Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dnn8KOUtWg16l70frdBmsfpnhPk.roa
File: dnn8KOUtWg16l70frdBmsfpnhPk.roa (raw, json)
Hash identifier: KHUUFrl8GM51TejSo92urBy5pZX5aGeFGRTfbk7U/+U=
Subject key identifier: 76:79:FC:28:E5:2D:5A:0D:7A:97:BD:1F:AD:D0:66:B1:FA:67:84:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851F8AE79E3180259DF3A6E764B156D68C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dnn8KOUtWg16l70frdBmsfpnhPk.roa
Signing time: Sat 17 Dec 2022 10:04:34 +0000
ROA not before: Sat 17 Dec 2022 10:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1f8a:8821/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:8a:e7:9e:31:80:25:9d:f3:a6:e7:64:b1:56:d6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 10:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7679fc28e52d5a0d7a97bd1fadd066b1fa6784f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b5:61:b2:ef:03:ec:e1:f3:cf:96:b5:bf:a1:
65:2a:77:f4:41:c8:c6:6c:3d:8d:8f:4f:d7:5c:79:
d5:8f:1d:9c:86:17:44:02:50:9e:72:17:14:32:5a:
03:07:69:3c:3c:f7:a2:de:66:4f:67:8d:c0:fb:fa:
ae:7b:e7:ec:84:cb:3f:54:c8:16:be:eb:2f:39:55:
5c:9f:f9:08:4d:51:98:43:47:66:97:e6:62:59:41:
2d:df:20:1b:83:80:25:af:45:b7:46:dd:f8:fd:d3:
e3:72:69:b3:a6:41:7d:66:3c:d2:a2:89:70:37:39:
08:32:5d:e8:76:41:12:33:08:37:1a:07:a6:7a:bf:
0f:a3:d6:9e:05:21:b4:c2:48:55:91:07:3f:04:e1:
70:fd:ba:a5:33:b5:92:70:c2:99:ad:cf:a6:55:ca:
d3:d8:50:f0:20:a3:a3:f3:da:4e:c0:9a:61:b9:37:
79:35:e4:79:02:db:fd:f8:a4:6c:11:1a:57:75:18:
21:2c:66:da:0b:a5:5d:96:7a:8e:e4:43:3e:06:7d:
81:66:a3:a9:46:52:00:a9:86:8c:e1:9e:12:7f:14:
a2:54:af:4e:1a:98:f9:2e:c0:57:cd:56:44:6a:cf:
6e:d2:1e:c4:c4:a8:bc:48:ba:45:81:dd:b3:a6:a7:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:FC:28:E5:2D:5A:0D:7A:97:BD:1F:AD:D0:66:B1:FA:67:84:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dnn8KOUtWg16l70frdBmsfpnhPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:01:1e:73:3b:0f:f5:bd:6f:88:e4:fa:2b:db:f8:98:77:1e:
4b:4d:ba:fc:16:5f:84:54:dc:f8:91:63:13:e0:3e:05:7b:cc:
2a:05:1c:0c:f9:a6:94:83:ed:5c:a0:a0:34:67:88:83:c0:41:
a6:89:5f:a9:c0:d5:8c:1b:0a:5a:97:35:0f:ee:ae:7e:82:2a:
04:f3:66:9e:0d:69:5a:c2:e1:51:c1:0c:23:ab:dc:24:57:6f:
a3:4c:ce:1d:50:e0:7e:44:da:93:82:dc:3b:02:84:e7:ab:fe:
fc:c5:da:ba:0b:07:98:f3:76:74:52:05:78:79:43:ff:80:ff:
15:c4:f5:6c:d4:d7:20:86:92:63:4d:6c:fa:98:69:64:c5:ac:
e8:28:92:ae:dd:24:41:99:58:9a:4a:42:98:c9:6c:d0:b2:1c:
d0:c7:47:26:14:82:c5:46:10:2f:a0:ff:2c:57:71:0c:b0:9b:
0a:92:55:1e:68:d9:25:d6:f4:b4:6d:6f:f6:5b:dc:e4:49:a9:
aa:05:93:df:29:7e:22:c9:a6:ff:3c:24:10:4a:04:78:e7:99:
e0:b0:ea:33:14:c3:17:5d:ef:5f:dc:38:2d:b5:08:66:92:e2:
c7:27:46:4c:59:f8:25:8f:29:28:ac:2e:c3:fc:10:84:1a:a9:
16:17:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:45:21 2025 by rpki-client