Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGQEgTjYEaGXlZ4jQbqCQ8-Du_0.roa
File: FGQEgTjYEaGXlZ4jQbqCQ8-Du_0.roa (raw, json)
Hash identifier: /qJ/SVhGBux6PMA1YA9mMgt3fn+lS0ypsyJYPRNcWP8=
Subject key identifier: 14:64:04:81:38:D8:11:A1:97:95:9E:23:41:BA:82:43:CF:83:BB:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861BB0AFFC3CD9006A44E43F52219ABBC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGQEgTjYEaGXlZ4jQbqCQ8-Du_0.roa
Signing time: Sat 04 Feb 2023 09:10:09 +0000
ROA not before: Sat 04 Feb 2023 09:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1b:b0:af:fc:3c:d9:00:6a:44:e4:3f:52:21:9a:bb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 09:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1464048138d811a197959e2341ba8243cf83bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:7f:46:10:bb:c3:a8:b3:72:fe:74:2f:40:
b5:10:c4:fa:d0:af:56:07:2c:53:9d:28:c4:49:e0:
5e:2d:45:7e:8e:3a:74:00:3a:21:49:aa:c1:eb:0f:
0b:5a:d9:b2:06:5a:af:40:2d:e0:82:2b:81:a9:73:
20:c6:16:8c:51:1c:f4:c8:b4:36:89:5d:ba:a3:16:
c7:d0:ff:80:1e:fb:04:52:59:93:25:20:4d:a0:45:
e9:73:6a:80:5c:d5:00:32:c9:03:eb:40:94:f2:fe:
4e:10:8b:83:96:c9:aa:61:02:12:70:fe:f2:0b:dd:
87:53:ec:d5:03:71:c8:ec:b0:e8:eb:aa:44:38:ac:
47:3a:82:77:c7:a0:d9:d0:7c:82:7f:f3:bd:bf:95:
53:4d:e5:25:f4:0c:da:25:2e:4d:76:c5:df:3e:9c:
19:2b:fd:b7:3a:86:99:df:0d:d1:48:fd:f7:3d:61:
00:ce:7c:56:e4:e4:a5:51:12:d8:8e:20:f7:cc:ec:
b1:02:a3:c9:2d:d6:be:3c:69:f8:46:af:69:31:68:
73:10:d1:68:34:31:24:d7:53:c4:52:3c:a0:e9:a4:
89:41:ca:a6:76:a6:a5:91:e6:ec:10:49:d1:4b:35:
78:1e:cf:ae:f0:76:1e:9b:3a:3f:1b:cf:b0:2f:e8:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:04:81:38:D8:11:A1:97:95:9E:23:41:BA:82:43:CF:83:BB:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGQEgTjYEaGXlZ4jQbqCQ8-Du_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:7d:af:df:61:bc:23:80:cc:b9:b7:16:8a:5b:2d:22:1f:c6:
c6:13:a6:3a:8e:a7:55:7a:f0:98:56:aa:69:cd:22:45:97:0b:
3c:c7:66:d5:cc:15:cc:5b:69:69:d4:6f:7c:33:c3:1a:3d:ce:
0d:1b:12:a3:53:e4:17:25:72:d4:1d:cb:a9:36:81:b7:15:77:
52:1c:c5:25:32:43:2c:f0:a2:34:5a:4a:1e:9f:bd:d4:6d:16:
7a:91:ce:ee:52:f9:24:d3:5e:71:01:9c:25:08:38:aa:f8:2c:
95:58:06:63:47:aa:9c:16:eb:ed:df:66:0c:66:2c:29:8d:69:
79:04:ee:4e:d5:7e:36:a0:89:5d:33:96:6e:bc:02:a0:de:00:
30:e8:ec:69:4c:87:93:7a:4e:e8:00:81:b9:6d:b2:b4:09:e7:
fd:c9:30:a1:81:49:21:dd:89:a7:8b:b5:fe:b6:eb:9d:63:48:
84:f1:da:76:cb:fd:9a:7a:4c:75:d1:f8:cd:15:94:83:09:3b:
69:51:c2:53:29:9e:4e:d5:28:75:dd:37:5d:1e:4e:40:41:e4:
9d:70:bd:d3:12:d6:12:9c:10:39:45:53:bf:0a:dd:e0:74:d6:
db:43:f4:93:58:52:b1:3e:89:03:f4:b0:b6:7d:cc:3a:49:56:
da:2c:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:23:44 2025 by rpki-client