Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DmpueQfEq7e0-ZezYU7rqqB-5M.roa
File: _DmpueQfEq7e0-ZezYU7rqqB-5M.roa (raw, json)
Hash identifier: NYAtZN10obvgBVEM/psWa3Uws1vyWf94SkQxirO8F3c=
Subject key identifier: FC:39:A9:B9:E4:1F:12:AE:DE:D3:E6:5E:CD:85:3B:AE:AA:81:FB:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854CA1101AF659942942D4251F3CC88CE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DmpueQfEq7e0-ZezYU7rqqB-5M.roa
Signing time: Mon 26 Dec 2022 04:11:41 +0000
ROA not before: Mon 26 Dec 2022 04:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4c:a1:10:1a:f6:59:94:29:42:d4:25:1f:3c:c8:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 04:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc39a9b9e41f12aeded3e65ecd853baeaa81fb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:92:2e:45:fc:3b:ec:7f:23:dd:3c:a6:49:
43:c7:a5:bf:ab:8d:a5:d2:e8:1a:0b:a1:cc:9f:af:
fc:dc:84:1a:06:1c:9c:15:bf:a6:64:46:57:6c:df:
6f:03:06:43:76:f8:55:00:85:85:bc:58:cf:42:24:
64:8d:66:9e:3e:de:78:35:c2:e2:ca:d2:5c:6e:53:
24:c9:64:c7:45:0d:cc:da:da:10:00:a6:be:ea:2f:
49:d3:53:46:7a:f4:d9:d7:88:9a:c3:9d:c8:2f:a7:
10:19:ee:81:72:be:25:82:81:06:8a:29:1d:3e:8f:
0a:a5:58:2b:43:71:08:fc:4b:0e:65:ac:ba:80:7e:
75:e2:f3:c1:6b:f2:a7:c1:23:42:e9:6e:4e:09:78:
17:87:27:08:67:78:3c:76:bc:aa:12:0e:33:de:eb:
d1:be:0b:24:24:96:02:66:04:01:58:cd:d3:18:cc:
65:77:72:05:17:d1:b3:fb:f2:e8:30:f1:43:ae:98:
49:6e:f3:56:90:52:4d:96:76:13:7b:85:a2:f6:bd:
10:a8:3f:eb:5a:a1:cc:9d:f6:c8:3f:a5:cc:7e:73:
0d:68:32:71:24:89:bf:3d:07:71:ca:0b:3f:a5:dd:
02:9c:af:00:54:42:d2:f6:c3:52:ad:33:91:1f:e2:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:A9:B9:E4:1F:12:AE:DE:D3:E6:5E:CD:85:3B:AE:AA:81:FB:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DmpueQfEq7e0-ZezYU7rqqB-5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:a8:d5:a8:fa:78:a5:de:b1:9f:e5:03:33:f5:e9:e7:e5:af:
1c:ad:6f:37:0d:cc:81:a2:78:fd:bb:b3:be:04:ed:dd:6c:65:
b4:80:a9:63:5b:4a:07:ed:1f:14:b5:14:31:6c:12:b9:27:df:
36:92:fe:43:1e:d8:bb:03:ef:91:ca:7f:ff:24:05:bf:d1:7b:
9e:47:4d:80:8c:40:fc:b4:b2:9d:c0:ac:de:a4:3b:a1:3e:82:
fb:4b:ac:55:0c:c9:42:8a:fc:17:ca:44:94:b5:05:93:9f:39:
2c:b4:61:f2:82:03:4d:37:af:f2:68:dc:dd:1e:9e:98:4b:c2:
3c:33:38:82:e8:73:d7:4d:39:35:61:36:fe:67:34:d0:4a:04:
23:98:ec:eb:fd:b5:76:70:8a:3e:a4:5f:4b:14:a2:fb:0b:27:
4c:21:be:79:d8:7b:68:6f:3a:12:90:32:e2:88:bb:99:a0:a4:
19:46:41:22:4e:52:53:e5:ec:95:30:96:cd:2c:a0:46:9a:27:
7e:d9:cf:3f:3f:83:70:4c:16:61:5f:8d:e1:e5:a7:eb:e2:9d:
3b:41:5c:1d:c5:8c:0d:0f:61:af:a6:1a:a1:dc:90:7c:df:fd:
1e:23:a2:a3:27:14:5c:37:5d:d3:f3:13:af:09:4e:90:97:f3:
0a:7d:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:58 2025 by rpki-client