Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj_7sNN9xz9Gau6NYlRADzlkJ5E.roa
File: Dj_7sNN9xz9Gau6NYlRADzlkJ5E.roa (raw, json)
Hash identifier: gzIqw4/bpdxLc81oR3lbm4tLLK0RWN4orxhxNniLIqc=
Subject key identifier: 0E:3F:FB:B0:D3:7D:C7:3F:46:6A:EE:8D:62:54:40:0F:39:64:27:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 850EC959
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj_7sNN9xz9Gau6NYlRADzlkJ5E.roa
Signing time: Wed 18 May 2022 05:15:00 +0000
ROA not before: Wed 18 May 2022 05:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232338777 (0x850ec959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 05:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e3ffbb0d37dc73f466aee8d6254400f39642791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:f9:1f:21:46:71:92:f7:aa:81:e2:a0:f2:
e5:45:05:66:f1:f4:3e:ca:4e:75:76:87:f5:a8:17:
4e:fc:07:88:51:91:98:0d:c1:d4:60:8c:cf:37:a3:
4c:a4:98:aa:1e:e0:20:9c:f9:36:57:da:14:dd:34:
34:bb:09:51:dd:ad:c6:a8:a0:8d:10:8f:3b:a3:da:
21:bd:46:b6:3e:02:d7:26:c0:b6:08:b5:da:06:2a:
66:d1:85:13:b1:d9:11:3b:23:53:49:01:11:f1:c0:
3d:a2:c2:a4:45:c2:cc:df:22:90:ce:b1:be:0c:65:
18:84:c8:f7:95:95:a1:0a:ab:a5:83:79:fe:7a:cb:
3c:76:be:34:31:ff:f2:fc:e7:85:67:88:6a:2e:3a:
07:44:de:f8:5d:6b:ed:48:33:1a:e7:c8:09:31:cb:
ef:a9:2a:23:cc:22:da:9b:d4:29:9f:70:e7:35:8f:
76:10:e8:c9:78:46:62:81:bb:9c:c4:95:a5:69:41:
e0:c6:cf:64:3a:83:e9:1d:5c:23:2d:d4:da:d8:08:
45:b7:3c:5b:72:96:c7:dc:96:53:12:28:d1:eb:e1:
55:89:bb:2a:71:42:39:46:01:4d:b7:76:fc:cf:2a:
dd:12:68:3f:bf:71:c6:7d:36:0a:6b:9e:fe:72:79:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:FB:B0:D3:7D:C7:3F:46:6A:EE:8D:62:54:40:0F:39:64:27:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dj_7sNN9xz9Gau6NYlRADzlkJ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:4d:91:b7:6d:3b:96:78:25:a4:cd:4d:60:6c:d1:90:76:fb:
81:92:fa:5a:5e:92:f7:e2:a8:7f:51:f4:47:c8:1b:b6:e7:70:
12:e5:2a:fe:a1:f8:f3:39:c8:e0:96:1b:c6:65:17:ed:fd:e5:
6b:4d:72:f6:c3:97:6b:a5:7b:4b:40:54:ce:a3:a8:db:32:58:
69:09:7a:65:4a:d2:74:2a:f4:d8:83:93:eb:00:22:a4:ff:c6:
09:73:82:67:5a:2e:91:b7:66:fb:f6:b0:89:c0:39:eb:bf:f5:
37:62:ac:f8:28:57:cb:a4:1d:e1:0f:06:88:59:d0:42:22:82:
a4:8c:f1:33:4e:ef:24:a6:75:02:23:11:ad:38:03:a2:5c:02:
41:39:d4:f7:86:e2:32:a8:c5:c7:d7:d2:b5:97:b0:81:0d:b4:
27:24:99:c7:e4:4a:95:fb:f4:bd:bb:56:2e:0b:1c:e7:44:b1:
59:54:96:3d:6f:e3:62:6a:6c:b0:4c:42:75:b4:e5:43:cd:2f:
1b:e2:18:a8:4e:73:f3:0e:9a:52:61:0a:d6:e1:13:c4:34:3d:
d0:3d:e0:74:dc:1e:9a:32:3d:7b:f7:90:77:7a:23:04:c9:cb:
2d:43:6d:38:75:c3:c3:f3:49:10:2e:81:3c:27:5a:e7:1d:20:
0f:aa:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:38:33 2025 by rpki-client