Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5N35CptbLeSBVQ60sU61kkC-xU.roa
File: F5N35CptbLeSBVQ60sU61kkC-xU.roa (raw, json)
Hash identifier: c2tb2h/I6JQETnW4Aba64C9zybHKFQanCoP1O6EOWPg=
Subject key identifier: 17:93:77:E4:2A:6D:6C:B7:92:05:54:3A:D2:C5:3A:D6:49:02:FB:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018275DE0F15864EFEE3057A0567F68B0A41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5N35CptbLeSBVQ60sU61kkC-xU.roa
Signing time: Sun 07 Aug 2022 01:14:23 +0000
ROA not before: Sun 07 Aug 2022 01:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:75:de:0f:15:86:4e:fe:e3:05:7a:05:67:f6:8b:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 01:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179377e42a6d6cb79205543ad2c53ad64902fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:86:21:9d:c7:bd:31:78:85:37:26:6f:3d:
80:eb:ca:5d:d8:7f:47:14:a8:a5:77:b0:91:ac:d3:
77:7f:42:46:da:f0:5e:7f:56:14:ee:dd:ef:7a:22:
7f:36:47:92:c0:e6:1c:44:a5:08:6a:f9:ca:3c:a7:
0b:b4:b0:30:2f:73:bf:2e:ca:0c:f9:9c:aa:70:1c:
f8:6b:08:6b:d5:21:59:b0:6a:8f:9b:bd:d5:f6:c1:
21:99:33:5e:24:f2:7c:36:6e:29:90:af:21:06:be:
22:95:43:e9:a1:68:dc:d8:57:f6:bc:5a:f9:85:e9:
46:0b:6f:0f:38:c1:af:34:cf:06:bd:68:5b:88:e7:
d3:c9:c9:4f:c7:4f:f7:bd:7d:72:61:31:1b:16:52:
5a:c7:43:2e:bf:08:6c:0d:c1:33:2a:5a:57:96:cf:
eb:75:bd:fe:de:cb:24:58:f8:76:b7:af:5d:29:33:
aa:68:6c:7d:d6:ed:13:4a:65:88:58:f1:6f:b1:5b:
6e:bf:86:a9:37:55:3f:a3:9a:e8:aa:01:11:d1:ee:
7f:88:bd:18:25:58:80:aa:18:af:ac:9f:45:e2:3e:
cf:13:bc:d0:89:f3:c3:fc:16:37:60:d8:20:9e:2e:
83:21:fe:e4:6a:0a:98:18:ab:c6:ad:b2:f2:aa:fd:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:77:E4:2A:6D:6C:B7:92:05:54:3A:D2:C5:3A:D6:49:02:FB:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5N35CptbLeSBVQ60sU61kkC-xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:79:08:81:33:f7:8f:4f:a9:99:21:3c:0a:2a:40:a6:05:c0:
b0:11:09:3f:df:a9:4c:84:a1:2c:81:7a:b0:f5:f9:6a:02:9c:
99:c2:82:1c:05:7a:f3:08:ee:93:b0:60:fc:94:cd:4b:74:b5:
d2:f8:c7:57:23:c4:bf:84:f9:13:45:ac:f2:cd:87:a2:e3:da:
56:d1:88:2a:5a:9c:2b:79:19:1d:e9:90:47:4d:ad:9d:2d:b3:
b6:74:5d:b5:27:bb:b2:d7:7b:e2:ec:39:f3:a9:39:53:11:1a:
c0:ca:58:c7:8e:65:aa:63:0b:36:37:35:66:88:37:6b:98:e6:
98:44:da:28:9f:ab:22:1d:eb:4e:7f:7c:15:c2:b7:46:33:42:
36:33:eb:db:ca:a0:fa:9b:2b:19:03:4b:a3:2e:8c:60:85:10:
d9:d5:4e:20:ec:bb:b5:62:bd:58:82:3d:5d:0d:71:e2:b6:31:
f5:ee:24:69:19:73:77:55:b8:ee:59:24:0d:36:5b:64:a1:22:
3a:93:63:07:5b:7b:b6:0c:d7:d2:b1:c3:37:a1:7d:30:02:fe:
19:23:aa:a0:45:bf:04:ac:bf:72:f6:9a:20:ea:50:e2:6e:9b:
6e:a0:02:94:ad:d4:9d:3a:28:07:31:8c:ba:9d:a5:15:2e:a6:
1a:b9:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:34 2025 by rpki-client