Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9PRzl_-a2_67FEIiJnvDT0S-34.roa
File: F9PRzl_-a2_67FEIiJnvDT0S-34.roa (raw, json)
Hash identifier: U4HQPHwYzM61aYHFVczrVPkSuixgqq/ZsLFz+lG+bBQ=
Subject key identifier: 17:D3:D1:CE:5F:FE:6B:6F:FA:EC:51:08:88:99:EF:0D:3D:12:FB:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C402E95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9PRzl_-a2_67FEIiJnvDT0S-34.roa
Signing time: Sun 20 Feb 2022 13:09:19 +0000
ROA not before: Sun 20 Feb 2022 13:09:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816145557 (0x6c402e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 13:09:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d3d1ce5ffe6b6ffaec51088899ef0d3d12fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:24:04:08:80:4b:74:c6:cf:1a:32:61:49:
f5:d1:bc:e4:46:7a:c0:e0:41:6d:a9:3b:88:eb:c8:
2f:4b:04:b0:6f:c3:e0:4b:15:33:e8:cf:5a:25:25:
ad:90:5b:ba:d8:24:11:b2:a2:6a:08:ff:1c:cb:97:
74:c3:57:6a:10:36:c3:3e:59:ee:f5:55:00:f0:c5:
ca:27:dc:9f:70:1d:e9:93:b5:6d:69:11:70:3e:2d:
28:84:1d:80:27:8e:df:4b:4f:a0:b4:b8:2e:6b:09:
f9:08:fc:f3:8b:7d:52:b2:f9:08:98:58:4d:13:42:
e2:2f:90:43:38:44:0a:b1:78:e2:33:fa:1b:83:0b:
9b:16:86:46:b4:53:a6:97:12:58:00:a8:c5:6c:fd:
b9:2f:5c:e1:16:e3:f6:f2:cf:d9:28:90:da:95:bd:
14:cc:8f:0e:1d:52:04:8c:fc:0b:02:9c:32:b5:03:
90:b0:6f:69:85:2e:69:a2:38:ff:f2:bf:60:91:48:
14:3b:e7:7a:24:03:8a:0d:ad:ee:1c:07:94:10:21:
64:86:37:d0:9b:45:04:2a:75:7f:3c:57:23:85:0e:
63:8b:33:88:56:09:ae:77:a4:28:59:1b:fa:df:c3:
0e:63:6b:32:22:51:de:4d:3a:c5:86:41:86:f2:59:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:D1:CE:5F:FE:6B:6F:FA:EC:51:08:88:99:EF:0D:3D:12:FB:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9PRzl_-a2_67FEIiJnvDT0S-34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:40:05:26:e0:d3:ce:2a:d3:65:82:19:b2:65:ce:2d:38:0f:
d2:12:6c:00:81:b3:13:09:62:72:23:a9:de:10:83:0a:7c:bc:
52:71:c1:c1:2d:dd:8f:a5:3c:af:75:b9:9b:6f:5b:1a:9f:4e:
c1:2f:7d:bd:2a:24:90:21:64:03:f0:41:80:d9:55:79:e5:b6:
11:d4:17:17:d1:9a:53:64:d2:cf:2b:a5:d2:cd:e0:11:af:54:
1e:79:a9:18:1a:8a:94:21:36:8a:66:55:0b:f8:04:b0:58:a8:
a5:60:92:3f:c8:39:77:5b:97:fb:3d:14:c6:d6:a9:9e:2a:d1:
10:a1:1e:12:e3:88:bb:97:de:de:f6:96:05:ec:f2:f5:ed:1b:
77:47:53:5b:76:79:d2:80:7d:d1:61:bb:4f:52:9d:a0:de:d2:
b1:4c:f1:9a:cf:15:14:6b:83:fa:b7:0f:db:98:b1:96:3d:94:
25:b5:59:92:71:95:e4:3b:52:6c:24:9b:fc:e1:75:dc:19:ff:
32:2e:f1:0e:ad:5e:a6:d3:f7:11:fc:6a:6e:af:01:94:04:f5:
37:28:4a:e6:ce:60:5c:41:78:dd:69:1a:ef:cf:88:7f:e1:05:
66:e7:45:d9:07:a6:68:a8:5f:f7:ec:69:60:7b:cf:c3:92:93:
8d:00:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:13:56 2025 by rpki-client