Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMQWA8L0rkqpEVkg4W7_CVrYEP4.roa
File: DMQWA8L0rkqpEVkg4W7_CVrYEP4.roa (raw, json)
Hash identifier: v0+5KV8UWfzIxXwyn5JocEcZpYtPVRCzTylvZTLLsJ0=
Subject key identifier: 0C:C4:16:03:C2:F4:AE:4A:A9:11:59:20:E1:6E:FF:09:5A:D8:10:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F9CADEB1396EE590F6D8DC837305C98C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMQWA8L0rkqpEVkg4W7_CVrYEP4.roa
Signing time: Sun 19 Mar 2023 12:14:27 +0000
ROA not before: Sun 19 Mar 2023 12:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:ca:de:b1:39:6e:e5:90:f6:d8:dc:83:73:05:c9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 12:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cc41603c2f4ae4aa9115920e16eff095ad810fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:0e:a5:fb:54:6c:07:5d:fb:d3:1b:32:1a:
8f:f8:5c:17:cf:2e:dc:df:43:1d:07:65:ca:bc:d8:
e6:ac:46:68:74:75:89:1a:0c:e5:20:3d:b2:67:1e:
9f:0c:2b:da:84:36:4d:f6:6d:cb:2d:c7:a0:f2:88:
66:09:28:b7:12:e4:94:70:6b:08:e1:11:e1:9f:4c:
43:b8:9e:04:db:20:7e:35:77:f0:f8:98:6d:78:46:
d0:5b:88:24:4b:aa:36:47:d5:10:63:e6:ee:6f:09:
5a:6e:ce:d7:c6:c4:d8:8d:d2:72:38:0c:3d:fc:20:
24:bc:b0:83:4a:09:4e:ac:49:93:4a:79:d0:44:db:
5b:09:3b:06:7a:fe:e5:32:86:85:f2:01:aa:2f:81:
59:58:f3:1e:08:3c:05:dc:1d:62:69:9d:05:29:78:
ef:07:bf:36:7f:44:eb:54:cc:25:22:81:27:0c:74:
38:c2:e3:62:6e:3e:f8:bd:34:d1:98:66:09:68:c9:
28:53:25:fe:55:45:b0:7d:b6:5e:4b:90:0e:18:ad:
76:ea:8d:31:54:e4:80:38:5c:d1:51:62:62:c5:92:
92:47:df:cf:8d:c1:e1:40:c2:cb:ee:e0:74:12:0d:
76:1a:14:e5:b4:06:e9:0d:d4:40:f5:39:f3:26:fc:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:16:03:C2:F4:AE:4A:A9:11:59:20:E1:6E:FF:09:5A:D8:10:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DMQWA8L0rkqpEVkg4W7_CVrYEP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:14:24:54:00:83:e8:b7:d0:df:a6:cf:4c:41:14:bc:c1:f7:
9a:6e:e6:f7:18:f2:8b:e2:c2:aa:1f:2f:0f:77:d9:fc:3c:a4:
28:de:8e:45:a1:92:86:73:2c:67:46:f7:db:82:9f:96:ac:77:
50:da:b3:c1:80:1a:4c:3f:20:7a:5a:39:0b:14:06:11:eb:cf:
81:64:4d:18:f9:ee:cc:3c:cc:df:b4:6b:54:0d:29:cb:64:59:
69:7f:46:f1:be:39:5b:8f:64:f1:5b:cb:fc:06:50:25:29:10:
3b:ce:58:c9:3a:ba:2c:80:c5:56:22:8c:a6:96:69:c7:bb:81:
58:66:3c:c7:75:42:64:b7:d9:60:83:ff:f3:4c:fc:a0:7e:af:
af:0b:a8:9f:92:26:49:f0:bb:a4:e7:c2:63:e6:d5:30:41:90:
8e:4c:3f:2c:9c:56:8e:6e:93:43:48:7a:ad:ec:ad:a3:41:44:
49:81:45:da:6c:83:7c:fc:ee:ea:57:ff:09:e2:29:eb:6e:04:
5a:a0:b2:f8:c7:5b:2f:56:b7:04:bd:32:9b:54:51:9a:fa:80:
0f:57:c1:bf:55:cb:91:c7:6e:62:0f:69:65:13:64:45:78:ea:
db:30:08:c8:44:f6:ce:e6:ac:13:78:f3:68:e7:87:3e:10:f9:
de:11:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:48 2025 by rpki-client