Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSi8XNZ0nXUupWiQzqVoqSuTSg4.roa
File: DSi8XNZ0nXUupWiQzqVoqSuTSg4.roa (raw, json)
Hash identifier: HWiaFr6syDA7/lw8tEDIDYkmQpYwJrRYIfXr5le6WUI=
Subject key identifier: 0D:28:BC:5C:D6:74:9D:75:2E:A5:68:90:CE:A5:68:A9:2B:93:4A:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70F0B049
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSi8XNZ0nXUupWiQzqVoqSuTSg4.roa
Signing time: Wed 09 Mar 2022 03:09:33 +0000
ROA not before: Wed 09 Mar 2022 03:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894821961 (0x70f0b049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 03:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d28bc5cd6749d752ea56890cea568a92b934a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:df:c1:e5:b1:01:7c:7f:ae:70:3c:e0:30:
d9:48:99:24:2d:98:48:d4:91:3d:b9:7c:f5:09:e4:
cc:fd:21:b2:84:51:46:72:a0:bd:11:41:0c:91:40:
f7:7a:72:c5:2c:cf:b0:63:ba:72:26:6c:78:49:02:
80:07:69:21:e1:48:d2:67:66:b3:fd:2a:77:4f:2b:
59:91:2d:31:7b:f7:41:6c:7e:a7:98:bb:e8:fd:08:
7a:0e:57:f6:b3:48:71:b3:ef:de:e3:d7:06:91:aa:
0d:3c:d2:dd:df:f1:3b:f1:94:6c:25:13:e4:89:af:
b9:5d:97:db:73:5d:1e:91:6c:21:aa:ab:a3:77:d3:
6c:bc:c8:fb:bf:df:67:3c:21:26:99:60:a9:66:ec:
50:f0:cf:99:39:46:8b:b9:fb:18:d3:ca:6b:3b:8f:
6f:e2:e3:f2:85:99:ec:c2:11:de:6a:df:63:60:f8:
5a:ea:10:85:90:aa:98:57:26:69:a6:a5:12:13:8a:
80:ac:a2:34:ad:2a:50:ce:f7:e2:fc:59:5d:83:8e:
98:01:ef:86:72:1a:a4:59:b3:86:89:93:19:55:d3:
ff:f9:60:b3:f8:4a:1d:5e:27:7d:b9:91:2e:5a:20:
ec:1d:1c:61:d7:f3:48:e5:3f:cb:34:11:be:ce:c3:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:BC:5C:D6:74:9D:75:2E:A5:68:90:CE:A5:68:A9:2B:93:4A:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSi8XNZ0nXUupWiQzqVoqSuTSg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:53:21:f9:98:aa:72:35:cb:c1:ef:bc:89:12:81:dd:c7:32:
c5:40:00:52:9f:ba:78:40:13:39:b8:a7:71:06:d6:27:c2:ad:
d8:58:f2:19:54:37:90:67:cf:3b:83:0c:b3:f1:54:1f:14:a2:
25:1a:a6:43:28:dd:68:8b:74:52:fb:3a:00:60:72:ce:66:f0:
f7:fe:aa:0c:ea:69:1e:e6:35:0b:9d:e3:b2:6b:81:e6:05:3c:
63:29:40:57:24:8a:9f:ff:36:a2:66:e1:83:01:1c:72:cf:67:
67:03:19:11:f8:a6:bb:6a:00:4e:dc:79:46:8e:c6:84:d7:f9:
6f:93:fd:d0:1c:74:d6:a2:2b:bd:1b:6b:62:9a:5d:b6:38:87:
39:2b:b3:1f:b7:b8:e2:b5:8d:7b:50:35:d3:9b:25:61:04:bc:
7f:0a:21:66:d1:15:47:2b:20:72:95:26:5e:ce:f7:69:af:74:
77:51:3f:38:8f:d9:c6:e9:96:63:d3:7c:56:7c:46:e1:1c:96:
e5:2f:d0:b6:80:05:55:ab:96:4b:2f:3c:00:97:09:07:83:44:
cc:16:06:ae:1c:38:af:7e:51:a9:31:61:c0:3e:f7:ee:2a:ce:
60:08:bb:d7:9d:02:07:63:14:65:f2:7a:b1:94:f5:03:75:87:
0f:e3:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:54:48 2025 by rpki-client