Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dwgHvNse3yqs0xzxkyK7XNXNIPU.roa
File: dwgHvNse3yqs0xzxkyK7XNXNIPU.roa (raw, json)
Hash identifier: bG1o2nLHxu4D4iHMF0co+wiy9ujW3hyVIMxEdX7NRTY=
Subject key identifier: 77:08:07:BC:DB:1E:DF:2A:AC:D3:1C:F1:93:22:BB:5C:D5:CD:20:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185331586D50CE154F596662639D3A26B03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dwgHvNse3yqs0xzxkyK7XNXNIPU.roa
Signing time: Wed 21 Dec 2022 05:08:46 +0000
ROA not before: Wed 21 Dec 2022 05:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:15:86:d5:0c:e1:54:f5:96:66:26:39:d3:a2:6b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 05:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770807bcdb1edf2aacd31cf19322bb5cd5cd20f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:fb:05:7c:52:6c:d9:36:11:4f:0d:26:3a:
87:ae:d8:eb:10:ec:0c:47:ca:4d:81:9d:83:eb:53:
e8:8c:c7:3d:9b:0c:b4:c5:59:7c:22:e1:47:29:67:
00:10:35:7d:df:f1:7c:62:c9:5a:51:b2:a0:39:97:
3f:d8:fa:c8:5e:a4:69:ae:c4:94:2e:5e:c9:57:da:
05:18:fe:68:6d:b6:8b:c3:7d:49:cf:15:5a:9e:39:
11:fb:83:88:51:dc:05:bb:4e:55:29:e2:3b:b8:7a:
4a:40:94:33:a1:ec:51:69:21:e7:1d:42:6e:1b:74:
b7:c5:e0:b1:20:b2:fb:b0:80:0d:e5:83:fb:6a:48:
15:ba:8d:ef:20:70:14:2e:01:ce:a8:50:af:8f:57:
24:12:b4:5f:85:81:7a:b7:2e:67:54:71:3f:6c:1b:
08:d9:70:4a:66:3c:c0:79:01:37:9c:51:cb:8e:4f:
8f:b8:2c:3a:1e:99:bb:03:7d:9b:47:2b:d1:0c:1b:
9f:dc:d2:6f:e1:a6:e7:93:52:e9:a6:04:d7:73:c8:
64:d4:90:53:62:0c:99:42:8c:ac:ce:48:2e:ca:64:
88:57:7d:f7:78:77:e1:94:fb:5a:3c:bf:c8:5c:3c:
ef:07:cb:17:28:93:2f:1a:ed:11:c3:c3:f0:cb:fe:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:07:BC:DB:1E:DF:2A:AC:D3:1C:F1:93:22:BB:5C:D5:CD:20:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dwgHvNse3yqs0xzxkyK7XNXNIPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:44:1f:ef:ab:83:f7:c3:b0:cc:49:08:57:4e:0b:31:72:84:
b8:59:ec:61:1f:8b:43:61:22:51:5c:cb:a9:7f:70:b4:e1:df:
7e:8e:e4:eb:07:ca:e3:e5:d2:0b:75:84:cb:7b:1d:fc:83:e1:
73:ce:bd:cf:f0:dc:06:b3:cd:6f:49:2a:f4:58:a1:a9:47:6b:
f7:74:c2:9c:30:ac:12:73:56:82:84:f0:92:00:8f:18:42:85:
79:0c:f3:24:cd:2b:d5:0c:88:1a:fc:90:72:ff:8c:e6:ee:53:
0b:4b:13:78:b8:13:73:00:36:9e:78:bb:69:da:9b:8e:c4:d1:
86:d2:f7:4f:0b:ee:a9:b0:7b:75:72:b7:cf:f7:7e:90:91:f2:
de:f1:28:55:8d:c6:46:0e:7e:11:4d:2c:34:ae:b9:49:ab:ab:
6d:22:20:23:a7:db:49:47:3b:66:e0:31:90:55:0c:68:ec:0d:
dc:ce:0d:18:03:47:47:f8:ab:3e:6d:f6:e3:03:56:22:ff:1a:
c1:16:d1:cb:5a:96:6e:3c:aa:36:a3:41:ce:57:3e:b4:01:0c:
fb:d5:3c:ac:9c:3a:81:7e:07:47:b2:14:79:cb:6e:9a:71:e7:
19:3d:4e:cf:c7:4f:98:83:40:50:ed:64:bc:be:29:ad:14:2b:
4f:df:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:27 2025 by rpki-client