Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98E_fzBQt32t2TKtN0ZaChRe1b4.roa
File: 98E_fzBQt32t2TKtN0ZaChRe1b4.roa (raw, json)
Hash identifier: FLRqqLtdGrh7OrtC72yRHiXEfnCjXliLHjGZABKe/H0=
Subject key identifier: F7:C1:3F:7F:30:50:B7:7D:AD:D9:32:AD:37:46:5A:0A:14:5E:D5:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 699D0D8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98E_fzBQt32t2TKtN0ZaChRe1b4.roa
Signing time: Fri 11 Feb 2022 05:09:01 +0000
ROA not before: Fri 11 Feb 2022 05:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771900303 (0x699d0d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 05:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7c13f7f3050b77dadd932ad37465a0a145ed5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:07:be:60:94:41:01:91:93:1b:49:98:77:
d3:54:7c:d5:73:62:cf:3a:22:2e:1c:e6:2e:3f:0c:
8a:79:80:c5:94:a3:16:9c:da:b5:ed:20:b8:b8:48:
fa:37:ea:5c:3c:b8:1f:19:75:aa:3a:17:57:53:c7:
7c:bf:59:ee:ea:9f:63:1b:1d:86:16:52:47:29:79:
4e:7e:8f:6b:d5:08:34:83:4f:b6:df:a5:af:7c:9d:
06:15:27:f1:a0:d0:0d:44:66:5c:97:e2:c4:9a:ff:
7b:25:62:44:47:00:81:2f:b5:81:43:14:bd:6a:5d:
c2:77:6d:13:9b:06:92:89:fb:3c:a3:0a:29:61:c8:
83:3f:70:d9:61:1f:0e:b9:13:33:22:e4:b9:9d:08:
04:e3:43:99:f6:af:d5:4c:6f:ac:8a:56:4f:4e:84:
1b:28:a8:9b:2a:76:47:c8:67:b5:2b:59:45:a1:22:
62:78:37:e8:4c:a1:12:ce:46:c1:81:87:61:20:99:
43:c0:9e:3c:ee:bf:23:66:2d:f8:91:f7:83:af:a2:
4b:7c:38:2e:38:51:2b:b5:5f:ad:9c:79:12:6e:a8:
81:e8:22:c8:b6:39:6c:a4:1e:ac:00:d4:da:ed:4d:
55:e5:ae:78:60:76:dc:ff:e3:bf:f9:fd:97:7f:0b:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:3F:7F:30:50:B7:7D:AD:D9:32:AD:37:46:5A:0A:14:5E:D5:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98E_fzBQt32t2TKtN0ZaChRe1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:8a:41:28:af:21:5a:b4:09:33:f3:b0:35:b0:a3:46:37:8c:
71:63:0d:74:c3:c5:f5:12:48:c0:c5:97:8a:46:5d:8a:68:87:
d7:86:69:1b:13:b1:10:6b:78:43:db:61:ed:83:f4:a2:5b:ae:
5f:b2:8a:db:00:09:19:e4:4c:3d:13:e2:93:52:5d:d9:2b:0b:
25:14:01:b4:9b:85:bf:16:78:bd:ee:d8:fc:ce:9b:0c:73:d3:
1b:93:41:32:11:86:7f:fc:01:17:2d:ee:84:ac:7b:33:89:e2:
db:c9:1b:fd:0e:ba:7e:df:17:9f:4a:90:fc:67:f9:1c:3a:55:
2f:02:95:de:ca:e1:35:fe:ab:96:6a:cc:3a:e1:d6:d1:be:d2:
9c:53:0e:36:d3:6e:8a:3d:97:c7:10:3e:ec:dc:96:71:6d:53:
7a:07:07:b5:1e:65:5f:7b:3c:16:91:bb:e9:8e:06:b8:6e:d3:
a2:68:c2:fc:8e:9e:50:9e:80:0d:d3:fe:c5:7c:54:37:4c:4b:
b7:4d:dc:49:25:68:36:3c:ec:4e:d7:23:c9:2f:fd:60:17:bc:
1f:cc:8c:a8:4a:77:b1:1f:18:39:68:1a:23:8f:bb:5b:38:a2:
61:82:c2:3f:73:48:d5:6b:be:ac:b3:e6:21:03:6e:d8:4a:d8:
be:3e:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:59 2025 by rpki-client