Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddy9EAvdO9mHh5LASMP6JdbitO4.roa
File: ddy9EAvdO9mHh5LASMP6JdbitO4.roa (raw, json)
Hash identifier: 02rUoeJfky0bVw9qWN5JcCRPdXhPYeMToewUgUB12K8=
Subject key identifier: 75:DC:BD:10:0B:DD:3B:D9:87:87:92:C0:48:C3:FA:25:D6:E2:B4:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A4A5B26C3FF7F1E403E947E28A4FC62B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddy9EAvdO9mHh5LASMP6JdbitO4.roa
Signing time: Tue 04 Oct 2022 20:17:45 +0000
ROA not before: Tue 04 Oct 2022 20:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:a5:b2:6c:3f:f7:f1:e4:03:e9:47:e2:8a:4f:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 4 20:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75dcbd100bdd3bd9878792c048c3fa25d6e2b4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:0d:b6:26:5b:ae:dc:a7:6c:77:da:ec:8f:
7f:57:2c:f9:80:f8:87:7f:9a:f3:f1:60:0b:63:02:
b7:6a:a6:e0:9f:87:59:ab:99:20:cd:66:35:91:11:
95:89:9f:d1:fb:a6:81:3a:53:42:c7:73:81:38:c6:
7b:32:e0:6f:60:a6:36:76:8f:dd:03:8a:b0:84:cf:
95:08:4f:b4:23:f1:9e:90:fb:f3:c6:d5:86:a1:84:
c1:3b:30:b2:d4:64:c2:52:c7:44:5e:0b:17:a6:a8:
40:6c:85:70:88:44:c5:3f:4c:83:d5:19:61:a5:9b:
63:53:c6:3b:89:9f:be:2e:c9:86:1f:b2:b5:42:76:
dd:8c:b0:11:3f:c6:35:90:7b:e0:81:ab:d6:61:05:
22:62:82:33:2f:2a:c6:34:89:d7:6f:d7:03:45:83:
ec:93:02:c4:02:f8:8d:b9:dc:80:6a:85:52:ee:a6:
56:32:dd:3b:7f:ca:d5:7a:09:cf:1f:c0:e7:c5:bc:
bc:be:4c:27:2a:60:8c:97:1f:20:e7:03:f5:64:0c:
25:24:09:34:09:7a:5e:14:03:68:e5:33:c0:3f:69:
04:d7:7a:81:15:26:18:96:f4:8b:fc:b0:91:53:d9:
c7:81:3c:7b:60:b3:0d:be:16:1b:7b:ee:1b:51:95:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:BD:10:0B:DD:3B:D9:87:87:92:C0:48:C3:FA:25:D6:E2:B4:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ddy9EAvdO9mHh5LASMP6JdbitO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a2:6a:c1:af:7d:e0:19:b3:28:a7:bd:fb:05:b6:bf:05:b4:
bd:f6:53:63:1d:8e:24:bc:24:b3:36:93:5e:b4:63:82:4e:22:
16:90:c7:d1:90:f5:03:0d:08:c4:c2:9f:e7:5f:1e:f8:a8:8d:
59:d8:ec:fe:3b:2f:56:dc:27:0b:71:12:cf:8f:3d:77:cd:92:
fd:6e:8f:09:b5:1c:f9:8d:fd:64:5d:dd:75:73:e8:9e:95:c9:
c6:c0:f1:ee:82:c6:14:2f:1c:2c:79:4e:d3:77:28:0a:a7:64:
e4:c7:16:b6:84:fe:f0:3c:99:75:12:05:6a:61:58:67:c5:40:
38:c4:91:5d:97:97:59:49:5d:5a:19:41:c0:d2:bb:7b:16:3e:
72:96:e3:76:e1:c4:28:ed:3d:4d:91:f7:39:87:e0:ed:82:24:
ae:db:8d:22:04:92:78:c5:c6:42:b0:87:7d:ea:42:7d:2b:f6:
85:2e:65:f9:f7:1b:59:a1:5e:4e:83:ed:e6:c4:b5:17:38:a5:
af:e7:d1:b1:86:37:26:41:cc:57:21:b7:3a:c3:c6:62:6e:dc:
22:25:71:9b:21:21:d0:63:39:6c:40:65:f1:85:40:5a:6c:6b:
1c:e0:2d:1b:1e:25:32:6e:40:33:c7:88:7f:dd:d4:49:b9:fd:
75:d5:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:27 2025 by rpki-client