Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FAOjCJzCcH7944oRv25qMhxSYkE.roa
File: FAOjCJzCcH7944oRv25qMhxSYkE.roa (raw, json)
Hash identifier: 4PP8QmDDm+RzbZ5Hv5KJTl6g3xX0ImIS+iNrXLLipDY=
Subject key identifier: 14:03:A3:08:9C:C2:70:7E:FD:E3:8A:11:BF:6E:6A:32:1C:52:62:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B32AD829095D1C2212471E6153EE4B3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FAOjCJzCcH7944oRv25qMhxSYkE.roa
Signing time: Tue 01 Aug 2023 22:14:36 +0000
ROA not before: Tue 01 Aug 2023 22:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:2a:d8:29:09:5d:1c:22:12:47:1e:61:53:ee:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 22:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1403a3089cc2707efde38a11bf6e6a321c526241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:39:29:e6:d0:fc:07:61:9b:c3:6d:ff:05:
24:78:c0:16:73:31:1f:4d:08:95:fb:97:3b:4d:4d:
d6:32:c2:30:76:f9:66:ed:51:68:b3:30:da:57:e6:
5d:9a:49:f2:06:34:46:79:cd:85:69:67:72:16:b1:
9b:5f:a1:e2:c8:04:ef:35:b2:48:65:1c:a5:3e:95:
b7:da:75:8b:13:3f:e2:ce:6a:08:6c:06:c2:cd:c0:
79:a0:e6:97:06:8b:54:8d:f3:b8:0d:bf:6f:4d:23:
6c:65:4b:88:dd:24:f5:47:11:da:a2:34:ef:4b:5a:
d9:7f:26:44:f3:51:af:de:30:54:99:d3:b0:ab:ab:
e4:14:71:54:d9:a6:88:f4:08:79:ec:34:5f:a6:c6:
1d:06:de:82:25:6a:91:c6:74:8a:da:7c:a9:98:73:
0b:f9:d2:74:d2:f3:c8:68:ae:d8:09:9e:e9:ac:a6:
5e:2c:d5:0b:e5:56:43:5a:fe:99:59:49:a8:64:38:
23:6e:7b:92:c1:db:db:86:87:90:4d:d0:e8:90:ca:
6d:0b:26:e3:62:c6:28:56:38:c5:a8:76:e6:c2:71:
35:84:f2:49:c2:72:16:c4:3c:53:4b:1b:21:12:55:
5b:68:85:f8:cc:c1:e9:15:7d:de:b3:bb:94:4a:e6:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:A3:08:9C:C2:70:7E:FD:E3:8A:11:BF:6E:6A:32:1C:52:62:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FAOjCJzCcH7944oRv25qMhxSYkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:98:41:9b:05:2a:b5:22:b3:7c:0b:71:e0:93:c7:e2:33:25:
93:71:2e:0c:f5:f9:dc:2d:b1:6e:37:72:75:e3:6a:8e:ad:63:
6a:c2:d7:a3:6e:42:eb:1f:ea:80:61:3b:03:4b:c0:07:63:1f:
f2:85:2c:e4:10:4d:f1:c6:dc:7a:3a:f7:54:62:ff:43:20:e5:
0a:9e:ec:7b:b7:69:26:da:74:38:c6:b5:21:c7:22:be:03:38:
0a:73:57:86:bc:33:17:39:5d:b2:a6:cd:a0:94:b6:d9:fe:d1:
5b:60:03:5d:ef:ac:4a:ad:73:e6:54:dc:9d:9f:61:67:25:18:
2e:53:51:29:ed:ef:09:07:e6:61:66:a7:77:fd:77:48:2c:fa:
53:e2:41:d4:25:57:50:f6:e3:eb:c8:7c:07:74:e0:3a:41:4b:
f7:63:25:88:d2:6f:e6:b5:44:82:f4:53:cf:63:88:22:4b:c0:
02:f0:90:bb:7d:46:18:bb:6e:ba:14:e8:59:30:dd:2e:f0:3f:
73:ba:da:6a:17:0d:2d:27:c5:24:d4:e2:ee:6e:06:e9:f2:5b:
e1:59:76:c7:9d:34:74:fb:91:06:98:8e:41:40:eb:d4:92:e2:
88:8f:3e:b3:d0:6c:13:b8:17:41:36:03:f4:06:74:e0:a3:54:
aa:21:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:00:42 2025 by rpki-client