Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4J_vh13oWegzqq65VMt4ku2Ygs.roa
File: 1-4J_vh13oWegzqq65VMt4ku2Ygs.roa (raw, json)
Hash identifier: jYmywHHym268GX9H9DlGBh0hkpMT3BnYRLg6c7yaztc=
Subject key identifier: FB:82:7F:BE:1D:77:A1:67:A0:CE:AA:BA:E5:53:2D:E2:4B:B6:62:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 717676A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4J_vh13oWegzqq65VMt4ku2Ygs.roa
Signing time: Fri 11 Mar 2022 00:08:41 +0000
ROA not before: Fri 11 Mar 2022 00:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903589031 (0x717676a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 00:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb827fbe1d77a167a0ceaabae5532de24bb6620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:08:2d:95:c3:01:43:a5:a4:f1:57:db:fc:
ff:2c:7b:81:67:c9:be:00:90:7c:b7:8b:64:cc:44:
7f:4d:76:d6:ec:64:6d:b2:7c:58:7c:ad:4a:2d:70:
20:9b:a3:6f:d9:56:8c:9b:96:22:7b:94:8d:b6:a3:
0f:06:8b:cc:73:00:2c:86:8f:da:7a:62:52:4b:24:
81:07:fa:34:c9:b0:89:c6:b3:77:53:3e:be:29:0b:
22:ea:97:a9:8f:2a:17:ec:49:eb:79:0f:58:89:d0:
99:cc:f3:27:93:f6:57:7f:bb:f4:00:a5:ee:72:55:
aa:6a:f9:37:e6:0a:c4:93:e4:4d:08:88:e9:18:9c:
0b:32:94:52:24:58:bd:c3:f2:56:dc:6d:6f:94:f0:
51:45:b2:de:70:75:7b:17:3b:98:05:60:28:30:cf:
fc:e7:cd:86:7d:2c:df:a6:05:9e:ed:22:97:a0:79:
3f:5b:9d:77:ea:3a:93:1f:fe:57:d7:5d:e7:72:ad:
04:34:f8:79:98:64:62:f1:72:33:cf:fa:26:7c:a8:
6a:2a:10:f2:56:4d:6e:02:76:b6:a9:a2:c9:d2:05:
dc:db:92:6e:18:6f:fd:f0:eb:d7:f6:50:23:66:8b:
f7:c5:6a:33:b9:34:d1:d0:5a:64:4f:2f:e8:ce:7f:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:7F:BE:1D:77:A1:67:A0:CE:AA:BA:E5:53:2D:E2:4B:B6:62:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4J_vh13oWegzqq65VMt4ku2Ygs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:08:2e:29:1d:f5:48:76:4a:8d:28:3d:ea:21:81:6d:36:50:
89:56:0e:00:27:f0:a4:d5:fa:93:92:c6:da:6d:ec:bb:79:82:
bb:f8:fc:f6:3d:90:84:64:1d:30:81:e4:97:3f:72:66:19:d7:
e1:3f:98:26:41:be:c6:5a:1f:af:3b:a3:05:90:e6:6d:bf:c5:
ff:ff:8a:22:2d:ee:62:67:8f:de:ef:87:30:a4:33:ca:63:12:
42:c9:c1:3b:b1:ee:3c:0f:a5:47:8c:e5:60:00:ca:cc:8b:35:
ce:cb:fd:58:aa:e6:0e:27:44:15:78:e8:3e:3c:91:ec:69:0c:
ab:4f:ab:6d:28:9b:6e:d9:31:ad:4a:4b:f8:1a:d3:3a:fe:71:
bd:a3:25:90:dc:c4:0e:f4:44:3e:a2:5a:d3:2a:79:37:b9:72:
82:8e:be:5c:8c:73:03:00:54:92:8e:a7:b5:10:8f:da:17:1f:
78:4e:7f:71:98:58:a2:aa:8d:e9:b1:29:db:58:31:ce:2e:ba:
fa:8d:a1:06:9d:59:04:c4:5d:85:38:7a:e5:8e:9d:fc:d4:e8:
ea:e6:43:01:ee:67:1b:ba:9c:90:ee:cb:99:af:0d:4b:70:59:
74:9e:14:53:81:45:1d:32:67:58:67:46:48:f1:63:a1:9e:cf:
11:3b:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:51:18 2025 by rpki-client