Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/diMnzqMlK5kESSSexSMkDe8xkrA.roa
File: diMnzqMlK5kESSSexSMkDe8xkrA.roa (raw, json)
Hash identifier: 63RTl5BYD3mjyzDPOCahXadEmOxYnys4Lv3UAVpmjCs=
Subject key identifier: 76:23:27:CE:A3:25:2B:99:04:49:24:9E:C5:23:24:0D:EF:31:92:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855D5DBC039AB4C9AF2B485A1A9C47B74A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/diMnzqMlK5kESSSexSMkDe8xkrA.roa
Signing time: Thu 29 Dec 2022 10:11:41 +0000
ROA not before: Thu 29 Dec 2022 10:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:5d:bc:03:9a:b4:c9:af:2b:48:5a:1a:9c:47:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 10:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=762327cea3252b990449249ec523240def3192b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:f3:f8:83:f5:4a:b3:af:38:8c:59:40:fc:
6d:a8:ac:64:af:74:6f:12:be:b5:b3:cb:2f:20:ef:
f0:99:13:22:df:04:2b:f7:a4:41:67:49:2f:d8:3a:
0e:75:fb:87:6f:30:0d:6e:f1:b4:77:c9:a8:24:77:
39:5b:09:9c:08:62:08:2e:a5:22:65:b7:e3:f7:d2:
91:92:27:ee:6c:09:67:50:b2:73:93:9e:29:a6:dc:
30:fd:18:7a:d6:ad:f4:1b:a3:dd:e0:1a:9d:ba:1e:
52:67:86:3f:3c:da:d7:a5:a5:c6:15:e5:a9:99:98:
7c:3a:a7:bd:82:0f:7f:9c:38:a0:74:8e:f0:a9:01:
3d:75:84:e0:9e:1d:51:f0:ed:77:68:38:17:be:92:
10:5e:c6:94:1f:c7:eb:3f:d9:c8:0a:a5:34:ee:f2:
9a:77:03:d1:c0:f0:82:d1:c0:91:e0:aa:45:04:11:
12:74:98:d7:2f:81:46:e8:8e:66:0e:bc:a2:1b:09:
e2:8c:9a:60:ce:bf:5b:bf:37:b5:4b:33:03:fb:a2:
4f:ee:a8:42:e7:16:7a:60:76:d2:0a:84:67:ec:83:
1d:9f:ce:c0:5d:62:38:6d:2c:c0:38:4d:18:0e:75:
fd:4e:c3:34:b6:3d:c9:93:24:28:32:7b:4d:52:78:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:23:27:CE:A3:25:2B:99:04:49:24:9E:C5:23:24:0D:EF:31:92:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/diMnzqMlK5kESSSexSMkDe8xkrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:c1:05:4b:64:59:b3:40:df:aa:41:2b:1c:8b:79:c1:70:55:
88:de:9f:b5:a6:2e:0c:63:ed:2c:89:d3:bd:a5:01:17:66:81:
55:d7:77:ea:b2:af:ea:b2:45:90:d8:90:ff:da:a9:fe:ad:03:
2a:c0:4f:b7:e0:54:29:d6:a2:c0:17:f2:31:8d:9e:0b:3d:65:
62:7d:30:5e:21:53:92:0a:11:41:84:76:b2:cc:de:35:d3:19:
f8:d2:33:70:fb:01:9e:c9:52:51:5a:fb:a3:c0:d0:d3:60:49:
ca:64:21:f2:ae:01:0e:3e:87:96:6f:e2:14:a9:a8:c0:89:ae:
08:93:a5:84:7c:3d:e5:58:13:69:c5:5a:c3:a3:dd:c1:57:ec:
81:1b:79:09:08:ca:f0:78:20:40:d5:98:d2:2f:14:05:92:ab:
11:39:b8:c2:a6:08:b1:d3:8c:95:1a:4a:f7:0b:c8:16:12:90:
7d:22:f9:b9:ab:18:82:2b:a0:21:9f:a3:6a:36:7d:5d:fd:33:
0f:90:1d:50:8c:6f:ec:d9:ea:d8:0a:26:e5:eb:ef:3e:38:b1:
87:3d:78:0d:29:51:6b:16:c7:54:3e:d2:9f:d4:8b:29:a8:ed:
99:f2:5f:9e:9b:9f:b5:af:98:46:4d:77:12:f0:85:a4:df:e5:
9d:dc:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:44:13 2025 by rpki-client