Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa
File: 1drxEPLnfb9huwHUvmlnNZB_P1U.roa (raw, json)
Hash identifier: huAh8VXnd0q0kr9r5u2x7hLFjBqaiox2dDoSfS+MUig=
Subject key identifier: D5:DA:F1:10:F2:E7:7D:BF:61:BB:01:D4:BE:69:67:35:90:7F:3F:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824483C77F33CC85CF0964768C2CC40206
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa
Signing time: Thu 28 Jul 2022 11:14:23 +0000
ROA not before: Thu 28 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:83:c7:7f:33:cc:85:cf:09:64:76:8c:2c:c4:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5daf110f2e77dbf61bb01d4be696735907f3f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:c3:48:79:9a:fe:53:ab:c3:cf:99:b7:a2:
2c:a1:d6:82:a3:f7:c6:6b:66:93:76:a9:06:e7:db:
54:11:43:dc:94:83:fc:01:68:5a:b3:74:6b:1b:c1:
b8:a8:f1:68:84:57:04:83:c6:17:9f:35:f3:aa:f4:
53:ce:70:77:cc:c9:84:01:87:ac:ad:3e:e0:66:d7:
bf:b3:80:e7:3d:05:09:0a:b4:e1:af:f0:f6:ba:e7:
05:15:00:62:00:b7:a4:ba:76:6f:5c:a9:68:1d:23:
04:2a:df:85:85:8e:e1:17:f9:06:ba:4d:b0:e3:82:
f5:1b:52:16:9d:b2:f7:61:60:b1:fc:8a:a4:e9:c7:
44:63:83:99:f7:dc:e8:3e:c7:39:85:ae:59:a0:4f:
7b:8c:9d:4b:19:cc:06:a9:c3:a2:94:96:48:a9:f5:
d9:57:f8:03:bb:50:33:4e:35:bc:b2:d6:19:ad:f7:
9e:ab:2b:49:70:a5:ad:5e:6d:ea:08:b1:09:42:bb:
db:3e:91:ee:cb:56:31:78:c4:a5:95:96:f7:6c:ed:
90:9b:6c:63:40:d3:6a:e7:95:64:aa:ca:fd:5f:a1:
c5:42:a8:f1:5d:35:d3:50:6f:84:d1:b8:5b:b6:11:
2a:57:b6:96:9b:cc:2a:66:61:5f:14:56:63:d7:d3:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:F1:10:F2:E7:7D:BF:61:BB:01:D4:BE:69:67:35:90:7F:3F:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:5d:81:89:55:21:ae:96:a7:0c:08:21:22:d2:06:60:a0:76:
0f:47:c9:76:25:ad:68:22:98:d8:73:48:33:db:82:d5:96:b8:
6d:33:ac:ba:58:db:e7:ce:f7:3a:24:37:ea:ee:1f:98:ed:1d:
a5:fd:1b:57:1d:40:1f:3f:42:40:d7:5d:d1:b1:56:dd:76:b4:
80:87:aa:41:a0:e5:c7:fd:3b:69:46:11:21:b9:76:80:60:13:
c4:c2:6f:2a:45:a3:1c:3d:4e:91:76:4c:93:14:56:7b:ad:93:
20:78:65:66:97:d9:7f:b7:a1:10:e9:39:0b:d3:8e:f6:18:f8:
55:cc:3d:33:a9:77:bd:42:a1:dd:fd:06:d0:32:cf:78:ce:3c:
94:6e:90:ec:d1:5f:c2:a7:e0:2a:df:ca:7f:23:5d:6d:e0:09:
5a:ac:94:b2:73:67:ab:1a:7c:5f:01:95:e8:87:48:61:46:c9:
8a:99:05:57:e1:e2:39:77:8c:af:d0:e3:f0:5b:08:da:76:f8:
56:4d:b6:96:da:4d:1f:9e:10:66:88:5e:25:92:e0:b4:58:df:
16:ee:1a:fa:4e:e0:94:7e:03:ef:35:90:f8:04:0e:85:66:b4:
eb:8a:c4:26:8e:0a:6f:a7:ca:d5:21:32:5f:90:e1:ca:a6:dd:
d6:52:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:49:34 2025 by rpki-client