Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1RvVdzuaxKSdPRGTz2gZQuJ214.roa
File: F1RvVdzuaxKSdPRGTz2gZQuJ214.roa (raw, json)
Hash identifier: Vm8HsZFiW0ATRWnXumznezTFZkH1Fm8PMEmWhqOxs6w=
Subject key identifier: 17:54:6F:55:DC:EE:6B:12:92:74:F4:46:4F:3D:A0:65:0B:89:DB:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852411F60E39B60442667EB48AE4E87D2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1RvVdzuaxKSdPRGTz2gZQuJ214.roa
Signing time: Sun 18 Dec 2022 07:10:34 +0000
ROA not before: Sun 18 Dec 2022 07:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:11:f6:0e:39:b6:04:42:66:7e:b4:8a:e4:e8:7d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 07:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17546f55dcee6b129274f4464f3da0650b89db5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:74:e3:7d:1c:d9:be:e3:cc:85:88:9f:e5:
81:f6:92:37:1c:10:1d:4d:94:50:21:f0:5f:e0:ce:
f6:ad:df:59:c0:7e:80:b2:32:3f:37:fb:cd:4a:a5:
92:cc:ad:f3:b4:52:43:16:53:88:e0:05:6b:81:ef:
69:d7:8d:a5:01:75:22:1d:32:a6:4f:55:45:8d:10:
52:b5:91:22:e8:6e:dd:55:d1:a6:7c:dd:ef:2c:34:
ab:c1:64:d3:10:a4:93:04:53:ab:71:22:11:6d:24:
fe:7e:80:c6:cd:f3:d9:6a:5b:b5:c2:e3:d1:72:fb:
8d:48:89:e8:af:fd:ad:8c:5c:af:06:02:c9:06:1d:
1c:08:e0:2b:1c:81:62:67:30:73:bb:a5:3c:41:2c:
ca:1f:cd:57:78:2f:d9:f3:a6:c1:eb:37:a5:7e:95:
f6:c5:c9:28:90:80:fc:1a:50:31:66:1b:b0:29:46:
84:ba:1c:21:8c:87:03:14:77:6c:13:09:e3:2b:f4:
38:5a:04:dc:91:c7:25:e3:3b:0b:c2:f5:48:c0:55:
7b:a1:37:83:6a:22:20:cd:61:77:ad:dc:17:bc:0d:
ab:8a:b2:c2:7e:f6:37:fb:25:34:63:66:97:33:db:
f7:32:8a:d0:e3:0b:c6:0c:e4:89:c7:ec:b6:7e:35:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:6F:55:DC:EE:6B:12:92:74:F4:46:4F:3D:A0:65:0B:89:DB:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1RvVdzuaxKSdPRGTz2gZQuJ214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:16:26:03:b3:64:09:9f:67:80:f6:ab:f9:bc:61:f7:d3:5d:
59:3e:66:d0:7c:c5:cc:9a:79:4b:1d:1b:17:12:70:66:9a:07:
37:1a:c8:a7:b8:27:02:f5:6a:07:27:cd:d0:e9:85:0f:2a:b9:
c4:3d:74:5a:f1:5e:72:6e:f5:30:f5:44:9f:52:66:84:92:14:
b2:7c:a8:92:7e:ae:28:bf:25:95:90:ed:a4:64:4e:2a:bb:23:
57:42:f5:9a:71:99:44:24:ae:d6:cf:db:2f:e8:07:36:37:30:
92:c6:d4:39:6c:bf:34:12:2d:b6:bd:7a:77:cd:7d:8a:1f:14:
6c:ae:32:af:a9:dd:87:ba:9f:fc:96:c7:f0:88:33:4d:87:c0:
b6:be:dc:ed:be:01:1d:94:a9:6d:4e:a4:08:91:8c:65:d2:49:
14:6f:02:7d:67:7b:e1:a4:1f:3d:ab:04:3b:a7:66:58:1c:42:
63:94:62:c0:c7:f1:03:f8:a0:e6:02:d9:60:dd:8e:0b:70:f1:
ee:8c:c2:95:65:7b:7b:c4:3b:65:2b:57:ae:53:10:a0:d2:0e:
e7:a4:34:4d:ec:21:38:42:a2:35:f0:b6:0d:e1:7f:e0:3d:07:
db:40:cd:3e:e2:61:94:5d:98:5a:09:11:30:aa:c7:a5:56:98:
33:cf:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:21:05 2025 by rpki-client