Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/djta2XKy1XvjagQMqo3LYttVKdo.roa
File: djta2XKy1XvjagQMqo3LYttVKdo.roa (raw, json)
Hash identifier: jrHVk5BbEeQEn3kNpvtYrYF9oU7ofWL4cBXbLitiKAk=
Subject key identifier: 76:3B:5A:D9:72:B2:D5:7B:E3:6A:04:0C:AA:8D:CB:62:DB:55:29:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186368408EE0F57AE85048CC195632E2FD1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/djta2XKy1XvjagQMqo3LYttVKdo.roa
Signing time: Thu 09 Feb 2023 14:11:07 +0000
ROA not before: Thu 09 Feb 2023 14:11:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:84:08:ee:0f:57:ae:85:04:8c:c1:95:63:2e:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 14:11:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763b5ad972b2d57be36a040caa8dcb62db5529da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:86:ac:40:b4:d9:18:aa:ac:43:9b:f2:c6:
53:5a:25:80:e7:4e:b7:db:5c:26:7c:bf:e9:25:1f:
48:bd:38:7d:f3:e6:2f:f3:04:63:55:d4:86:2a:38:
bd:fc:d3:85:21:65:0a:01:ec:bd:0a:c4:3f:00:66:
b3:01:34:5a:84:3a:d4:74:b3:9b:1e:b9:2e:f5:da:
f7:07:71:d2:4c:c4:c4:49:16:a2:b7:e4:a6:4f:50:
23:b8:5d:5a:38:f7:eb:36:59:91:ea:92:54:b7:cc:
61:e8:fb:75:33:e1:d0:23:af:a5:9c:c2:7a:1f:ee:
15:0b:93:77:7a:e9:5f:47:e3:c5:4d:6c:b7:2b:4d:
bf:49:a7:c2:37:6f:c7:cd:cd:1a:87:fb:8f:9d:ea:
f5:d1:28:5e:03:2a:e5:67:6e:b8:18:70:61:c9:e0:
e4:fa:be:29:2b:59:b0:e2:dc:a7:eb:ef:c9:2f:46:
7a:65:32:e6:24:44:e6:78:cd:a8:ae:12:24:04:ff:
9f:b8:d8:7e:c7:06:14:08:ee:6b:35:08:06:83:36:
1f:e0:9a:4e:7b:68:c7:47:1d:49:ab:d7:d6:37:c5:
82:db:0d:40:90:e3:6b:a7:c8:6a:1a:40:fc:0a:c5:
ad:fe:de:e2:48:0a:31:b2:7b:26:1a:d4:08:02:87:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:5A:D9:72:B2:D5:7B:E3:6A:04:0C:AA:8D:CB:62:DB:55:29:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/djta2XKy1XvjagQMqo3LYttVKdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:95:46:89:eb:3f:4a:67:65:13:c1:75:8b:45:91:33:14:74:
cd:3d:97:68:3b:16:b0:8a:a4:67:a3:e1:82:46:ba:10:ef:af:
9b:b0:44:d0:8f:13:e7:a9:53:d7:15:36:1e:3a:90:69:fd:76:
ca:d1:82:5c:3a:7a:20:e7:fb:c6:f6:e8:45:5d:1a:a6:31:8a:
ff:06:90:8e:20:38:56:14:ce:8b:63:63:0c:4c:ba:34:c1:fa:
d3:2e:8a:ab:2d:6c:1a:e7:5d:68:c2:17:64:cb:ed:a0:2e:de:
26:71:6c:39:34:c9:dc:46:d6:9e:d0:da:b8:1b:81:47:38:bc:
c8:80:bc:fc:c4:e6:7b:a2:e6:22:30:3b:70:9b:30:b5:74:6b:
86:24:f3:89:27:71:ad:2f:2a:bb:f5:d2:1c:66:c7:96:62:51:
92:ec:58:6b:d3:52:79:3e:c4:ab:66:89:04:c9:e5:49:86:43:
2d:3d:b3:ea:74:25:ea:2b:20:c8:d2:64:a6:b3:5d:1d:ee:57:
80:e8:00:2b:2e:e3:31:80:47:a5:47:4e:01:a1:d8:56:30:f6:
fe:24:71:9e:bf:e3:5e:a0:54:6b:cb:be:6f:c4:64:cb:b2:c8:
c3:88:34:fe:7e:73:60:d3:53:9f:e3:12:57:76:90:e6:70:3d:
aa:df:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:44:04 2025 by rpki-client