Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ft2SoeTYiQEhicCSAq1WkNroyA.roa
File: 4ft2SoeTYiQEhicCSAq1WkNroyA.roa (raw, json)
Hash identifier: mt6m1wMpMg78PlIyU15qjHmj6ZNeL86ULZJinjGLMKk=
Subject key identifier: E1:FB:76:4A:87:93:62:24:04:86:27:02:48:0A:B5:5A:43:6B:A3:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DF7084AAB0D0BF58DFC0CBBF904B14E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ft2SoeTYiQEhicCSAq1WkNroyA.roa
Signing time: Sat 27 Aug 2022 13:14:29 +0000
ROA not before: Sat 27 Aug 2022 13:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:df:70:84:aa:b0:d0:bf:58:df:c0:cb:bf:90:4b:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 13:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1fb764a8793622404862702480ab55a436ba320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:ec:f4:88:d4:34:4e:15:a4:67:4c:e3:df:
1e:72:fd:62:41:8c:80:70:ff:2e:7c:c3:ae:b5:bc:
53:11:44:6a:cb:d5:24:4a:a9:68:ed:a8:c7:15:0f:
1a:78:be:7e:df:ab:7b:d2:5c:fa:6c:04:1e:83:c5:
d9:c9:1a:ff:d7:a5:af:19:38:ce:0c:95:9b:e8:4f:
ec:a2:63:50:63:6f:f2:e3:19:27:2c:f3:97:f6:d2:
3b:6f:eb:6e:33:bd:c5:e4:2e:50:79:7e:11:98:97:
84:c0:7d:42:55:c7:6a:b9:34:69:15:21:81:15:18:
9d:50:e8:90:70:47:42:39:bb:d2:74:04:0f:2b:d0:
a4:37:3e:6c:e3:83:97:47:db:25:99:f1:4f:ea:62:
0c:2c:15:37:3a:d3:43:27:b3:61:a3:b2:b4:98:ad:
70:5d:63:a5:7e:67:86:65:f1:8b:a6:b5:8c:fe:b9:
3b:92:f0:94:b7:98:ee:30:a0:5d:ae:6a:8f:07:5f:
b7:5b:7e:49:48:e2:18:ea:f5:ee:7a:e8:11:53:21:
ed:9e:36:b6:d2:71:e3:01:31:b8:08:e7:1b:a3:ae:
d4:fe:f1:b9:3e:9c:37:52:b2:96:fc:35:06:35:64:
2e:1e:81:58:77:5d:30:d2:36:a4:3f:a8:26:bf:9d:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:76:4A:87:93:62:24:04:86:27:02:48:0A:B5:5A:43:6B:A3:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ft2SoeTYiQEhicCSAq1WkNroyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:5b:ed:57:40:e4:3f:c4:cd:da:67:21:ca:cd:b4:c1:30:71:
c8:4e:d7:1a:c3:c1:64:dc:ea:f8:4e:b0:cc:51:19:d7:c3:7a:
ac:c8:1d:5e:cd:31:f1:39:07:ea:b7:0c:b6:a3:2c:f9:83:e4:
b1:3d:63:66:d7:18:39:c5:b1:6c:54:cd:82:73:6d:39:62:43:
a7:6a:fe:6b:20:99:9c:ea:7b:78:18:c3:34:1a:b0:d2:e0:f3:
4c:5a:22:45:8a:84:19:47:2b:d5:47:e1:71:bd:8c:d4:6b:0b:
2e:67:82:a6:ba:82:d8:54:62:1f:0a:eb:95:eb:35:17:eb:74:
6d:9b:c0:e1:b1:69:e1:b2:82:95:f8:66:74:89:e2:9d:c4:64:
8e:e3:33:54:20:85:42:6d:a5:54:38:87:4f:5b:c1:97:ef:b7:
13:e4:4e:fd:98:b6:42:f8:aa:8c:78:70:9b:4e:27:f4:6f:3e:
d5:da:6e:b3:45:6f:3f:37:1e:36:be:eb:d8:22:88:eb:fa:12:
79:37:15:e4:19:42:10:87:cf:49:e6:6d:5c:02:45:86:12:02:
6f:2a:16:75:1a:40:18:41:a0:79:40:55:85:04:42:1a:c4:9a:
02:32:33:59:22:69:8a:f3:a4:71:20:1d:0c:72:1c:78:66:b8:
a2:cf:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:26 2025 by rpki-client