Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxvDlJCEpNjD1bzvKvsClJ8d9WY.roa
File: dxvDlJCEpNjD1bzvKvsClJ8d9WY.roa (raw, json)
Hash identifier: 1gx6NnQX5/a3yIaGdTRVR8UsdRYm3Tpd0kKGJXgOGJM=
Subject key identifier: 77:1B:C3:94:90:84:A4:D8:C3:D5:BC:EF:2A:FB:02:94:9F:1D:F5:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E3F0E209D55AA0C203735ADB1FADFB9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxvDlJCEpNjD1bzvKvsClJ8d9WY.roa
Signing time: Sat 09 Jul 2022 17:10:23 +0000
ROA not before: Sat 09 Jul 2022 17:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e3:f0:e2:09:d5:5a:a0:c2:03:73:5a:db:1f:ad:fb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 17:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=771bc3949084a4d8c3d5bcef2afb02949f1df566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:ee:89:9d:8c:1c:f6:31:0e:47:51:4b:a4:
23:3d:24:c7:8c:7a:47:c7:77:29:e1:9b:82:b9:3f:
8e:e1:cd:28:08:37:98:17:bf:83:a0:c5:c5:6c:f0:
c3:f9:39:e1:c7:3c:3d:ee:73:94:d1:02:04:92:c9:
86:4f:ad:c4:bf:5e:0c:60:40:4d:11:f5:73:e5:fd:
8c:45:7b:39:a7:8c:2b:7a:00:8f:0f:d5:a8:2d:f6:
79:3c:8f:d4:d2:5d:ac:c1:28:b4:ef:76:be:34:e5:
fa:90:de:04:f2:ad:34:d2:14:a7:dc:0e:ce:00:ff:
3b:d2:61:44:63:35:94:fe:60:ab:43:42:5e:20:72:
4a:06:83:87:79:0a:d5:db:cd:e4:ec:d7:13:e2:eb:
01:70:b1:ca:71:5c:f9:aa:a9:82:17:b3:2f:1a:87:
ae:a9:d5:ce:57:7f:5d:fe:50:63:62:44:c8:63:db:
34:c6:7f:a5:7b:7d:99:9c:de:97:81:67:95:0d:4a:
49:4b:53:aa:20:58:f0:88:b9:2d:d8:da:f8:1a:a9:
13:5b:2d:a9:49:fe:e3:63:b6:3f:a0:c0:f0:35:7e:
e6:1e:ca:50:ac:57:30:22:11:98:5d:d9:cc:5f:8f:
36:2c:94:93:1d:7d:31:64:87:65:07:ca:dd:13:e5:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:C3:94:90:84:A4:D8:C3:D5:BC:EF:2A:FB:02:94:9F:1D:F5:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dxvDlJCEpNjD1bzvKvsClJ8d9WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:5c:fc:c0:fa:15:a2:46:8b:d1:75:18:ae:c6:f6:98:db:ce:
f3:45:13:70:96:ea:00:d8:09:58:63:b9:81:c5:5b:94:da:7e:
59:fb:50:f6:c1:0b:92:29:7d:dd:d9:13:ee:21:30:da:0c:0c:
e7:31:6b:d4:45:58:f3:27:2c:02:66:43:fc:12:26:ff:5f:1f:
dd:16:10:bb:7e:52:2e:c5:eb:d3:51:9d:54:5c:f2:e4:b9:99:
e1:b1:4a:40:7e:68:e3:96:b6:74:a2:a7:73:9d:21:6e:af:a4:
b4:7e:69:51:0f:be:b6:ed:51:6e:6c:73:11:02:6e:60:8e:a9:
4f:b4:1d:68:f3:03:5d:79:fd:7f:05:24:f5:23:27:4e:ea:a8:
87:cd:0c:64:f8:4e:20:57:9f:ae:67:2d:24:f9:25:ee:76:1c:
ec:a5:b0:04:d5:ff:58:c8:1f:4f:92:1e:30:94:da:09:fa:28:
12:89:e9:ef:36:7c:c8:f0:b5:ee:ac:05:0a:b2:b8:92:97:40:
f6:cc:f2:cc:0d:45:5d:c3:2d:4d:f5:e8:5e:6e:89:7b:09:1b:
6f:b8:ca:7a:c9:fe:b7:dd:21:41:37:a1:a5:4b:c0:bb:d0:d5:
0e:28:87:9a:b7:c7:e8:99:96:84:56:5f:10:48:32:73:d4:e6:
0f:39:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:38:05 2025 by rpki-client