Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dknsX8t8ie8z8Qu6tGuZlRZ7B4Y.roa
File: dknsX8t8ie8z8Qu6tGuZlRZ7B4Y.roa (raw, json)
Hash identifier: LM187Ode0JgOv0QyJyJ58adirZSo1qxNoPubpy6IT3E=
Subject key identifier: 76:49:EC:5F:CB:7C:89:EF:33:F1:0B:BA:B4:6B:99:95:16:7B:07:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181ECF5A32DECD7F85E9738CC5F78027908
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dknsX8t8ie8z8Qu6tGuZlRZ7B4Y.roa
Signing time: Mon 11 Jul 2022 11:12:09 +0000
ROA not before: Mon 11 Jul 2022 11:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:f5:a3:2d:ec:d7:f8:5e:97:38:cc:5f:78:02:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 11:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7649ec5fcb7c89ef33f10bbab46b9995167b0786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:ae:0c:ec:f6:65:e1:62:79:5f:02:55:ac:
73:f4:60:40:b5:ac:0b:ed:71:b0:6f:05:e3:d1:85:
a5:15:e7:05:c5:b2:b4:9d:08:ed:8f:c6:1a:4e:46:
2d:31:61:14:bc:39:1e:f0:19:d6:92:85:15:21:f7:
3b:a5:a8:ca:1d:d6:0c:8e:f0:54:77:75:d6:30:6d:
53:dd:47:ca:65:51:b3:2e:d7:a4:57:77:02:f4:4f:
96:5e:24:0a:64:a8:f6:b9:ef:f6:77:a3:03:e4:a8:
8b:30:fb:95:7d:1c:0f:fa:ef:f2:3b:36:b6:b1:31:
c3:d3:df:28:4e:a0:c5:26:ef:2f:af:b2:62:66:80:
91:84:ba:58:db:af:67:2d:88:a3:34:fe:9b:67:b9:
4a:ef:e1:ac:97:27:48:1c:c0:86:d5:fb:9d:d4:bf:
d0:28:44:94:52:75:f4:7c:70:e7:ec:a1:a9:75:02:
48:16:3f:43:b8:1e:d1:94:9f:b1:86:3a:81:32:9d:
41:6c:db:a1:ee:fd:24:f4:52:a8:22:6e:f0:1b:03:
c3:16:08:93:b0:4a:d3:13:4d:06:2b:7f:77:77:b4:
29:01:07:3d:bc:db:22:62:89:16:da:29:22:17:1b:
d0:7f:4c:fb:1f:94:e8:88:07:e9:51:5a:51:3b:e3:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:EC:5F:CB:7C:89:EF:33:F1:0B:BA:B4:6B:99:95:16:7B:07:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dknsX8t8ie8z8Qu6tGuZlRZ7B4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:90:08:fc:28:a9:3e:4b:c6:4c:2b:65:40:f0:42:94:f1:ad:
55:8c:57:95:db:dc:46:61:32:95:96:c0:9c:8f:22:d7:08:52:
53:3a:af:ef:d9:a3:76:7d:ae:a6:3e:ed:30:75:65:58:b7:67:
19:2d:ef:3b:04:79:89:97:1c:67:28:29:ff:5a:1a:16:2b:05:
5f:96:43:4c:c5:e1:86:d6:39:96:db:14:20:d6:cd:6c:9b:19:
54:8a:93:10:fa:e2:39:68:30:37:97:94:3f:b2:af:5d:54:97:
5f:e3:77:37:42:e6:d3:32:a9:74:e7:4a:8b:37:d1:92:e5:5b:
3e:12:34:ca:62:eb:3b:22:db:5c:0c:62:1e:e7:bc:20:f1:8e:
a7:06:f0:2d:d0:46:12:b5:12:28:20:61:80:c3:7f:fa:88:ba:
ac:7c:e9:05:5c:75:ea:02:ab:43:78:00:d0:1d:89:30:89:fb:
b9:16:c0:04:3c:62:29:e8:ff:72:a5:0a:29:72:48:26:5a:84:
a9:77:0f:4e:fc:65:03:99:6c:47:fa:72:8a:a3:76:ff:7b:a9:
00:65:92:dd:0a:09:c2:3c:11:48:de:24:ae:7b:df:8e:34:cc:
40:63:7d:46:cc:d1:79:b1:b0:3c:b9:b1:70:dc:2c:ce:c7:02:
4c:9e:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:14 2025 by rpki-client