Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lfI1aKp-qSmrI_BB-l90kFvnOM.roa
File: 1-lfI1aKp-qSmrI_BB-l90kFvnOM.roa (raw, json)
Hash identifier: s9wI7hD37BpQmMXioDtgzKDvw97+fvc7WV0ZCyNRvsI=
Subject key identifier: FA:57:C8:D5:A2:A9:FA:A4:A6:AC:8F:C1:07:E9:7D:D2:41:6F:9C:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 777B83B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lfI1aKp-qSmrI_BB-l90kFvnOM.roa
Signing time: Fri 01 Apr 2022 11:10:34 +0000
ROA not before: Fri 01 Apr 2022 11:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004583345 (0x777b83b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 11:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa57c8d5a2a9faa4a6ac8fc107e97dd2416f9ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:53:27:8d:a3:ce:a9:48:b8:29:52:4f:09:
d0:23:b4:d7:bc:66:d9:01:ec:98:51:11:62:30:60:
d8:49:88:d5:80:45:7b:db:ca:fe:8d:8a:6b:c0:65:
40:3f:50:af:fc:8e:04:00:c0:70:85:9a:4e:1d:d7:
4a:48:60:53:4b:cb:d5:1b:fa:fe:7c:e4:9e:37:5a:
c1:1c:e0:31:33:39:fc:67:48:9c:e1:a8:03:e3:bd:
c0:7f:21:a0:28:62:0b:dc:53:6c:b8:53:18:8c:d8:
79:6e:13:e8:dc:31:b3:d7:65:14:fd:1d:60:07:eb:
03:f2:fd:de:15:e7:b9:bd:6a:95:91:3e:73:f9:a6:
6e:18:c1:40:9a:42:b2:58:72:49:5e:99:ed:24:b7:
1f:77:51:12:70:20:5f:3c:58:af:9a:e1:f9:5e:58:
63:1c:77:57:09:cf:15:bc:c2:30:9a:b6:9b:3b:23:
81:56:16:6a:14:6a:ab:34:bb:94:69:4b:98:0f:c3:
39:a1:b8:e9:e4:99:81:4e:79:df:0e:ef:34:3f:65:
10:61:0c:f2:f0:2e:f4:e3:a4:36:b1:f6:91:33:6b:
f9:fe:ae:eb:dd:6d:d0:54:50:dc:bf:a4:08:3d:da:
48:7f:56:0d:9b:a3:58:55:29:57:32:40:f0:4d:99:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:C8:D5:A2:A9:FA:A4:A6:AC:8F:C1:07:E9:7D:D2:41:6F:9C:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lfI1aKp-qSmrI_BB-l90kFvnOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:bc:ee:23:b5:fd:f7:d2:ce:64:22:18:30:47:d2:b6:a0:84:
ab:88:75:96:c1:ea:a5:bc:e4:5e:8e:95:d9:64:0f:cf:06:87:
d5:21:34:a8:da:b4:f0:9b:d8:ad:e2:2b:d9:dd:b1:5a:95:83:
df:50:b7:fd:5a:9a:65:23:cd:8c:76:5d:d6:99:4f:6b:1a:8e:
58:07:2b:eb:e1:54:cc:60:fe:8a:83:53:f3:bf:0e:55:1d:85:
f8:4a:62:be:05:f8:91:a7:fd:af:33:36:8c:03:74:54:f5:a1:
71:d7:c5:d0:82:bf:f9:00:68:d5:04:0d:42:4d:61:6e:2f:cf:
01:6d:ec:02:76:f7:cc:13:b8:53:c7:92:29:06:5e:aa:d4:c5:
12:8f:af:88:2c:90:e0:23:59:e5:04:9f:fb:1e:5e:9b:e1:a7:
a1:d8:ea:a0:5c:a3:0f:65:19:60:f9:ab:2f:04:96:3b:e6:52:
d2:9d:d4:14:ad:2b:d5:b0:f0:5a:0b:e9:44:4a:cb:98:20:ad:
30:2c:1f:1b:25:65:6c:36:05:ef:6c:9e:f6:87:c7:4d:56:0a:
cc:73:54:86:8f:a9:ec:cb:74:e0:27:a3:69:b5:4b:a7:e7:cd:
5c:6d:ed:f1:63:7c:7c:58:4a:21:08:d4:63:56:2d:4e:19:20:
e7:a2:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:03:01 2025 by rpki-client