Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DZ3_Doyv4CW2JvIdHwaN4vTLa4.roa
File: 4DZ3_Doyv4CW2JvIdHwaN4vTLa4.roa (raw, json)
Hash identifier: diow+8mcFa7QRCTyO6jLrn2NDLK6Z+kCmBkytm2sppM=
Subject key identifier: E0:36:77:FC:3A:32:BF:80:96:D8:9B:C8:74:7C:1A:37:8B:D3:2D:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018521794AD0709114CD155B422599F5A362
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DZ3_Doyv4CW2JvIdHwaN4vTLa4.roa
Signing time: Sat 17 Dec 2022 19:04:35 +0000
ROA not before: Sat 17 Dec 2022 19:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:2178:d64b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:79:4a:d0:70:91:14:cd:15:5b:42:25:99:f5:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 19:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e03677fc3a32bf8096d89bc8747c1a378bd32dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:f8:1a:e0:81:0c:41:01:c0:d7:5b:97:e0:
24:e8:cc:92:93:bf:07:70:6a:a8:4c:c0:ab:21:2b:
0d:b5:65:39:78:7d:ab:16:57:12:ca:ce:7e:41:1e:
00:80:ba:b5:5a:2a:94:97:d1:2c:e5:f8:82:50:2e:
ce:a9:a5:19:6f:ed:37:fe:32:cc:64:61:c4:e7:c3:
5b:fb:cc:d5:b7:02:23:9a:75:2b:e1:67:73:e5:dd:
77:66:52:c9:f2:fe:d3:1f:8b:f0:f6:bc:6d:74:e6:
c2:3a:bd:ff:40:4a:36:c7:3e:11:4a:d4:67:d5:3d:
42:f3:89:9d:1e:d5:d6:76:35:b0:6f:71:83:fa:ca:
88:31:dd:f0:32:fc:a4:35:c7:2b:71:f4:ea:ef:1c:
6a:85:dc:26:fc:a6:e3:12:5a:40:61:81:bf:1b:e7:
7a:34:01:4f:41:71:3a:36:11:58:b1:41:23:2f:02:
d9:69:ae:15:4e:44:cf:a0:53:08:ec:34:64:b3:d6:
80:1b:e2:e9:b5:b9:23:3c:17:61:e7:97:58:07:bd:
38:3f:ee:63:e7:7f:79:d4:4f:4e:63:1d:1f:47:ea:
2c:df:e6:12:19:af:5c:67:22:1e:da:d4:5b:8e:9c:
18:14:6a:72:7d:41:c1:cf:bb:46:71:f1:67:f4:e3:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:77:FC:3A:32:BF:80:96:D8:9B:C8:74:7C:1A:37:8B:D3:2D:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DZ3_Doyv4CW2JvIdHwaN4vTLa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:08:55:76:00:ca:29:17:bc:5c:a0:9e:03:d9:f5:44:41:fe:
7a:b3:ef:3c:68:2a:3c:2c:57:5b:39:fe:4d:1b:3f:f3:16:34:
92:37:aa:dd:41:d9:25:a9:55:0c:53:a2:51:22:cd:93:48:06:
ff:58:e6:dd:9c:6a:e0:70:ac:e4:ca:88:ab:4f:31:5e:59:a7:
bb:3e:ed:8a:95:0b:13:e1:44:5e:4e:95:b8:80:4d:35:84:77:
1b:63:1e:d2:08:1e:28:3c:50:19:69:1c:85:34:48:05:94:f6:
a9:3e:1e:72:0c:0c:52:bb:12:87:74:e4:54:60:eb:f9:e3:6f:
89:ec:fb:b3:35:b4:c2:f0:43:66:7a:45:6c:50:b5:41:8f:ab:
94:56:33:cc:35:c8:ce:80:30:12:8e:b1:02:67:38:b5:f3:08:
9c:c7:c3:63:21:cb:20:b3:57:e6:10:b3:6a:32:33:eb:e7:fe:
d6:27:f7:e2:44:43:9d:48:db:34:f0:e1:f8:43:46:d0:ce:9f:
23:d4:e3:aa:71:54:a6:b1:14:9d:69:a6:a4:ca:ac:a0:31:44:
91:61:9d:49:71:0b:26:af:94:06:14:d8:af:fc:e4:92:92:7e:
33:d1:b6:cf:fb:b5:12:e1:c8:75:cd:ec:c8:95:eb:cd:48:c3:
8d:11:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:51:10 2025 by rpki-client