Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srDPDL5Pci6YolkLjt6Qc3mBHJk.roa
File: srDPDL5Pci6YolkLjt6Qc3mBHJk.roa (raw, json)
Hash identifier: VWmGKGI3DWCa2z3mXBPnfwAAlXaFcnrp7woB3ExzjDc=
Subject key identifier: B2:B0:CF:0C:BE:4F:72:2E:98:A2:59:0B:8E:DE:90:73:79:81:1C:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 911C88B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srDPDL5Pci6YolkLjt6Qc3mBHJk.roa
Signing time: Thu 30 Jun 2022 08:10:02 +0000
ROA not before: Thu 30 Jun 2022 08:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434566321 (0x911c88b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 30 08:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b0cf0cbe4f722e98a2590b8ede907379811c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:8f:a9:e6:fb:a7:9f:f7:3b:4a:d2:d0:27:
51:f4:0d:7d:27:e7:36:af:86:8a:f9:55:90:7f:2b:
f8:30:40:10:15:19:29:a8:b9:d0:31:86:be:7f:b3:
1e:96:34:7f:d0:b2:bc:35:ab:6b:89:5e:08:36:f4:
7d:15:d7:3b:8d:2c:c3:34:f6:73:6f:b1:54:41:54:
aa:c6:72:6e:6e:11:fa:25:08:22:68:16:bd:27:f7:
a0:60:74:43:0c:f2:d9:5b:e5:ea:80:21:d1:1a:39:
f5:07:34:1b:d5:42:de:a7:46:9e:c8:36:9c:11:96:
62:73:3c:83:00:2d:64:96:a3:19:28:f3:69:8c:a7:
b7:6e:c3:08:a4:c8:ab:53:8e:a5:5f:99:83:9f:df:
5c:99:bc:e9:e9:65:92:50:3d:97:d2:51:8c:0c:4f:
1a:e6:63:26:51:0e:23:eb:05:e0:2b:81:c8:5a:93:
f3:b8:55:da:4e:56:46:16:47:f1:9b:d6:99:99:2b:
7e:84:df:6d:a9:34:89:28:41:1c:2e:5b:ab:da:1e:
39:e2:7d:ae:76:c2:ec:bb:5e:cd:ae:61:60:dc:b7:
3b:2c:86:b1:46:57:03:e6:b2:fb:ec:41:bd:d5:a3:
43:c2:67:6b:99:80:8e:d0:d3:a8:d4:78:db:ad:af:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:CF:0C:BE:4F:72:2E:98:A2:59:0B:8E:DE:90:73:79:81:1C:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srDPDL5Pci6YolkLjt6Qc3mBHJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:e2:60:64:ba:a2:44:0a:3c:65:08:a2:9a:76:8a:cf:a1:c7:
61:5f:a6:6f:ae:14:67:a7:d8:66:da:6d:86:df:b7:44:b0:99:
19:fc:b1:9e:f6:cd:8a:b5:4f:4c:b8:dc:b3:db:a1:fe:bc:de:
45:1d:6a:2c:79:cb:6e:2e:c9:45:3d:a1:c5:05:8f:b0:67:cd:
58:40:73:bb:2d:8c:64:fe:92:7b:73:29:fc:ce:5c:be:c5:89:
3e:c7:2f:40:47:89:f2:09:67:67:7e:ff:49:92:ac:a7:19:58:
5b:92:2e:c5:0b:82:63:4a:7a:60:9e:82:01:f8:0b:d8:13:2f:
e3:b2:ee:26:69:3d:72:62:d6:b0:25:f7:9b:55:54:89:b2:09:
4b:e3:50:ec:c9:50:6e:b9:74:32:04:fa:2a:f1:34:ef:cb:9d:
96:6b:3f:31:d4:b8:89:fe:31:58:a8:5d:1b:27:6c:5e:b9:ae:
17:8c:8e:0a:df:15:96:3d:7e:74:00:b2:47:65:f9:05:76:2b:
ad:d7:7a:c0:3f:d9:9a:4b:06:8d:4b:35:a3:53:d5:b9:83:fe:
3d:6c:87:29:79:b8:87:ff:9a:5b:6a:02:21:52:7f:e3:59:4e:
de:7b:0d:46:23:7e:ae:59:a3:a4:56:3a:0e:92:cc:f2:b4:9a:
f6:0c:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:04:06 2025 by rpki-client