Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/des0b-OJUXsy34cym6VSkNl0R6g.roa
File: des0b-OJUXsy34cym6VSkNl0R6g.roa (raw, json)
Hash identifier: EGsYjRYgEqKDu//4+iaceVUlm8K3i4no5zDo9OhAdkk=
Subject key identifier: 75:EB:34:6F:E3:89:51:7B:32:DF:87:32:9B:A5:52:90:D9:74:47:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B4802613A9144CB3422D703E86BC2808
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/des0b-OJUXsy34cym6VSkNl0R6g.roa
Signing time: Sat 26 Nov 2022 15:13:27 +0000
ROA not before: Sat 26 Nov 2022 15:13:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:80:26:13:a9:14:4c:b3:42:2d:70:3e:86:bc:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 15:13:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75eb346fe389517b32df87329ba55290d97447a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:da:76:21:aa:bf:22:33:02:8d:1b:a7:fc:
98:1c:b5:64:d7:ba:84:53:25:e4:0f:a4:c8:75:97:
46:4d:8a:3c:3c:b2:d7:58:01:bc:90:ef:c5:8d:13:
2c:39:48:bd:6d:e5:c5:cb:5a:77:a9:ae:80:03:65:
aa:a6:9e:c5:50:36:e9:a4:62:71:cb:dd:e9:87:40:
4d:28:ab:83:18:32:66:e9:d1:86:92:24:e7:8c:72:
e8:5a:b7:d1:ca:0f:09:fe:24:8f:4b:49:01:76:ad:
b0:e6:99:cc:2d:b8:fa:50:94:a4:71:ec:f1:de:6c:
bc:38:98:5f:3b:a4:3a:34:85:dd:58:3d:73:d0:bb:
77:bd:6d:16:56:08:f1:ec:8f:31:fa:29:43:a4:53:
99:06:a4:6d:63:e9:18:e0:6b:08:9d:7b:6b:8c:71:
ed:cc:5e:4d:88:fd:6e:e9:48:8c:f9:d0:d3:22:4b:
3c:30:5e:a5:8d:6a:b8:d1:56:50:2a:e5:de:03:ea:
de:c9:8a:b4:9f:09:3f:32:a7:59:8a:c5:8e:7e:72:
95:ae:14:ee:30:ac:95:2d:c5:83:24:1e:43:b7:18:
57:47:49:64:3a:0e:8c:d8:25:8e:e6:14:75:0f:8d:
3a:b9:23:1f:57:8e:63:00:74:a5:71:ae:cd:20:3f:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:34:6F:E3:89:51:7B:32:DF:87:32:9B:A5:52:90:D9:74:47:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/des0b-OJUXsy34cym6VSkNl0R6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:7b:f8:22:24:2d:be:ef:45:37:18:ea:85:a9:a2:82:2e:23:
3d:4e:ae:f2:ac:54:32:48:56:7a:db:9a:c6:92:34:39:dc:ce:
50:e0:d9:e3:13:13:57:e8:4b:56:b7:65:8d:e8:ff:f7:24:f6:
20:40:4c:be:f1:6c:62:49:cb:f6:78:fc:26:e0:bd:b5:5f:a7:
af:ad:58:c2:7c:44:9a:ab:e9:54:db:65:81:9c:ca:f3:0f:00:
87:bc:ee:e6:bf:35:a2:c5:9f:c2:e8:98:61:15:44:27:10:f6:
8a:36:5a:42:ef:75:af:1a:03:6c:e2:e7:e9:18:9b:59:f1:e2:
e8:f1:45:fd:28:3d:d2:24:f3:81:23:cb:42:84:66:99:e3:06:
d7:74:da:31:03:72:3b:90:d7:bb:0a:16:d6:1c:a0:8d:b0:ab:
f8:a3:f1:4b:df:c3:10:e1:37:1e:f3:92:19:89:11:f4:5f:34:
d2:c9:24:21:c8:cc:9a:4f:3a:2f:5c:64:61:39:52:f8:09:c2:
8e:85:65:4d:49:71:20:77:ab:3f:dd:b0:7a:ce:74:d9:e0:15:
1a:ad:2e:78:4b:de:59:16:52:f4:cf:fc:0c:7e:cb:05:a0:88:
98:8c:68:72:ca:59:30:e2:fe:d4:02:06:dc:1e:23:83:36:4b:
1e:27:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:59 2025 by rpki-client