Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Fl0tsk0XuvbBQRTfHxDy9wQpMc.roa
File: 1Fl0tsk0XuvbBQRTfHxDy9wQpMc.roa (raw, json)
Hash identifier: Yg8Nd2IhEQ1p88FUEecAqluSQse2j1Z2djgHpiGFRXQ=
Subject key identifier: D4:59:74:B6:C9:34:5E:EB:DB:05:04:53:7C:7C:43:CB:DC:10:A4:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C969A16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Fl0tsk0XuvbBQRTfHxDy9wQpMc.roa
Signing time: Mon 21 Feb 2022 20:18:37 +0000
ROA not before: Mon 21 Feb 2022 20:18:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821809174 (0x6c969a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 20:18:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d45974b6c9345eebdb0504537c7c43cbdc10a4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:dc:12:63:20:30:aa:06:ab:9f:b5:b8:f5:
65:79:e5:01:23:79:0a:9a:4e:1b:4c:9a:13:4f:1f:
55:8d:30:0b:6c:cb:a3:f4:bf:71:ad:28:1d:f5:3f:
57:bb:52:23:23:0d:b2:3e:ce:97:33:6c:28:1a:3e:
9e:41:85:b4:80:36:8b:b9:88:b3:5e:37:5d:f7:ee:
65:f1:fa:b6:27:d5:21:26:a5:b6:95:1f:69:c8:ac:
c8:f1:ac:22:b4:de:a5:fc:e3:c6:69:a1:65:48:2c:
bf:56:4b:62:e3:8c:8a:1c:fb:d3:0d:f8:46:0e:e4:
49:f2:57:32:3f:93:14:da:b7:23:e8:86:fe:8a:dc:
69:ff:ad:40:04:c6:93:8f:dc:e6:e1:91:91:de:09:
a4:41:97:84:82:cc:f5:ae:1c:f5:bf:dd:ec:f9:0c:
39:e3:04:64:98:84:12:db:7f:b4:d4:98:a3:1b:f2:
12:e6:88:a6:c2:71:a1:7f:05:9c:46:bf:c8:b0:81:
80:bc:2b:42:82:4d:fe:27:2b:cb:d8:6d:e7:bf:81:
2d:25:4a:1d:5f:c3:62:b7:fa:94:62:0f:4e:d8:62:
ed:15:fa:56:fc:83:0c:0f:ad:25:d5:72:8c:d8:d7:
5b:30:de:2d:96:34:a1:d9:77:67:6d:ac:e3:1b:34:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:74:B6:C9:34:5E:EB:DB:05:04:53:7C:7C:43:CB:DC:10:A4:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Fl0tsk0XuvbBQRTfHxDy9wQpMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:3f:b2:1b:1b:32:b3:8e:6e:e2:1c:77:11:f8:04:b0:20:01:
0f:b8:bc:ed:8c:cc:61:db:44:38:c3:8a:6a:6e:d2:b4:d7:1f:
c6:3a:7c:16:be:70:a8:4e:0c:bc:8e:c6:a5:c6:7a:e7:64:07:
b1:4c:f9:c3:28:c7:c9:94:d5:ee:8f:cd:81:91:41:48:39:5b:
00:2d:c3:6b:de:0f:dd:87:76:5c:25:87:7c:69:7e:99:41:66:
26:0e:4a:7a:d5:45:7f:3c:67:e7:e6:e0:ab:33:81:19:29:0c:
d8:8c:a2:60:a1:9d:7d:3a:4a:c2:08:bb:c1:dd:51:78:0f:95:
ed:cb:57:b9:9e:cb:19:71:5f:d0:cb:c7:ad:46:13:62:4b:78:
ab:b6:68:38:73:82:ec:68:74:dd:88:1a:2a:36:76:f0:7a:c0:
14:3d:9c:ea:6c:15:15:38:28:0f:d5:7e:ca:03:89:0a:64:71:
9e:7d:f7:18:7c:a3:08:16:ca:46:97:b3:6f:13:98:7e:bf:c8:
70:5d:e0:b6:4a:0b:04:f0:cb:50:d1:bc:8a:7e:4f:4f:28:58:
0e:83:7a:77:57:51:8f:c5:3c:e5:4c:a5:6e:e0:15:72:59:b3:
c3:04:01:8d:2d:93:c5:5b:0f:1b:8d:fc:aa:b1:04:21:d9:1e:
ca:4f:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:28 2025 by rpki-client