Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F6WlDydUPhjv5w_vWsNUzvZBNV8.roa
File: F6WlDydUPhjv5w_vWsNUzvZBNV8.roa (raw, json)
Hash identifier: vpOnhglC4MxGTwRzR7Hqlrn3iZ2aGGyzoBGmcX61kC4=
Subject key identifier: 17:A5:A5:0F:27:54:3E:18:EF:E7:0F:EF:5A:C3:54:CE:F6:41:35:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AD7199B3C360F3BF1F0ED2CE080B92F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F6WlDydUPhjv5w_vWsNUzvZBNV8.roa
Signing time: Wed 17 Aug 2022 20:14:39 +0000
ROA not before: Wed 17 Aug 2022 20:14:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:71:99:b3:c3:60:f3:bf:1f:0e:d2:ce:08:0b:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 20:14:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17a5a50f27543e18efe70fef5ac354cef641355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:16:55:2e:b6:27:c4:b8:33:55:02:96:8c:
df:ef:f5:9b:db:64:7c:88:61:3c:56:bb:f2:3d:3d:
63:ac:6e:ce:be:48:74:5d:3d:fe:3a:7f:0c:f6:2d:
8e:5c:09:2c:02:0a:37:dc:9f:60:fc:7a:5d:5e:f4:
c6:3a:22:46:73:93:3f:20:07:27:76:04:e3:67:56:
cc:b6:0b:70:ee:11:5a:97:02:42:d0:b4:97:50:ed:
67:a8:36:2a:f7:70:a6:d5:53:00:8b:ca:92:c2:f4:
c3:25:db:7c:f2:de:ba:46:ad:3d:e8:7f:79:c3:10:
bf:b2:ef:4e:19:e0:b8:c0:e3:f4:0b:d5:e3:4e:c6:
b9:38:34:6b:59:f0:b3:03:45:61:e8:11:70:00:0c:
cf:27:6f:d3:b4:89:4f:56:78:43:ce:49:65:43:a5:
11:97:2b:86:e8:5a:b3:40:ad:3a:91:55:a9:76:57:
29:ab:5c:f1:50:79:d6:5e:b8:06:df:d4:8e:28:e3:
36:33:d0:fe:04:58:5c:81:38:5f:37:dc:ee:fd:53:
71:a6:f0:c1:f8:c1:d2:a7:97:a0:a3:04:9e:73:0e:
d3:24:b5:89:cf:6c:ce:51:47:13:81:9d:29:a8:d4:
54:b0:57:75:fe:61:b7:f7:65:5b:a9:04:5c:96:eb:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:A5:0F:27:54:3E:18:EF:E7:0F:EF:5A:C3:54:CE:F6:41:35:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F6WlDydUPhjv5w_vWsNUzvZBNV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:f9:1d:c5:6e:c9:b4:d8:c5:64:54:5a:f4:6d:ea:8a:3a:21:
6a:30:f6:bc:4c:c5:91:62:ca:50:bb:b4:75:22:bf:5f:2b:22:
98:b8:bd:cb:72:42:49:bc:6e:8c:46:36:dd:50:f0:6c:65:85:
63:38:10:e2:b0:a6:c9:94:f2:30:06:af:01:44:d1:df:76:9b:
06:3a:f6:1e:91:71:64:72:3a:0d:3e:67:8a:e3:c4:5b:33:c7:
32:0a:83:3f:99:56:39:06:dc:cb:10:af:61:8b:94:1a:08:f9:
ca:aa:ca:55:07:3b:c5:5b:73:f9:0e:69:50:8b:f6:1d:27:23:
45:45:b3:87:17:0b:c4:f7:67:25:a3:27:a4:52:c0:e8:25:ba:
f6:0a:24:39:bc:d0:bb:4e:72:ff:ba:50:70:c9:84:92:97:43:
77:9c:83:ec:b7:5c:c2:af:07:b9:60:4c:19:a5:3b:19:08:a8:
a5:1c:1f:08:4f:de:ae:b5:66:69:f8:e2:f6:1a:3b:b9:2d:b7:
3c:5c:a9:65:39:be:2e:14:d8:c3:ed:d0:46:47:36:ca:24:b4:
0d:bb:e4:3f:45:7d:bd:60:23:29:51:9c:96:cd:39:56:ac:e2:
00:09:76:8c:87:6f:3c:35:c3:74:e9:f9:93:e4:7b:ed:b6:70:
5c:bf:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:16:26 2025 by rpki-client