Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DqbMoFOZXDCS_6UiHKkzWHjedYo.roa
File: DqbMoFOZXDCS_6UiHKkzWHjedYo.roa (raw, json)
Hash identifier: amytHbHS16QbPP4M74C4ZU484OKVaWK8Cg2But/Vpo4=
Subject key identifier: 0E:A6:CC:A0:53:99:5C:30:92:FF:A5:22:1C:A9:33:58:78:DE:75:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185259191EA2DD18C97EA2F1162AF625828
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DqbMoFOZXDCS_6UiHKkzWHjedYo.roa
Signing time: Sun 18 Dec 2022 14:09:35 +0000
ROA not before: Sun 18 Dec 2022 14:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:91:91:ea:2d:d1:8c:97:ea:2f:11:62:af:62:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 14:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ea6cca053995c3092ffa5221ca9335878de758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:bf:94:1a:43:7f:f3:47:06:9b:1e:43:d8:
40:40:bf:1f:28:6f:8b:46:1f:59:32:9f:e2:cf:04:
5c:5c:ee:33:c2:b7:95:56:89:fa:ed:92:46:31:6f:
e2:90:97:24:8e:01:da:fe:73:ed:7f:6d:c5:d1:ef:
fb:93:88:70:19:4f:5a:0f:8f:0b:db:77:65:7f:17:
e4:ad:50:c2:9b:9b:a0:3f:53:22:45:50:4c:a3:96:
96:f3:97:91:6b:cc:44:3c:49:12:d5:b0:d0:6e:cd:
c9:6c:61:92:2f:8d:6e:ea:a1:0b:cc:6f:14:22:cc:
ce:e1:fb:b9:72:b6:b9:45:86:19:35:f8:d8:27:e8:
7e:22:80:4e:6f:97:27:47:a6:ac:d0:bf:6d:4c:40:
a9:a1:fe:af:95:7f:22:ab:d8:e6:57:00:9d:f3:c9:
71:74:b8:d0:ed:e4:48:35:28:dc:f3:15:c4:0e:35:
3f:bd:c7:c4:e3:d2:12:93:9f:09:18:5a:6a:df:74:
20:b3:00:62:99:b7:10:4f:cb:a8:86:91:ef:a1:23:
78:eb:49:e0:81:ad:aa:da:1b:d7:0f:80:f2:c0:44:
ea:90:15:00:05:25:b0:b3:a1:77:34:b3:7e:c6:06:
d3:8c:09:b5:c2:e7:68:16:1e:f1:75:bb:82:94:01:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:CC:A0:53:99:5C:30:92:FF:A5:22:1C:A9:33:58:78:DE:75:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DqbMoFOZXDCS_6UiHKkzWHjedYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:e5:3a:5e:f1:72:1b:94:6e:88:41:d0:33:bc:da:e7:2c:12:
d4:0d:53:d4:81:76:ec:c5:f1:24:99:3e:93:59:32:4b:91:28:
9d:19:0a:8d:66:46:9e:88:cf:8e:82:11:aa:d7:4a:f0:4e:b9:
f2:3e:89:d5:9f:22:cc:53:9f:34:88:a9:a6:5c:e7:b5:cd:b5:
70:e1:5f:da:74:31:b6:12:1a:ed:61:77:bd:8d:42:75:3c:2c:
d5:80:2d:6d:93:35:a2:b0:c6:5a:5b:05:3b:1b:89:65:7a:11:
f3:b7:4b:c0:14:cf:47:2d:dd:f0:cd:93:c3:09:ec:56:ba:5d:
63:5a:25:a6:d9:b8:ec:ac:0f:bc:7d:e4:7d:f0:0b:cc:08:09:
ae:42:1c:7d:99:ff:cc:e8:28:54:53:9f:a1:15:7f:d4:34:c5:
30:e8:fb:82:79:95:95:02:5e:4d:17:89:68:a4:84:55:41:6c:
ee:07:c8:c5:41:1d:dd:11:fa:cf:0d:a8:ea:1f:7c:24:38:04:
a3:fd:59:37:7a:bd:83:eb:55:83:8c:95:8a:88:f9:34:81:ed:
72:b8:ae:1a:f7:7d:ef:78:58:ba:63:e7:91:2f:4f:6a:90:2d:
5b:1b:e9:4c:47:d6:f4:e4:a6:b8:c2:9c:14:69:ec:be:a5:6d:
b5:76:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:31 2025 by rpki-client