Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEEmBCh7UWO23hrvp5i0w6p0oZk.roa
File: dEEmBCh7UWO23hrvp5i0w6p0oZk.roa (raw, json)
Hash identifier: xWDZQkyTs+Qx1/2IJqR3oMXD2N8Q7Gxuur3QAimzLvc=
Subject key identifier: 74:41:26:04:28:7B:51:63:B6:DE:1A:EF:A7:98:B4:C3:AA:74:A1:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C04FEB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEEmBCh7UWO23hrvp5i0w6p0oZk.roa
Signing time: Sun 12 Jun 2022 06:10:02 +0000
ROA not before: Sun 12 Jun 2022 06:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349137588 (0x8c04feb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 06:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74412604287b5163b6de1aefa798b4c3aa74a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:a4:fa:44:d5:32:f1:ad:d4:e5:b3:16:17:
a4:a8:90:44:c7:61:33:75:aa:0f:51:0f:75:c3:57:
3e:c0:2b:8f:d7:a1:a8:0e:f0:1a:f5:a1:e6:d1:45:
cc:dd:ff:90:67:4c:1f:86:47:52:8f:38:fe:50:f5:
d3:b8:72:42:5c:d4:f5:54:de:b2:09:94:8c:c3:fa:
da:f2:63:53:b3:7e:71:05:4b:4f:70:b5:b3:2d:0a:
ce:6d:7f:2f:96:f8:3a:ed:b1:36:36:5f:86:c8:32:
66:eb:83:37:2e:a6:51:f6:90:33:4c:93:78:d7:f7:
47:2f:6b:c0:c5:be:b0:c7:9e:d8:b3:81:33:5d:c7:
7a:97:7f:a6:b5:47:bd:33:9a:f5:b4:cb:7a:fd:17:
c0:6b:b0:e9:e7:80:75:4a:02:26:67:04:b1:d3:84:
c2:83:54:7e:71:67:75:e4:eb:71:0c:ef:3e:b9:67:
9f:55:22:c4:65:ca:fe:87:12:83:90:dc:bf:94:99:
df:6e:92:24:68:f5:1a:bf:9e:2e:9b:a3:6d:0b:39:
31:a5:8e:e8:d1:6a:94:a9:0a:dd:16:a5:60:67:d8:
8f:2a:0a:1f:5c:2a:d6:5b:7f:8b:90:46:55:de:9c:
98:3e:92:d0:5e:83:c8:32:e0:2b:35:58:28:d7:cf:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:26:04:28:7B:51:63:B6:DE:1A:EF:A7:98:B4:C3:AA:74:A1:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEEmBCh7UWO23hrvp5i0w6p0oZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:2f:99:9c:01:f5:92:b9:1f:a8:ff:87:76:81:bb:cc:38:32:
64:7c:12:37:93:05:87:72:8c:ab:6e:6b:60:ac:fc:83:54:06:
b3:56:ac:ae:ec:f1:14:9e:0f:fb:15:d8:08:40:aa:03:06:93:
97:fc:cb:54:0a:2a:86:45:1a:42:48:13:4c:a6:d5:fb:1d:25:
73:4c:fc:15:5b:6d:73:1f:89:9b:dd:52:f0:fe:c3:10:27:e3:
57:74:6e:76:35:1c:f1:e0:8a:81:b4:cd:91:ec:f9:80:88:23:
99:02:0a:51:62:25:0d:fa:42:e3:94:2f:5d:d5:db:5b:55:71:
a4:dd:a7:22:72:f4:4e:b0:e9:13:d3:5d:37:6e:43:cb:7d:0f:
2d:ef:7f:90:c6:23:36:71:a3:61:cd:9f:26:4a:d6:61:f0:1e:
17:5a:ee:4a:3a:a5:84:41:12:0c:f4:06:78:66:06:ce:73:12:
82:31:2f:ac:21:8a:3c:17:87:31:27:e4:4c:a3:c6:01:bc:55:
31:9e:8d:dc:d0:78:6d:37:9f:72:6d:13:e8:90:69:38:0d:b2:
51:5a:0f:7f:d4:fe:84:09:7b:b6:b4:7f:a4:7c:8f:7e:6f:89:
b1:61:35:64:e9:7f:a7:6c:58:bc:24:40:17:76:ef:6c:52:b5:
46:69:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:51:52 2025 by rpki-client