Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DtJYEDMNE_sOeKMk6KQXQnDRlI.roa
File: _DtJYEDMNE_sOeKMk6KQXQnDRlI.roa (raw, json)
Hash identifier: G3t3Z6bMfppZJEKJPtpQodfHqByO3y20oBu3wQIl8EA=
Subject key identifier: FC:3B:49:60:40:CC:34:4F:EC:39:E2:8C:93:A2:90:5D:09:C3:46:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864C9D6C9EF6C15A32BD7C20B88336C583
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DtJYEDMNE_sOeKMk6KQXQnDRlI.roa
Signing time: Mon 13 Feb 2023 21:10:30 +0000
ROA not before: Mon 13 Feb 2023 21:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:9d:6c:9e:f6:c1:5a:32:bd:7c:20:b8:83:36:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 21:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc3b496040cc344fec39e28c93a2905d09c34652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:4d:1b:36:98:54:f0:23:1b:24:1f:22:5c:
3b:34:c3:0f:70:02:45:99:0b:d5:2d:68:71:48:85:
03:70:2f:9e:34:84:3e:0f:ff:3c:79:96:10:f6:88:
89:bd:a6:35:b3:3a:92:57:b2:e4:c2:71:36:4b:77:
5c:1b:a8:41:6b:e7:1c:94:47:ba:76:b7:82:36:67:
ee:3d:7c:de:93:7a:ec:7f:ba:54:f7:3f:1a:b2:f0:
33:c9:0d:5a:17:40:83:c9:f1:da:34:9c:0e:01:98:
ad:06:e0:ea:62:4d:46:99:cd:07:2b:54:1a:d6:e9:
6f:3b:75:8f:2f:0a:41:e4:f4:4b:a1:74:61:30:9b:
31:a5:97:50:c3:ec:c7:30:b8:d7:ba:da:e9:7e:74:
e3:65:34:02:da:e5:37:af:99:df:21:e8:ca:2e:4b:
04:da:bb:af:20:02:0d:23:03:91:21:0e:b1:29:23:
29:88:f9:b4:bf:e8:67:7d:7d:9e:50:61:d0:39:e7:
50:4f:79:fc:c2:1f:b7:07:bc:3a:19:46:8d:69:e8:
0b:f0:61:7f:ef:84:20:cd:f2:2a:c0:d7:af:60:74:
aa:10:7f:39:c8:71:2e:18:4d:ec:35:e0:09:a8:29:
b9:a8:4c:d4:73:2e:ab:76:42:b3:8d:58:2f:4f:4c:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:49:60:40:CC:34:4F:EC:39:E2:8C:93:A2:90:5D:09:C3:46:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DtJYEDMNE_sOeKMk6KQXQnDRlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:40:76:c2:ec:72:54:bf:83:79:a1:b8:5d:df:ad:09:7d:f4:
0a:ad:14:47:68:6c:a4:d5:eb:15:12:5a:f1:cb:89:28:50:88:
38:96:92:04:dd:8e:e5:7b:2d:bc:7f:67:ba:5f:4c:50:64:a5:
5f:e5:0b:8a:22:23:64:2d:33:b7:17:67:3c:80:cd:56:aa:9d:
29:de:78:77:ab:ba:1c:54:dd:70:07:50:f8:4d:fa:4b:3f:0f:
40:0b:8b:95:43:58:6c:2b:75:dc:e5:0f:ec:32:81:bf:a8:9b:
3d:90:72:e2:19:c7:41:d9:20:bd:58:5a:80:52:a2:80:f6:32:
db:79:8a:60:3c:ed:df:eb:16:64:49:20:67:d5:ef:c4:bc:d5:
2c:d4:b6:c7:50:4f:1e:d7:08:cb:1e:77:1c:d4:70:59:11:0e:
a5:af:4d:e0:d0:fe:1a:64:f3:58:4b:9d:dc:aa:34:90:3a:f8:
5f:f9:2e:c0:2c:5c:34:e1:77:d7:5c:84:4b:1f:95:fa:ac:33:
a6:dd:84:bc:8a:44:3e:3a:3d:ec:52:f5:83:cc:ab:37:5b:81:
ac:5a:e4:aa:29:ec:68:7a:b5:da:f2:e5:d3:ae:40:91:4f:5f:
61:f8:11:18:a3:d9:ae:59:4b:12:ca:fe:da:4b:e6:a9:74:da:
65:0e:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:41 2025 by rpki-client