Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4nPrI-_5q21JD5nPbKQzaPiK34.roa
File: F4nPrI-_5q21JD5nPbKQzaPiK34.roa (raw, json)
Hash identifier: 5/Nf6divJy8wJn7uc41xFMy3Xy+9PyuE3Eb/Ecp53Kc=
Subject key identifier: 17:89:CF:AC:8F:BF:E6:AD:B5:24:3E:67:3D:B2:90:CD:A3:E2:2B:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867294760C0A39FB2700763B26D245D4EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4nPrI-_5q21JD5nPbKQzaPiK34.roa
Signing time: Tue 21 Feb 2023 06:06:17 +0000
ROA not before: Tue 21 Feb 2023 06:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:7293:ae5d/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:94:76:0c:0a:39:fb:27:00:76:3b:26:d2:45:d4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 06:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1789cfac8fbfe6adb5243e673db290cda3e22b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:58:d6:f2:32:1a:e5:25:5f:93:44:41:81:
c5:47:e5:d7:d2:12:a2:ba:ad:0e:a0:97:42:f1:c6:
40:af:ab:36:34:c9:13:84:9b:fc:84:50:e7:06:68:
19:e1:9e:39:2d:a5:0c:2c:b1:5b:e3:0a:94:fd:b1:
2c:86:35:98:3a:0e:7c:d5:35:40:66:d9:ef:2e:9b:
3a:dc:b4:99:fe:c5:70:ab:6b:9d:24:d3:bd:5a:b5:
d1:7c:84:14:51:1e:d5:5b:f3:d6:70:bf:18:c8:96:
36:66:97:f9:aa:26:5b:a8:4e:70:ab:fd:a2:44:76:
6e:39:5d:8b:86:23:66:dc:95:f9:86:f4:29:f6:9a:
cd:03:9d:f5:71:a0:ae:03:ea:0d:39:c0:11:a7:74:
a6:1e:9a:e9:83:11:96:cf:ea:16:d2:81:a8:ae:87:
d5:83:22:27:d9:64:bd:0b:93:bd:f9:49:06:40:2a:
61:73:32:88:bd:ff:5e:ca:7a:9f:1a:a4:c9:ef:8a:
e0:50:7b:b2:b6:9b:29:ff:31:5b:53:e7:36:0f:d5:
32:c0:08:08:db:05:b6:4f:38:fa:97:fa:65:4f:89:
c1:e4:04:e8:0f:e7:b7:82:ed:bb:c3:3f:46:2e:45:
26:de:19:bf:7f:6b:df:82:29:85:bb:a5:91:67:4f:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:CF:AC:8F:BF:E6:AD:B5:24:3E:67:3D:B2:90:CD:A3:E2:2B:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4nPrI-_5q21JD5nPbKQzaPiK34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:57:46:10:26:0e:62:2d:9b:7b:62:8a:4e:c9:61:b8:f8:9c:
3a:63:2b:1d:a5:68:d7:79:94:26:a3:b2:e1:d5:4b:3c:06:e4:
90:e4:c7:ed:54:e4:2b:e0:09:1a:14:61:3c:b9:28:23:e0:96:
e3:a4:0e:34:55:30:d2:72:44:cd:e7:8e:54:6a:30:1e:cd:14:
8d:81:b0:ab:68:09:e9:e4:31:7c:06:bb:1a:99:38:cd:35:c8:
1b:f3:8e:1b:c7:0f:0f:e5:b6:e7:6e:09:57:4c:ea:e5:83:11:
db:18:60:8c:17:bb:6e:a6:c1:af:67:b4:01:0c:52:9d:bc:dd:
5f:19:93:58:0e:f6:41:a1:bc:e7:7a:a2:00:14:9d:87:31:22:
d1:55:0c:9c:8a:ba:ba:e0:4d:4c:bb:90:42:e8:2e:4e:4e:b1:
88:7a:74:c3:48:7d:c0:eb:ab:c7:fd:e9:f7:70:35:47:2b:74:
46:fe:ba:18:9a:4b:43:cd:0d:40:6e:e7:1f:17:b1:b0:2b:c6:
bf:62:ec:ff:8f:4f:fb:1c:a6:84:c5:db:62:8e:9c:4f:7a:66:
9b:e9:88:4e:c4:d9:31:1f:c2:6b:af:35:d1:b6:0a:2d:66:64:
eb:76:cc:14:63:54:d6:11:c8:df:e7:4b:7e:b6:84:a6:1f:1f:
3d:30:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:40:02 2025 by rpki-client