Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/d3rLYJZrwi95EgU-oH0nimGW6VI.roa
File: d3rLYJZrwi95EgU-oH0nimGW6VI.roa (raw, json)
Hash identifier: A44oZlVn/2w/dqX4DlRq9upjm0NnLcSABPFJX6T9nwQ=
Subject key identifier: 77:7A:CB:60:96:6B:C2:2F:79:12:05:3E:A0:7D:27:8A:61:96:E9:52
Certificate issuer: /CN=3269cc291ba260fc71118684e7b302f50ce9628d
Certificate serial: 06DAFAAF
Authority key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/d3rLYJZrwi95EgU-oH0nimGW6VI.roa
Signing time: Sat 01 Jan 2022 10:57:44 +0000
ROA not before: Sat 01 Jan 2022 10:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57327
IP address blocks: 193.53.82.0/24 maxlen: 24
193.53.81.0/24 maxlen: 24
192.211.0.0/24 maxlen: 24
193.53.35.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a0a:3507::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115014319 (0x6dafaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Validity
Not Before: Jan 1 10:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=777acb60966bc22f7912053ea07d278a6196e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:0a:d1:e0:b6:29:f7:87:5d:12:37:4a:5d:
7b:03:8a:aa:37:e3:36:c0:20:54:cc:02:87:9e:83:
94:7b:ec:a9:26:b7:b0:c2:e0:b9:5b:ff:c8:0e:2d:
6d:df:e6:c2:82:af:5d:86:dc:e2:09:3f:b7:60:f2:
0a:1c:de:63:2f:92:f3:af:23:29:95:b9:6e:c0:5d:
0d:0d:66:ce:8c:7c:b6:66:50:a9:9b:6e:00:98:37:
ce:7f:46:cc:b7:91:b4:08:46:0e:ed:27:56:58:a5:
29:d9:39:c0:a2:97:65:97:99:df:f1:97:93:1d:7a:
d0:f4:9a:8f:aa:51:db:3e:85:c4:f7:5f:f3:ad:d7:
2b:e9:d3:75:0a:ec:b4:a4:2c:37:f5:48:b2:35:5b:
12:b7:d5:95:5b:0a:26:a5:97:97:b4:70:33:63:5f:
89:5b:fd:10:9c:13:96:f6:b7:9c:c6:32:3a:fb:da:
b7:32:66:8f:f0:f3:9b:50:60:3f:4b:54:70:e9:5a:
cb:e6:86:be:03:6b:c6:3c:72:ac:1d:93:34:62:13:
dc:a6:54:31:b6:1c:a9:7d:c1:ba:ea:93:72:e7:dd:
c0:56:cc:97:30:cb:a0:f4:65:12:a0:be:2b:6d:b1:
1d:e6:cb:41:fb:23:69:78:6c:97:08:f7:27:0a:ef:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7A:CB:60:96:6B:C2:2F:79:12:05:3E:A0:7D:27:8A:61:96:E9:52
X509v3 Authority Key Identifier:
keyid:32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/d3rLYJZrwi95EgU-oH0nimGW6VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.211.0.0/24
193.53.35.0/24
193.53.40.0/24
193.53.81.0-193.53.82.255
IPv6:
2a0a:3507::/48
Signature Algorithm: sha256WithRSAEncryption
5c:27:83:a3:79:b1:b7:62:8e:c3:9b:8a:93:9f:d9:2d:be:81:
52:37:55:eb:92:7f:0d:85:7d:ce:4a:14:76:2d:80:de:8b:93:
e7:e7:8d:93:9c:ca:65:60:b1:20:38:02:93:9f:e4:a7:0d:6f:
26:f0:1f:53:a9:33:ba:90:86:e5:bf:70:b1:3c:1d:38:fe:1c:
ef:07:49:53:98:1d:65:68:e4:4a:7d:25:c9:7e:ca:2d:92:3b:
2c:d9:1d:45:c5:90:5b:31:40:e3:37:3e:d3:9d:51:11:0c:f1:
bf:b4:06:94:ba:3c:2c:b4:82:a3:6e:19:ef:0f:12:72:b7:dd:
f9:63:66:c9:49:b5:63:fe:0c:ab:02:b4:82:df:fb:24:d1:b7:
60:21:7a:a7:fe:50:2c:2d:2f:e8:cc:a4:6a:ce:0b:72:55:2d:
01:90:0a:53:00:97:ba:65:30:45:bf:f8:17:c6:8c:c7:63:50:
d7:52:05:41:89:c9:e0:76:f6:1e:96:d7:aa:a5:4c:fe:3b:cc:
56:25:05:40:f2:3f:1f:9c:9e:8d:67:35:13:33:f0:7d:21:3f:
05:eb:49:a1:bf:e2:c6:d7:e1:d9:73:89:5e:79:59:59:50:43:
0b:e7:9d:dc:4d:a0:1a:9f:27:64:a4:95:7c:74:cc:97:c4:d1:
7b:e7:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:56 2025 by rpki-client