Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/duppoD2dkepnrHPt3n8SqpkvUgI.roa
File: duppoD2dkepnrHPt3n8SqpkvUgI.roa (raw, json)
Hash identifier: arpcSx+TAK2OgbJm9fQkdsbyOPghVR/DQzmKy76a8KM=
Subject key identifier: 76:EA:69:A0:3D:9D:91:EA:67:AC:73:ED:DE:7F:12:AA:99:2F:52:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866E1C0D1D7965049D55CF1E00BC553FAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/duppoD2dkepnrHPt3n8SqpkvUgI.roa
Signing time: Mon 20 Feb 2023 09:16:17 +0000
ROA not before: Mon 20 Feb 2023 09:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:1c:0d:1d:79:65:04:9d:55:cf:1e:00:bc:55:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 09:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ea69a03d9d91ea67ac73edde7f12aa992f5202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:e2:60:f4:ae:51:d7:87:1c:2f:95:95:42:
ef:9b:1a:a4:f6:bd:62:b5:ee:e5:f5:f1:33:af:c2:
f6:59:3b:91:cf:6d:0a:4c:94:ef:c5:27:24:3b:71:
2f:d1:db:a8:47:25:7e:9a:44:34:f2:4e:09:91:26:
4a:c9:20:86:bc:1f:01:9e:1a:a2:b1:8b:61:4f:1b:
50:3c:21:d3:07:b0:4d:73:37:11:30:e3:9c:3c:2e:
25:8c:22:4a:bb:6c:51:5d:48:3a:95:c5:56:2f:f6:
23:d2:7c:ed:0a:42:06:71:a0:08:61:98:af:47:d8:
1a:4e:f0:12:c2:49:1d:33:7e:73:be:e2:9e:9c:39:
0a:41:33:e5:42:5b:af:83:e3:2a:1f:ec:92:a8:6d:
55:a4:cf:71:3e:d3:83:a3:fb:b7:b2:1a:0c:cb:0a:
e2:47:3d:74:7d:97:8f:1d:c9:bc:54:cf:cc:a5:e1:
53:e5:f0:ec:ee:39:51:58:b2:2e:6e:b9:05:22:fd:
b8:f9:56:f1:e9:c6:5b:4f:23:f1:b1:d1:89:d1:bc:
8c:c8:dd:3f:ae:81:47:4d:cf:ad:d2:d4:19:84:51:
53:72:db:3d:62:3c:55:c8:fb:0c:92:64:1b:20:0b:
22:6f:5b:0a:b4:c5:db:f6:9e:b4:9f:13:62:f2:ed:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EA:69:A0:3D:9D:91:EA:67:AC:73:ED:DE:7F:12:AA:99:2F:52:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/duppoD2dkepnrHPt3n8SqpkvUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:e5:e6:ea:4a:77:05:b8:38:7c:d0:d3:7b:f7:d2:7b:05:6b:
8b:de:e7:3a:49:9e:99:54:55:91:6b:a5:1f:02:07:61:b6:8a:
9f:a0:1e:2a:af:b7:8c:01:03:0c:85:e2:72:82:2c:e6:b0:e6:
e0:43:21:dd:7f:48:55:cb:6d:92:1c:01:db:10:51:d1:71:78:
d2:0a:3b:6e:e9:c3:f7:e9:5a:75:ca:81:f7:a6:d0:4f:bb:cd:
0e:f0:14:6a:8d:10:ad:7a:df:a9:e2:a8:7d:d9:3d:de:7e:f2:
4f:1f:af:5f:2b:b8:7a:ce:51:7a:13:97:9a:6d:6d:1f:77:b8:
29:d5:7f:b1:22:75:c8:87:41:93:d5:64:6a:cd:a2:20:87:57:
f3:c1:dd:5f:fb:7c:95:74:d0:5f:19:05:37:64:3b:4f:70:e6:
4d:70:5b:b4:b2:57:cb:e7:49:56:d8:e1:2b:0e:ae:08:8e:22:
32:3a:72:4c:2a:03:f0:f1:6b:36:08:0d:60:91:9d:78:15:28:
a2:43:e5:c7:16:5e:cb:f2:14:e4:94:d5:48:67:23:e6:ec:c8:
aa:9e:3b:83:a7:98:fd:0d:19:c0:84:fc:d2:9e:0d:56:33:34:
b8:e2:61:44:95:bc:68:a8:d4:98:ae:a0:24:0e:03:36:a4:67:
dc:c5:4e:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZuHA0deWUEnVXPHgC8VT+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMDkxNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmVhNjlhMDNkOWQ5MWVhNjdhYzczZWRkZTdmMTJhYTk5MmY1MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ziYPSuUdeHHC+VlULvmxqk9r1i
te7l9fEzr8L2WTuRz20KTJTvxSckO3Ev0duoRyV+mkQ08k4JkSZKySCGvB8Bnhqi
sYthTxtQPCHTB7BNczcRMOOcPC4ljCJKu2xRXUg6lcVWL/Yj0nztCkIGcaAIYZiv
R9gaTvASwkkdM35zvuKenDkKQTPlQluvg+MqH+ySqG1VpM9xPtODo/u3shoMywri
Rz10fZePHcm8VM/MpeFT5fDs7jlRWLIubrkFIv24+Vbx6cZbTyPxsdGJ0byMyN0/
roFHTc+t0tQZhFFTcts9YjxVyPsMkmQbIAsib1sKtMXb9p60nxNi8u2vKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHbqaaA9nZHqZ6xz7d5/EqqZL1ICMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHVwcG9EMmRrZXBuckhQdDNuOFNxcGt2VWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAPl5upKdwW4OHzQ03v3
0nsFa4ve5zpJnplUVZFrpR8CB2G2ip+gHiqvt4wBAwyF4nKCLOaw5uBDId1/SFXL
bZIcAdsQUdFxeNIKO27pw/fpWnXKgfem0E+7zQ7wFGqNEK1636niqH3ZPd5+8k8f
r18ruHrOUXoTl5ptbR93uCnVf7EidciHQZPVZGrNoiCHV/PB3V/7fJV00F8ZBTdk
O09w5k1wW7SyV8vnSVbY4SsOrgiOIjI6ckwqA/DxazYIDWCRnXgVKKJD5ccWXsvy
FOSU1UhnI+bsyKqeO4OnmP0NGcCE/NKeDVYzNLjiYUSVvGio1JiuoCQOAzakZ9zF
ToY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:42 2025 by rpki-client