Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dc5Q0V-j3pP3xpKtKJGmRrLY5n4.roa
File: Dc5Q0V-j3pP3xpKtKJGmRrLY5n4.roa (raw, json)
Hash identifier: 4pJmhO9Ym6Ldzh+xzrS3Crlbd8sP22EUhMi1WfevmyI=
Subject key identifier: 0D:CE:50:D1:5F:A3:DE:93:F7:C6:92:AD:28:91:A6:46:B2:D8:E6:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E7B5CCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dc5Q0V-j3pP3xpKtKJGmRrLY5n4.roa
Signing time: Mon 28 Feb 2022 14:09:12 +0000
ROA not before: Mon 28 Feb 2022 14:09:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853578445 (0x6e7b5ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 14:09:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dce50d15fa3de93f7c692ad2891a646b2d8e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:15:3a:56:41:6f:c2:51:f1:25:86:ec:9c:
77:ff:03:6d:d3:49:4a:c7:3b:b1:76:7d:3f:41:25:
17:35:f5:68:a3:09:cb:76:32:f5:df:b8:16:a8:23:
53:1c:93:70:49:59:40:91:3b:22:24:c5:90:dc:1f:
d0:35:e8:21:a3:23:c1:74:ec:e8:c7:6b:a8:c9:69:
a4:d7:36:45:75:ff:cd:be:15:40:ea:02:84:ff:90:
92:56:45:50:23:02:89:1c:4c:b1:01:1f:0f:7b:42:
86:13:fd:88:45:bf:21:d4:9d:3a:04:7c:f5:79:d3:
5d:21:70:d7:16:a6:42:69:56:fd:34:39:c1:de:08:
c2:c3:00:3a:5f:2a:b2:79:7a:38:c2:29:69:e5:8e:
73:fc:20:d1:01:a2:02:80:e7:82:12:5e:03:3c:b6:
04:0d:df:ae:33:bb:f6:58:93:8a:4b:a2:b0:d1:aa:
bb:08:b1:5c:00:5c:82:d8:10:02:22:e3:48:3d:ca:
47:43:32:fa:3b:d2:e7:20:e2:c8:c7:02:a7:49:92:
83:7e:bc:7c:50:12:70:ed:ca:3e:38:5a:90:7e:1f:
03:b1:50:25:de:61:e8:f7:60:7a:9a:7d:df:37:31:
d3:5e:6a:2d:b9:2d:fa:cc:3f:be:80:d1:10:a0:e7:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:50:D1:5F:A3:DE:93:F7:C6:92:AD:28:91:A6:46:B2:D8:E6:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dc5Q0V-j3pP3xpKtKJGmRrLY5n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:37:25:84:fe:d1:6c:35:92:51:5f:a5:3e:4f:8d:de:52:dd:
98:fd:f9:bb:92:d5:98:97:e8:67:23:c0:34:48:bc:c3:d9:d6:
b9:e1:d0:65:07:a9:e5:2b:92:9a:64:d0:02:1b:60:cf:b5:f6:
83:e6:c5:d6:3a:cc:b1:bc:79:0d:f6:2a:ac:9e:82:19:bf:fe:
38:66:34:6d:11:16:2f:22:06:0c:3d:81:64:62:81:5f:0a:88:
77:01:c2:3a:ff:de:5d:72:cb:75:15:93:c8:b4:31:19:68:35:
cc:0f:64:2d:a5:21:e1:ba:9d:8f:0a:13:ef:dc:73:a7:83:ba:
60:b6:ff:f8:e8:87:cc:29:50:7c:0f:00:2d:dd:dc:b9:e5:90:
53:9d:cd:e7:9b:5c:0b:4a:49:f9:ab:e8:2a:5b:f3:86:90:4a:
e8:a7:f9:3c:b3:1a:83:b3:8d:48:ad:2b:85:ae:d3:d6:48:93:
68:70:5c:b9:fa:f9:57:75:eb:c6:a1:cf:7b:19:40:e1:29:ce:
74:b4:63:f6:89:79:20:21:99:14:38:0d:67:f5:3b:db:0f:e7:
4d:ba:37:54:8e:a3:62:37:3c:c9:25:23:e8:03:9e:8b:a5:04:
e0:88:f5:89:b7:80:4c:f2:e1:8c:e7:85:9a:60:5e:c0:67:28:
a2:03:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:00 2025 by rpki-client