Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SRZiGNCT1umtaWOhrFzCWBfrp44.roa
File: SRZiGNCT1umtaWOhrFzCWBfrp44.roa (raw, json)
Hash identifier: 5LVvpSGnJrCVlhsN/NRRI6WlDjJ2ID8VcrM4ynP1Kfk=
Subject key identifier: 49:16:62:18:D0:93:D6:E9:AD:69:63:A1:AC:5C:C2:58:17:EB:A7:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850638F206D21F34F8245D39302C9AAE0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SRZiGNCT1umtaWOhrFzCWBfrp44.roa
Signing time: Mon 12 Dec 2022 12:04:33 +0000
ROA not before: Mon 12 Dec 2022 12:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:638:e7eb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:38:f2:06:d2:1f:34:f8:24:5d:39:30:2c:9a:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 12:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49166218d093d6e9ad6963a1ac5cc25817eba78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:a5:1e:fe:e4:e5:2d:e4:c7:18:67:6d:1d:
4b:19:b0:2c:72:0c:4c:f4:07:f2:54:5a:3c:f2:bd:
34:72:e1:e9:83:1a:5a:0c:be:f8:fb:18:fd:89:0f:
9a:14:4a:3d:7b:f3:77:49:ff:ce:4e:73:41:6b:cf:
a5:77:34:4e:71:38:fd:b1:a5:8e:57:bd:8c:a2:e2:
68:f6:0d:8a:e1:d5:94:74:1a:ad:27:33:e6:f4:c3:
50:7f:1b:df:22:d3:bc:3d:e9:dd:f4:dd:2a:77:dc:
1b:8e:a5:c6:71:56:9e:ed:f0:b5:5f:22:c2:4b:15:
c9:d0:e9:f6:89:6c:ad:ab:6f:e2:3f:c7:94:07:69:
2c:20:1b:8a:0d:40:7d:0d:b7:ac:6e:85:c8:5b:e7:
41:d8:0c:94:fe:b1:84:2a:9d:db:4b:9a:2f:94:38:
94:34:0a:72:a9:a6:8e:db:dd:30:08:7b:91:05:09:
37:16:2c:50:b3:eb:cf:63:14:51:a2:8a:7a:78:c7:
d5:5f:2b:99:7d:a8:1f:fe:5a:84:d2:71:8e:2a:85:
02:25:12:6d:11:d0:cf:32:e2:2c:93:9e:7b:51:0e:
84:54:6a:bf:f1:76:9e:40:97:5f:c2:24:be:88:c7:
8d:55:6d:40:1a:e5:f2:76:7f:cd:ce:b8:d2:df:10:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:62:18:D0:93:D6:E9:AD:69:63:A1:AC:5C:C2:58:17:EB:A7:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SRZiGNCT1umtaWOhrFzCWBfrp44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:61:eb:42:0b:25:94:c1:7f:02:6d:1f:f8:a9:4c:83:f1:25:
15:a4:c0:f6:f2:7f:8b:b8:b9:3f:03:a9:8e:08:bc:23:d5:45:
1e:bc:a8:64:03:f4:ae:dc:92:ac:f3:ce:1c:53:8e:64:ed:1c:
b2:b7:16:89:f2:fe:dc:6d:1c:64:e7:f1:54:c7:78:4c:71:4c:
2c:3f:36:28:36:38:ef:ff:f2:1d:f8:6d:d6:96:fa:b1:78:11:
d2:f1:bd:f0:03:b2:3e:48:09:a7:29:d6:a3:8f:f7:16:93:d1:
ec:07:dc:fa:7a:bb:f4:e3:e1:e2:2d:83:55:7f:2a:89:9f:d2:
02:21:a6:39:f8:0c:a2:12:3a:d8:1a:0b:b8:58:bc:be:7f:fe:
61:c6:59:97:2c:6b:5e:1d:18:06:8f:74:03:66:9b:da:74:54:
16:ea:35:65:3c:1e:53:d0:03:8f:ed:35:aa:61:3e:66:ae:3c:
79:47:f7:a1:8f:3a:ca:9b:80:13:77:44:df:16:c9:b7:79:bd:
0a:99:e9:7a:b6:b4:a6:e0:e0:3d:f9:3d:ac:b1:de:80:29:41:
55:ee:51:cd:41:22:e0:1c:68:40:14:f8:6f:56:b8:ac:89:d5:
dd:c4:db:cc:19:a9:33:d9:40:e6:60:62:ee:90:e6:8f:f5:7a:
c8:ec:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:47:29 2025 by rpki-client