Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dgc052_nqXicldqDekE_2nGqdbI.roa
File: dgc052_nqXicldqDekE_2nGqdbI.roa (raw, json)
Hash identifier: vXWZ8WziQPNxoXRIjL9qd4LVbkF0bnlo5tpd9IgfVuE=
Subject key identifier: 76:07:34:E7:6F:E7:A9:78:9C:95:DA:83:7A:41:3F:DA:71:AA:75:B2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE8F47C76563BD29F7B7F122CAA2D94D4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dgc052_nqXicldqDekE_2nGqdbI.roa
Signing time: Wed 05 Jun 2024 15:11:27 +0000
ROA not before: Wed 05 Jun 2024 15:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:f4:7c:76:56:3b:d2:9f:7b:7f:12:2c:aa:2d:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 15:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=760734e76fe7a9789c95da837a413fda71aa75b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:c0:18:a2:4c:5b:b4:61:fa:b2:2b:cc:26:
fb:35:79:18:f7:5f:40:2f:e0:0e:4d:43:67:77:b9:
59:a7:70:8c:e7:9e:4d:44:4b:a4:9d:b9:96:14:6e:
71:5c:f9:95:c3:b7:23:40:ac:b5:f5:7c:2d:21:60:
27:42:9d:b2:cc:42:93:5b:37:9c:f7:7e:b3:b0:58:
04:f1:20:4c:47:c4:bd:54:3e:bd:98:e3:c1:a2:4f:
08:76:7e:73:83:8e:56:13:59:dc:ba:eb:4a:bf:77:
ff:3d:ca:07:d4:cc:2d:a1:8e:c7:1f:f2:88:7a:a2:
74:9f:ba:30:55:28:a0:ff:de:a4:af:c9:9f:59:82:
ca:fb:f0:55:71:ab:79:c0:4c:22:9d:43:8d:89:30:
5f:ae:5a:91:3c:72:3d:ba:05:0a:fe:79:52:0f:ae:
8b:c9:23:42:03:e8:8a:88:e6:3e:b8:d3:78:71:21:
88:67:25:b6:7f:ba:d0:c7:3e:48:cd:27:b8:87:9c:
cf:4e:7f:2d:5d:0d:6b:f0:94:0a:2e:9c:61:7f:07:
db:99:99:44:43:e4:90:e0:c8:b9:cb:e5:3e:20:f0:
58:81:0f:5c:d4:66:9a:10:d3:a7:34:ce:08:3a:8c:
98:3c:51:6e:41:fe:00:ed:db:14:da:52:3f:2b:de:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:34:E7:6F:E7:A9:78:9C:95:DA:83:7A:41:3F:DA:71:AA:75:B2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dgc052_nqXicldqDekE_2nGqdbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:aa:70:29:c5:37:b2:1a:d3:0a:73:37:db:70:4a:fc:42:60:
cf:88:b8:4e:21:83:ea:56:a1:e7:5f:be:9f:50:4b:ee:eb:10:
0f:be:b1:d0:ad:0c:c4:ab:fc:bf:44:e3:fc:06:02:1d:aa:e8:
cb:4e:7b:eb:2e:a2:67:af:3d:fd:66:56:2a:42:4c:f9:20:7b:
e9:9e:53:51:8e:da:b0:5d:d9:97:10:3c:ec:c2:ac:59:8d:58:
cd:a5:00:0d:82:cf:15:3d:46:56:3b:54:06:77:f1:06:40:0d:
5d:fd:8a:79:e8:9f:d7:fd:84:32:90:94:e6:2f:e6:c0:19:e9:
30:ee:c4:e3:1d:7b:fa:33:ae:ca:9a:83:1e:90:88:65:05:e3:
bc:86:ac:b6:23:dd:23:40:1b:be:32:36:74:be:6b:ba:e5:e0:
97:c6:41:8d:a8:cd:c0:c6:b3:95:34:a6:bc:bc:15:99:29:c7:
93:33:a9:fd:0d:dc:d2:1e:ef:33:7b:04:a5:eb:db:80:f0:89:
29:7c:58:8e:2c:a8:cc:b5:16:e0:3d:21:07:36:59:05:8a:21:
db:2b:36:f7:f0:cb:a2:19:b6:ba:77:fa:69:75:38:65:69:36:
4b:5f:59:3a:32:15:6a:0f:d7:f4:29:7e:b8:bd:99:ef:39:1f:
99:bf:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:40 2025 by rpki-client