Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dplWvIPuEnhJ5AnvJ_VnsXEkEPY.roa
File: dplWvIPuEnhJ5AnvJ_VnsXEkEPY.roa (raw, json)
Hash identifier: ptpB6f268n8egXxrZA0MUCLH5zLxwMAoyw8JyiFsU14=
Subject key identifier: 76:99:56:BC:83:EE:12:78:49:E4:09:EF:27:F5:67:B1:71:24:10:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F3902457F50BF31B6EFBF235C6AB0B90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dplWvIPuEnhJ5AnvJ_VnsXEkEPY.roa
Signing time: Fri 27 Jan 2023 14:09:47 +0000
ROA not before: Fri 27 Jan 2023 14:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:90:24:57:f5:0b:f3:1b:6e:fb:f2:35:c6:ab:0b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 14:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769956bc83ee127849e409ef27f567b1712410f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:be:02:aa:36:22:a2:75:dc:55:e8:7a:76:
e7:b5:fb:d6:aa:ec:af:4b:15:62:3b:07:16:0f:b3:
16:3d:a4:20:73:b7:02:e8:57:4a:e7:e2:be:95:24:
1e:5f:56:a3:60:09:4d:03:9d:20:8c:6a:97:0f:54:
49:a5:40:53:5a:59:e4:4a:66:8e:f4:15:e1:e9:ae:
c7:2e:e1:4f:21:5e:cc:15:76:fa:4b:2d:9b:a8:4d:
14:19:7c:8c:90:4b:da:c8:47:90:6f:5f:d6:02:62:
4a:7a:72:c3:5c:3f:c8:10:90:15:05:47:f9:77:8f:
7a:25:3b:24:a6:35:fb:de:29:1e:1d:84:4e:d3:d5:
be:3d:af:71:a8:4e:40:7a:5f:19:2e:28:c8:32:30:
93:1a:8c:62:ee:f7:28:1c:ad:e8:52:4a:c0:84:44:
4b:ed:a4:5c:29:d6:db:b3:49:3f:6b:e9:ea:41:5a:
ea:de:db:d3:e5:2a:11:dd:56:a7:6f:e1:3b:06:01:
3f:9d:49:40:00:5b:69:c8:be:34:64:29:be:89:2e:
4c:ec:a7:47:58:8e:5c:3f:2d:f3:d3:c7:bd:a5:31:
40:a2:a5:43:2e:01:8a:60:c4:04:af:00:cd:0d:be:
87:c0:90:28:95:d8:02:4d:2d:95:b8:70:40:71:82:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:56:BC:83:EE:12:78:49:E4:09:EF:27:F5:67:B1:71:24:10:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dplWvIPuEnhJ5AnvJ_VnsXEkEPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:30:3a:79:fe:0d:cf:ba:47:50:9b:76:7b:f8:ac:5e:e9:03:
c4:ed:47:3f:64:bf:87:52:23:8c:bf:ac:96:08:38:7a:2f:e5:
37:fd:26:a9:c4:3e:46:8b:c3:67:12:05:11:8b:73:65:b2:b8:
7d:2b:74:7a:b3:16:db:58:b9:f5:7b:73:24:3c:77:fe:fc:ed:
df:24:20:7d:a0:96:68:5b:a9:cb:8a:8b:fb:41:b6:89:23:b4:
6e:b2:b7:68:5f:7d:9a:62:92:bc:53:14:10:5b:bc:3a:bb:1f:
2a:94:de:1a:04:1e:d0:0e:67:0a:82:b6:76:26:26:22:2d:1c:
dd:b1:2d:7e:c2:b6:b2:96:be:57:34:d6:44:bb:62:9a:d6:c9:
fd:71:ec:64:3b:82:02:e0:68:43:91:a0:f7:2a:06:6a:cd:53:
21:91:f3:a9:1a:8a:3f:75:02:11:53:bf:27:33:93:58:31:fd:
d2:45:ff:c1:33:61:d7:a0:e1:59:c4:39:41:07:75:02:79:21:
79:d9:f6:e8:3f:34:68:1d:00:35:58:01:42:3a:74:cb:82:50:
22:9e:af:9d:00:79:03:62:76:02:d7:5b:d7:2d:12:c7:4f:77:
f8:66:f1:9d:ea:78:5d:22:a2:b8:d6:ae:8d:3c:46:5b:08:f5:
47:32:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:09:41 2025 by rpki-client