Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDokkEbSUbpsXOY9FLoNz6TV1Lo.roa
File: mDokkEbSUbpsXOY9FLoNz6TV1Lo.roa (raw, json)
Hash identifier: p5z5URUGUjdXp/8nhKYGcTHORa+uI4uw7vyr2TSIaAE=
Subject key identifier: 98:3A:24:90:46:D2:51:BA:6C:5C:E6:3D:14:BA:0D:CF:A4:D5:D4:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A2C3303
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDokkEbSUbpsXOY9FLoNz6TV1Lo.roa
Signing time: Sun 13 Feb 2022 05:08:52 +0000
ROA not before: Sun 13 Feb 2022 05:08:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781281539 (0x6a2c3303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 05:08:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=983a249046d251ba6c5ce63d14ba0dcfa4d5d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:4e:12:e0:16:fa:aa:3a:8e:23:11:26:fa:
f7:8b:c8:df:cd:21:44:46:7d:bc:30:ed:27:f8:27:
8c:28:64:a2:8a:b8:ad:d6:c3:e6:b4:78:b2:42:bf:
b8:49:f6:fa:2a:96:6f:59:b3:8d:a6:0d:bc:ff:8d:
3f:a1:86:78:8d:47:5f:3a:bf:67:2e:2a:52:62:30:
79:3b:7f:c8:86:ea:b2:2c:2b:45:3b:b5:02:a0:11:
2c:71:da:e7:2f:c3:c1:65:ba:aa:a5:40:d8:47:04:
65:9c:e8:0d:2d:be:88:06:e5:26:b9:30:a5:27:1c:
da:ee:c0:76:78:ca:d3:f3:23:94:8f:80:c1:58:26:
00:37:70:ae:24:c3:3e:75:d9:4a:83:19:a1:b5:90:
cf:c0:d3:1a:3e:c9:03:8c:44:ca:20:77:b1:fa:83:
1c:c0:bc:9c:09:8f:11:d5:fc:1e:d9:0e:3e:56:f4:
fa:ff:d0:03:b3:f6:8b:46:ea:6d:dc:a9:5e:ca:95:
45:a1:07:b0:cb:06:11:b0:17:9a:4a:70:96:4a:23:
dd:f8:37:1e:0f:d1:d1:36:90:b1:85:73:71:42:22:
fc:88:38:df:ce:e2:a1:5f:32:3d:17:f8:4e:da:ef:
32:c6:51:7c:27:b4:8b:82:e7:3c:f8:12:86:cc:c2:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:24:90:46:D2:51:BA:6C:5C:E6:3D:14:BA:0D:CF:A4:D5:D4:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDokkEbSUbpsXOY9FLoNz6TV1Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e2:db:4a:71:d4:42:fd:36:4d:cd:ab:18:77:4f:61:a7:a5:
a3:ca:ad:8f:1f:66:1d:c2:3b:2b:e6:77:c9:c8:61:d7:dd:de:
ac:3f:9e:34:75:52:bd:ae:7c:77:36:1f:28:b6:00:36:a1:e9:
6a:98:f2:ce:f2:dd:3a:34:09:cf:cc:8c:22:13:2c:3a:d2:71:
28:7e:d1:2a:4e:80:4b:87:0d:ba:87:43:fb:0a:69:20:8c:25:
b3:a7:6a:b1:04:15:a1:7f:fe:ec:44:93:e2:2e:2a:44:5d:ca:
ff:a7:da:41:cf:40:e0:4f:62:51:0a:5d:1e:fb:4a:c8:35:45:
44:fb:55:2a:e8:83:3e:7c:30:16:54:93:82:a9:76:32:d1:66:
1b:cc:17:ed:ba:92:48:19:b0:10:b5:96:e6:b4:27:32:c2:86:
be:b3:04:7d:82:50:b9:a3:f8:09:a1:fe:2c:a1:31:b8:e4:82:
b7:cd:bb:67:cf:ad:24:58:16:17:ea:41:98:3e:9d:0d:c2:87:
86:01:30:00:50:9e:22:47:d1:43:39:f1:15:4e:62:40:b0:04:
18:14:12:32:d0:08:5e:64:b6:80:e1:0c:1a:87:07:49:9f:41:
36:cf:9f:a9:c8:2a:e3:d8:6b:0e:ed:03:12:b5:97:c6:23:91:
49:50:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:32:50 2025 by rpki-client