:90:ad:88:4c:15:0d:3e:24:1f:69:c3:af:f1:66:31:
ca:7f:b1:bb:f9:46:40:9f:38:b6:4d:3c:b6:0d:4d:01:95:27:
00:27:9e:e3:17:72:5d:de:c4:c5:78:0e:4a:0f:7e:64:9e:4f:
a6:3d:e8:7b:fa:56:f3:8c:b4:e9:55:d6:96:40:2c:83:ad:95:
2f:56:1c:8f:95:9d:9f:13:ad:f1:19:d2:51:3f:56:f7:db:1a:
e4:e8:8a:44:78:61:45:ae:88:e5:8c:61:63:a2:3d:26:81:51:
21:21:60:70:77:40:6c:82:24:0c:26:f0:57:9c:cd:a2:ef:df:
d1:ca:0d:38:cd:70:1e:e3:18:3c:10:11:20:4f:c2:77:3a:55:
85:5c:4e:53:e4:43:2c:95:b8:ae:a9:fe:4b:9c:1a:b6:d0:fc:
18:f6:a9:af:71:e2:ea:20:d1:4a:44:d3:ab:c7:ce:a2:cb:5b:
5f:92:37:eb:58:4b:7d:dc:cb:13:54:82:e0:ae:6a:7f:a9:26:
f1:d6:02:be:2f:50:65:a8:a5:04:bd:1b:4d:7f:01:24:15:b9:
fe:ed:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:01 2025 by rpki-client