Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxf-dNUO902G9fXi9MtlnQyx_dk.roa
File: dxf-dNUO902G9fXi9MtlnQyx_dk.roa (raw, json)
Hash identifier: Z5lz+KEuo55eh9Ig+q6NuN+J+xUobKuuYqBf13X4Lps=
Subject key identifier: 77:17:FE:74:D5:0E:F7:4D:86:F5:F5:E2:F4:CB:65:9D:0C:B1:FD:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186022B27FB582A95269F70BE20FEE0AB66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxf-dNUO902G9fXi9MtlnQyx_dk.roa
Signing time: Mon 30 Jan 2023 10:13:48 +0000
ROA not before: Mon 30 Jan 2023 10:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:2b:27:fb:58:2a:95:26:9f:70:be:20:fe:e0:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 10:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7717fe74d50ef74d86f5f5e2f4cb659d0cb1fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:c1:78:e2:ef:16:4f:dc:88:9c:e7:19:0e:
31:5b:0e:a9:4b:e6:f8:22:80:29:b5:52:c3:af:f4:
56:e8:e8:d8:e4:6a:3b:70:b5:97:26:0d:10:2e:c7:
b1:c6:1e:6e:6f:29:3a:15:11:45:ac:c1:0e:aa:d5:
84:a6:0d:c9:ea:6d:58:73:82:f9:ac:d1:13:10:3f:
62:30:4f:2a:a5:12:ce:95:49:11:93:c5:fb:bc:63:
58:07:c6:97:f4:f0:4c:f6:12:79:9b:95:87:dc:59:
af:fb:58:6b:88:46:9e:58:db:9c:cc:31:c0:b3:26:
14:60:f3:c8:50:74:30:c5:81:9a:b9:d4:23:5d:76:
0f:48:21:f6:3b:87:99:cd:d6:0b:eb:e5:ea:89:af:
5a:57:8e:d7:86:4f:c8:d7:40:8b:a9:28:79:13:e1:
36:b7:80:b2:12:9d:84:16:c2:85:45:ca:38:91:01:
bf:49:f2:7e:77:96:ac:0e:38:81:8a:aa:cb:88:ab:
cf:04:4e:6c:a7:91:98:db:19:cd:8e:b2:a4:e3:c2:
21:cf:9e:a8:27:29:3d:5f:70:2f:66:5d:d4:c1:eb:
d8:5d:09:04:d3:45:05:23:ec:af:a0:86:e9:0d:65:
d3:49:c6:b5:fe:cb:03:8a:df:c6:53:df:54:bf:df:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:FE:74:D5:0E:F7:4D:86:F5:F5:E2:F4:CB:65:9D:0C:B1:FD:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxf-dNUO902G9fXi9MtlnQyx_dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:47:21:ca:e5:35:cb:f3:2c:87:e6:ae:ac:a3:68:28:91:51:
58:e7:ab:15:37:c1:88:c6:03:80:bc:0c:64:47:b0:c6:c0:52:
06:3b:d8:11:13:24:58:d2:60:8d:c3:c7:f2:d7:1b:10:e5:05:
7a:9e:ae:94:a7:8e:5c:86:75:bc:3f:2c:d6:85:4c:2c:f3:88:
5a:08:f2:80:92:97:c5:98:4a:e1:1e:54:f1:74:7f:ee:11:d2:
e9:b2:be:4b:80:f2:dc:b0:bc:ec:81:8f:29:bd:7e:29:1e:f2:
56:38:15:d9:98:ee:30:3a:28:44:8d:1c:15:d5:c5:e1:e8:a7:
a7:b7:36:f0:b2:e5:0e:69:0a:1e:16:22:f7:68:80:16:b5:14:
4d:06:5e:fa:20:fd:34:bb:e8:bf:5e:a8:47:90:d0:6d:f1:6a:
08:34:2d:3a:1a:28:5b:8d:2e:69:65:74:72:3f:9a:13:60:48:
cf:fb:ac:56:d9:bd:fa:01:b9:9b:52:4b:64:74:91:9f:a8:1d:
4d:8c:33:a3:e3:89:17:c3:57:b8:bf:ed:a0:90:aa:2c:9a:98:
79:12:5d:cc:60:f4:c9:85:04:d9:14:ff:98:d6:c0:93:13:1a:
62:e8:74:8e:75:34:56:34:e3:89:46:73:8b:13:53:c6:52:97:
c3:d9:4b:e6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYCKyf7WCqVJp9wviD+4KtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTMwMTAxMzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzE3ZmU3NGQ1MGVmNzRkODZmNWY1ZTJmNGNiNjU5ZDBjYjFmZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bBeOLvFk/ciJznGQ4xWw6pS+b4
IoAptVLDr/RW6OjY5Go7cLWXJg0QLsexxh5ubyk6FRFFrMEOqtWEpg3J6m1Yc4L5
rNETED9iME8qpRLOlUkRk8X7vGNYB8aX9PBM9hJ5m5WH3Fmv+1hriEaeWNuczDHA
syYUYPPIUHQwxYGaudQjXXYPSCH2O4eZzdYL6+Xqia9aV47Xhk/I10CLqSh5E+E2
t4CyEp2EFsKFRco4kQG/SfJ+d5asDjiBiqrLiKvPBE5sp5GY2xnNjrKk48Ihz56o
Jyk9X3AvZl3UwevYXQkE00UFI+yvoIbpDWXTSca1/ssDit/GU99Uv9+RjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHcX/nTVDvdNhvX14vTLZZ0Msf3ZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHhmLWROVU85MDJHOWZYaTlNdGxuUXl4X2RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAChHIcrlNcvzLIfmrqyj
aCiRUVjnqxU3wYjGA4C8DGRHsMbAUgY72BETJFjSYI3Dx/LXGxDlBXqerpSnjlyG
dbw/LNaFTCzziFoI8oCSl8WYSuEeVPF0f+4R0umyvkuA8tywvOyBjym9fike8lY4
FdmY7jA6KESNHBXVxeHop6e3NvCy5Q5pCh4WIvdogBa1FE0GXvog/TS76L9eqEeQ
0G3xagg0LToaKFuNLmlldHI/mhNgSM/7rFbZvfoBuZtSS2R0kZ+oHU2MM6PjiRfD
V7i/7aCQqiyamHkSXcxg9MmFBNkU/5jWwJMTGmLodI51NFY044lGc4sTU8ZSl8PZ
S+Y=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:25 2025 by rpki-client