Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FD1e64mVuK8jW3euuQxBx3PiKbU.roa
File: FD1e64mVuK8jW3euuQxBx3PiKbU.roa (raw, json)
Hash identifier: rLYnnXsJxOvfpPv9NVQ+/6NzQfs+uFxNa8ld7QoH8tA=
Subject key identifier: 14:3D:5E:EB:89:95:B8:AF:23:5B:77:AE:B9:0C:41:C7:73:E2:29:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899557311BFAE463568F6985550043D874
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FD1e64mVuK8jW3euuQxBx3PiKbU.roa
Signing time: Thu 27 Jul 2023 03:14:26 +0000
ROA not before: Thu 27 Jul 2023 03:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:57:31:1b:fa:e4:63:56:8f:69:85:55:00:43:d8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 03:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143d5eeb8995b8af235b77aeb90c41c773e229b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:ef:be:bf:ec:f0:f9:c5:e6:47:79:bf:c4:
d5:3b:77:c8:75:7d:ea:f0:2c:00:48:ce:4d:f7:98:
50:0b:d5:12:ef:2d:dd:d4:9b:44:48:dd:c9:d2:86:
bb:a0:2b:d2:58:3e:73:aa:f5:3f:9c:c1:cf:06:e8:
b5:a0:f0:c3:cd:f4:7a:44:bf:8e:85:e3:df:48:47:
ae:6e:8d:d9:bb:eb:89:0c:85:b1:0b:60:e9:9b:72:
3e:ed:65:c4:2c:19:7c:dc:ba:6b:8a:47:0e:ea:e3:
8f:cc:f0:89:28:30:6b:a1:ff:c6:db:94:66:94:62:
fd:49:98:c8:35:eb:a6:29:10:12:0b:82:b2:07:c6:
a7:67:9a:02:ad:3d:26:43:f3:d6:8f:ff:ea:26:a5:
71:7c:45:0d:4d:dd:fc:3b:b0:d2:ed:cb:3d:28:9e:
23:91:9e:48:d5:d1:41:fd:a2:1a:ec:76:cf:a3:61:
92:05:78:0e:48:d6:f3:20:3d:4d:57:b8:78:fb:87:
26:48:14:e9:05:1a:a7:ea:44:09:39:a9:01:df:ce:
f4:ed:08:9e:23:23:c9:cc:6e:84:9d:c1:b3:a2:24:
bb:06:e3:0d:61:c5:3e:93:bf:c3:2f:6b:df:c3:71:
32:e9:b8:78:08:31:b3:88:f6:32:8c:40:29:a7:3e:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:5E:EB:89:95:B8:AF:23:5B:77:AE:B9:0C:41:C7:73:E2:29:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FD1e64mVuK8jW3euuQxBx3PiKbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:45:58:40:3b:19:a2:ac:9e:ae:cc:5a:4b:b9:13:8c:3c:31:
01:8c:75:a3:18:3b:92:cc:69:0e:3c:b6:2b:a0:ca:56:32:8f:
22:b6:b9:03:63:f8:e7:7f:34:93:6d:5b:37:82:47:fd:24:80:
f2:d0:49:f4:d0:d0:92:25:70:05:07:e7:d6:25:29:24:95:00:
5d:c7:a2:c0:c7:75:81:f0:29:74:ff:20:27:b1:7a:ef:16:3d:
e5:7b:4d:09:27:88:a7:b0:dc:ca:9b:c8:c0:da:5a:ec:7f:67:
e7:87:fb:e6:ea:27:19:c0:42:dd:14:e3:5a:f1:7b:67:69:b3:
7f:28:b1:93:aa:ca:50:f8:a0:c3:6e:97:0a:2a:2a:6a:87:69:
79:5b:1c:6f:bb:9c:95:65:e8:08:d5:74:d5:34:d8:36:70:50:
ff:22:66:12:b9:63:a5:c9:ee:dd:0d:9d:09:66:f2:ca:60:18:
9c:9c:f4:6b:57:46:16:df:04:72:46:25:65:54:26:fc:d8:34:
3a:5a:cd:c2:e0:86:72:06:51:5e:7f:a9:62:84:5f:75:b1:bc:
7f:29:58:9e:6f:c4:6a:fd:e7:12:fe:c6:88:08:3b:08:23:56:
d9:6e:2d:cb:94:89:1f:ab:d9:3d:6e:d6:12:a2:1d:c1:ab:97:
25:3d:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:49 2025 by rpki-client