Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/dYalGkOh5YEZfF5pPUinVlveI5Y.roa
File: dYalGkOh5YEZfF5pPUinVlveI5Y.roa (raw, json)
Hash identifier: mRslMR2ZTROYZiunzFUt1v0Acmygmcm4QqHZHbZ3ef0=
Subject key identifier: 75:86:A5:1A:43:A1:E5:81:19:7C:5E:69:3D:48:A7:56:5B:DE:23:96
Certificate issuer: /CN=e9d61587d6fd7c816b71014d73d397883cde2aba
Certificate serial: 18E76D0D
Authority key identifier: E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dYVh9b9fIFrcQFNc9OXiDzeKro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/dYalGkOh5YEZfF5pPUinVlveI5Y.roa
Signing time: Sat 01 Jan 2022 16:03:27 +0000
ROA not before: Sat 01 Jan 2022 16:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61981
IP address blocks: 185.53.4.0/22 maxlen: 22
185.53.6.0/23 maxlen: 23
2a01:bda0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417819917 (0x18e76d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d61587d6fd7c816b71014d73d397883cde2aba
Validity
Not Before: Jan 1 16:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7586a51a43a1e581197c5e693d48a7565bde2396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:8f:df:3a:70:e0:0a:e5:87:88:4b:5d:ac:
fd:b2:d9:fa:c1:7d:50:dd:57:88:74:d2:00:b8:c4:
25:66:7d:66:0d:8d:5f:b6:ea:9d:00:02:ea:a4:82:
55:bd:13:ef:3c:46:21:56:0d:20:ff:4d:2b:d8:0f:
a6:cf:d5:b2:c9:9c:d2:d5:d8:51:84:23:1b:3d:e0:
d0:68:8e:95:a9:38:86:c8:32:a8:3d:c0:0c:e6:e6:
22:d2:66:e8:83:44:84:ca:f5:ea:1d:f1:dd:b0:e2:
62:9e:09:6c:3f:66:aa:7e:54:60:90:af:f3:5b:d4:
ff:6d:64:86:0a:66:6b:f1:b0:a2:24:fc:d4:63:6b:
8b:14:ee:36:98:2e:e3:50:78:bc:fb:da:d6:ef:c8:
d0:f7:16:3a:98:7e:d7:8c:b0:3c:57:a1:35:7c:18:
e1:d2:1d:74:26:4d:9e:00:81:1b:7a:a7:bb:ed:b3:
e1:07:fe:13:bc:07:21:be:d3:07:ff:fb:0d:4d:29:
9f:d1:46:86:b6:57:3f:bc:41:9f:73:c4:74:23:ec:
18:f6:16:c9:8b:d1:26:52:75:1f:c2:41:97:02:47:
8a:69:48:ca:69:55:e0:c9:3f:36:07:1b:30:62:f7:
be:c4:bf:c6:2e:65:ce:b0:35:1c:75:ef:31:61:1b:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:A5:1A:43:A1:E5:81:19:7C:5E:69:3D:48:A7:56:5B:DE:23:96
X509v3 Authority Key Identifier:
keyid:E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dYVh9b9fIFrcQFNc9OXiDzeKro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/dYalGkOh5YEZfF5pPUinVlveI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/6dYVh9b9fIFrcQFNc9OXiDzeKro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.4.0/22
IPv6:
2a01:bda0::/32
Signature Algorithm: sha256WithRSAEncryption
84:cb:bf:08:4c:08:f4:7d:1d:2f:d9:0b:72:68:e4:b7:83:fe:
6b:b0:a9:0c:a2:4b:29:d5:a6:85:d8:07:1f:f7:ec:71:70:69:
08:1f:26:4c:36:f3:5f:8c:83:d0:17:00:c2:52:38:db:31:e6:
cd:31:64:9c:a2:ab:f8:4a:cf:12:7e:58:65:0a:8c:c9:62:f7:
5d:72:97:53:c0:e7:e9:56:ec:8f:a3:40:f4:f7:7f:3f:4a:43:
1b:e6:2c:6a:4f:e6:56:6d:f3:a1:92:57:f2:07:b3:88:6c:ee:
cd:19:9b:d6:0a:b6:2f:82:23:ff:45:b7:c6:3b:49:5d:a6:7a:
97:13:95:17:60:a2:45:13:7e:03:33:47:17:dc:10:4e:ab:f0:
c3:52:16:e3:a3:02:0d:c9:da:15:d8:98:f9:8c:4e:9a:ce:2b:
3b:dc:2a:3f:05:79:3d:48:fe:6d:7f:25:73:97:f4:14:d5:ae:
cf:77:1c:fd:62:68:43:7c:88:56:a6:96:59:8e:5c:58:50:b2:
4b:44:4a:fd:1c:a6:c6:d2:56:b1:bc:aa:40:3b:17:b4:b8:c9:
1f:31:86:55:7c:85:d2:07:0e:ca:14:2d:8b:21:91:42:82:b9:
7d:1b:e0:52:1b:33:39:93:1e:5c:9e:c8:15:4a:c8:11:a3:0e:
08:2d:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:48:11 2025 by rpki-client