Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddrJB-L6-iSUR2LRHIDE9HeIZpM.roa
File: ddrJB-L6-iSUR2LRHIDE9HeIZpM.roa (raw, json)
Hash identifier: NdECEiMvTH2oZDJqlSVNkVlvQvZffU2RbdvFD9L3yAc=
Subject key identifier: 75:DA:C9:07:E2:FA:FA:24:94:47:62:D1:1C:80:C4:F4:77:88:66:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F1D7C4FC4662451749E9978194AAF918
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddrJB-L6-iSUR2LRHIDE9HeIZpM.roa
Signing time: Fri 27 Jan 2023 06:08:47 +0000
ROA not before: Fri 27 Jan 2023 06:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f1:d7:c4:fc:46:62:45:17:49:e9:97:81:94:aa:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 06:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75dac907e2fafa24944762d11c80c4f477886693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:35:c5:c3:c7:de:6f:3a:c2:d2:92:80:1a:
fa:dd:00:05:c6:4f:92:c3:b3:96:aa:b4:dd:cf:02:
d1:8d:cf:b3:d0:56:04:f9:df:11:86:81:3a:83:ce:
26:2e:e3:4e:c1:e1:fb:b9:e6:06:f8:e3:e1:0e:11:
75:18:2c:51:d1:b1:a7:5c:d4:e1:ec:9b:e4:62:40:
29:ae:7f:d5:a7:dd:cb:be:67:5e:b0:33:9a:3f:16:
4f:ea:27:a5:e1:1f:54:cd:30:6b:b6:b9:76:a9:92:
a7:7d:73:ce:f1:b6:4f:6b:6a:fb:ab:31:0d:e6:55:
cf:00:da:11:8a:97:2e:4f:33:c3:de:ab:a2:c6:a8:
68:1d:e3:8f:f4:24:5f:59:94:3e:98:01:f3:54:bf:
f8:92:79:e3:d9:ac:cc:f3:3f:c5:20:90:41:51:ff:
f1:de:59:1b:fa:fc:a8:e6:aa:e1:6a:7a:21:a4:2d:
74:f8:94:f0:b5:89:68:13:1d:df:8a:8e:c1:3e:55:
e4:36:d6:da:af:5b:a9:7f:20:db:d7:dc:6e:e7:8a:
c0:24:e9:15:da:27:53:da:39:a8:ab:0d:e2:15:d2:
78:d2:59:8a:e9:5e:3b:1c:04:05:5a:b9:54:78:52:
25:47:a6:d7:80:26:ab:45:3f:be:5b:9b:f5:7f:29:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:C9:07:E2:FA:FA:24:94:47:62:D1:1C:80:C4:F4:77:88:66:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddrJB-L6-iSUR2LRHIDE9HeIZpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:0e:ba:51:05:0e:0b:ef:4f:ff:d7:f4:e4:d3:c8:08:ab:e2:
e5:7e:2a:35:62:38:c5:5a:bd:d2:e4:0e:04:f1:ae:bf:33:1e:
72:32:38:7c:ba:5b:bf:af:36:55:00:53:89:0b:fd:0f:06:b3:
a4:09:db:fe:1d:59:ea:2d:6d:fa:7e:73:25:3d:46:77:89:1a:
76:05:67:e3:14:86:8c:4e:c6:2a:c9:70:89:55:bb:9d:d2:06:
d4:d3:07:0a:b1:b5:f7:8a:72:50:4b:57:16:21:58:c9:87:47:
80:d2:a8:2d:13:6d:d0:7d:a0:09:f9:e1:dd:6d:0a:a4:9c:3b:
7f:2c:32:67:6c:48:a0:2a:88:1a:04:28:37:93:24:6d:d5:9b:
77:d7:ba:4a:6e:32:25:77:31:fe:51:81:6e:c8:aa:d4:0c:0e:
59:fb:fa:df:6e:95:ca:d0:cb:77:0d:8d:17:a2:ea:fa:c4:b5:
c4:ba:bc:ed:0b:da:ff:15:c6:40:4a:b8:51:f1:0c:f3:a3:0f:
2b:a1:0f:a1:75:b4:68:d0:a8:38:2a:7b:8f:4f:3d:3f:bf:7d:
51:bc:a8:c5:31:51:bc:05:6d:bd:26:20:d4:ce:95:55:a8:ab:
ea:54:c7:b2:64:d1:71:39:05:ba:1c:e3:b7:f5:be:ea:89:16:
1d:07:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:04 2025 by rpki-client