Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScDR7dr9pRF6jF8xZQ_dHkTVRkA.roa
File: ScDR7dr9pRF6jF8xZQ_dHkTVRkA.roa (raw, json)
Hash identifier: +0oYETSH/ky2l7NOAn/7BwQCc1SRhbSCJcc+Oe21S/w=
Subject key identifier: 49:C0:D1:ED:DA:FD:A5:11:7A:8C:5F:31:65:0F:DD:1E:44:D5:46:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A91727564D6F0D8DC36EF79086CE09B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScDR7dr9pRF6jF8xZQ_dHkTVRkA.roa
Signing time: Fri 13 Jan 2023 03:05:44 +0000
ROA not before: Fri 13 Jan 2023 03:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:a917:582/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:17:27:56:4d:6f:0d:8d:c3:6e:f7:90:86:ce:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 03:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c0d1eddafda5117a8c5f31650fdd1e44d54640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:d4:e2:f6:fc:37:4f:6e:d8:74:53:1e:91:
93:74:e1:ba:e4:db:d0:7e:b1:4b:a1:26:c9:a4:cd:
5f:bf:07:08:03:21:87:87:50:3a:ab:a4:54:16:4c:
40:e4:34:ce:aa:d8:25:3c:ff:ab:8f:81:9b:96:c9:
06:63:7c:ce:be:0b:eb:c6:67:a6:a4:1a:81:52:bc:
5c:c2:dc:e7:1e:17:bb:a8:08:88:20:24:72:51:ad:
c1:aa:07:db:be:72:bb:e7:2c:d8:f8:23:58:40:1b:
90:81:c8:33:1b:41:0c:d0:ba:d3:eb:69:af:79:57:
bb:d5:9b:af:51:64:e5:f2:76:dc:32:69:ff:89:a7:
04:d8:b9:ae:47:39:a6:ce:69:d9:16:72:60:58:a6:
a1:d1:71:e9:b2:05:2a:2e:aa:3e:c3:0d:e6:e3:2a:
a0:9b:c1:d8:3e:94:6f:93:cb:d0:42:90:c6:21:6d:
0e:e7:68:e0:85:1c:62:00:29:88:bf:07:90:ad:e6:
eb:9c:c3:25:96:e2:4a:d7:b4:84:ff:be:6f:ba:52:
c3:dc:57:85:6c:39:2f:62:97:50:77:f2:96:7f:fb:
bb:45:72:0f:5f:d1:bf:08:3d:83:0d:03:5e:4e:50:
f4:9c:1c:5e:58:41:4f:42:d0:23:55:24:02:7f:ce:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:D1:ED:DA:FD:A5:11:7A:8C:5F:31:65:0F:DD:1E:44:D5:46:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScDR7dr9pRF6jF8xZQ_dHkTVRkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:91:bc:5c:4e:b8:7f:41:92:f2:d8:d4:1f:d1:44:ac:ea:98:
c2:cf:78:a0:49:c0:06:c5:ea:5c:6e:19:d8:04:d5:69:19:63:
d5:58:a7:74:f3:d7:aa:03:fe:47:f9:d9:92:19:f0:2b:22:fd:
20:49:b8:7e:e7:4d:0f:a9:b7:c3:6f:df:79:e3:57:45:19:e4:
43:b9:dc:72:72:8b:de:04:3e:f4:65:f3:c2:1a:3c:1a:b2:25:
4f:c9:4e:c1:6c:aa:d5:12:09:e1:81:94:b2:08:1a:5f:96:6f:
17:00:66:a8:e4:33:68:55:db:59:ef:d9:1e:cb:db:73:5b:9d:
a3:d7:e3:78:48:8c:f8:9b:d2:ed:dc:11:93:a9:bf:c8:2c:03:
39:5c:a7:ba:2c:0c:2d:7f:f1:1c:28:04:cf:d2:35:98:7f:9c:
22:33:8f:ed:8c:eb:24:80:39:6c:fd:a5:a5:d3:7b:93:20:3b:
a9:3d:c9:f5:7b:0e:2d:26:aa:3a:fa:14:ea:74:b2:37:ba:00:
4f:39:fc:71:e3:d1:9b:fb:97:1f:26:ff:1e:f0:23:6d:14:63:
4c:82:48:28:18:83:fe:10:3e:f4:89:bc:97:fa:d1:32:f0:33:
7b:5c:4b:98:83:75:7a:2e:12:dc:a0:d1:1d:7c:83:b1:ae:02:
f2:45:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:38 2025 by rpki-client