Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1bgEPyi2dWU9QGc_FnAF89BqYQ.roa
File: F1bgEPyi2dWU9QGc_FnAF89BqYQ.roa (raw, json)
Hash identifier: hLoPFF56xeX/ByjmdT1bDvRsIN6UfDdxF/ueID+bq+w=
Subject key identifier: 17:56:E0:10:FC:A2:D9:D5:94:F5:01:9C:FC:59:C0:17:CF:41:A9:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E1940122BCE1877E823DA2C1FA7EBBD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1bgEPyi2dWU9QGc_FnAF89BqYQ.roa
Signing time: Sat 27 Aug 2022 23:12:29 +0000
ROA not before: Sat 27 Aug 2022 23:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e1:94:01:22:bc:e1:87:7e:82:3d:a2:c1:fa:7e:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 23:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1756e010fca2d9d594f5019cfc59c017cf41a984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:ad:e1:c4:3b:6d:7d:4e:a1:70:e6:e0:ad:
af:b8:43:ab:ef:81:4c:88:8d:42:16:98:fa:0d:25:
b4:22:19:ac:ed:29:8d:fe:ac:1a:bf:70:7c:b6:0e:
d8:47:67:2d:14:8c:9c:df:24:2e:29:cf:0a:9b:22:
63:c2:a5:fd:04:21:d5:b7:d1:14:ee:df:86:ab:e2:
86:1f:2b:4f:a0:de:00:17:a4:ff:89:63:ed:32:32:
dd:b8:b7:e6:5d:e2:96:64:a0:19:51:d9:f8:56:0a:
d5:86:2b:e1:9a:14:20:4b:28:ce:45:83:08:81:b3:
5f:33:3b:59:99:6e:08:06:2d:23:be:eb:f7:5c:57:
47:dd:bf:b0:99:11:dd:8c:49:88:32:09:d1:c4:b4:
d3:b1:1f:5c:40:90:3e:56:c3:06:63:0d:2b:6d:19:
f7:9a:03:e6:ba:37:b2:e2:e9:cf:80:d4:01:68:aa:
f2:3b:be:e3:67:d5:a6:37:09:c9:99:d9:80:a4:76:
07:47:58:9e:eb:59:a9:a0:29:77:64:fa:f9:3a:3e:
ea:6c:33:c0:e9:f5:2d:5b:b3:29:f7:5f:f4:57:60:
8b:1c:f0:44:11:fc:82:b0:2e:cc:f8:8c:bf:aa:3f:
ca:2c:48:1e:74:06:c1:4d:10:1e:f9:a7:7e:b7:97:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:E0:10:FC:A2:D9:D5:94:F5:01:9C:FC:59:C0:17:CF:41:A9:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1bgEPyi2dWU9QGc_FnAF89BqYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:55:10:ad:c2:f2:c5:82:41:c0:bd:53:de:69:77:a5:00:17:
ec:ff:57:29:f7:a7:2f:29:f0:2f:95:4d:5a:6c:78:d6:33:64:
6c:d7:e9:c6:7d:a0:56:77:64:35:4f:f7:4f:66:5f:df:3f:da:
72:d5:be:46:f6:b0:c4:9a:f8:bd:0e:74:37:eb:a8:f3:69:47:
73:98:a0:44:d7:a9:79:48:f5:75:37:55:30:e2:da:0b:16:29:
e8:9d:84:2d:58:39:40:44:f6:c0:c6:74:02:10:20:67:04:9e:
41:8b:82:99:6d:18:7b:66:8a:af:de:68:6e:63:1c:e5:2d:32:
e6:ee:4e:0f:1f:69:7e:3e:ef:74:3a:fb:af:17:3b:29:aa:32:
f2:f7:e2:75:80:7c:0f:07:34:f0:89:89:79:e2:3c:af:ae:16:
22:cb:03:a6:63:fe:1c:f2:fe:47:82:4f:ac:16:16:5b:a5:84:
08:3c:33:f4:da:6c:43:68:0d:d8:40:fe:f4:71:6e:26:bd:34:
b5:42:7d:5b:27:db:05:96:df:db:0c:97:7a:b2:42:c4:91:d1:
fc:e7:8f:37:bf:c3:6a:07:14:5b:ba:7a:1f:4d:67:60:dd:a2:
62:20:07:49:6a:09:16:ab:ea:67:86:9f:1c:7b:51:25:78:ee:
72:00:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:36 2025 by rpki-client