Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHeX411Ds06W1PBlCMOjEDt_Q_E.roa
File: FHeX411Ds06W1PBlCMOjEDt_Q_E.roa (raw, json)
Hash identifier: LhqCmp6zR5TLDPoCMQ4JgrEFDgutTGzVD2jwl7149LY=
Subject key identifier: 14:77:97:E3:5D:43:B3:4E:96:D4:F0:65:08:C3:A3:10:3B:7F:43:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018999D9AF515749B5B802B0BE03668582A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHeX411Ds06W1PBlCMOjEDt_Q_E.roa
Signing time: Fri 28 Jul 2023 00:15:27 +0000
ROA not before: Fri 28 Jul 2023 00:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:d9:af:51:57:49:b5:b8:02:b0:be:03:66:85:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 00:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147797e35d43b34e96d4f06508c3a3103b7f43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d7:ba:e1:47:c2:cc:a0:2f:cd:8b:4d:d2:85:
b4:3a:3e:08:5a:0c:c4:4f:8b:47:41:0b:b5:38:03:
67:b1:94:e0:b1:4e:1a:da:a4:5e:c1:3d:02:40:d1:
d3:22:6f:0a:88:37:9a:60:1d:31:32:94:db:78:ee:
fc:62:23:9b:f7:ae:b4:8f:c6:45:cc:c9:70:e2:5e:
19:a0:a2:d8:e9:bf:13:13:aa:bf:44:9b:b2:f1:6e:
57:81:2c:e5:29:be:e4:7c:dc:37:5b:20:1b:e6:8a:
b5:86:66:c8:51:b3:f4:15:e1:d2:ce:ec:4a:af:3a:
c6:90:96:61:0d:17:8f:4b:cb:60:b2:34:1c:8a:b2:
14:bb:b9:21:84:e9:48:a2:8a:64:b0:7d:75:76:45:
4c:11:04:a8:12:76:94:bb:41:48:57:5f:ca:92:86:
b0:10:3c:c9:d9:32:0a:ab:4c:29:ea:49:a3:42:ac:
03:90:af:27:7a:2a:25:16:be:0f:05:48:ae:a9:99:
c2:bb:c2:e2:20:24:cc:12:c0:37:71:92:f2:81:73:
3d:df:7a:79:04:27:fd:7b:8d:1f:91:06:76:7e:1d:
25:5f:ea:e5:14:9e:e2:12:0b:f7:e8:e2:aa:80:18:
5b:d9:25:b5:ae:1f:03:ce:1c:67:d8:83:c6:f2:9e:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:97:E3:5D:43:B3:4E:96:D4:F0:65:08:C3:A3:10:3B:7F:43:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHeX411Ds06W1PBlCMOjEDt_Q_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:88:f4:3c:c3:28:a3:36:85:9a:72:9e:b5:a7:66:a6:2b:31:
9f:73:44:3d:2b:3f:8e:60:04:f4:68:17:56:6e:ef:b7:53:07:
71:f0:ac:93:0b:e4:51:b2:35:24:cf:73:14:17:87:09:f8:2d:
d6:1e:20:51:b7:3e:54:d4:eb:ab:d0:c9:34:c8:b4:1e:9a:e5:
f2:ec:84:47:e2:35:97:07:bc:7a:7c:65:bd:1b:68:53:e4:f9:
bd:25:52:4d:75:0a:09:4d:3d:5a:5f:b4:20:f8:b5:36:6c:9b:
cf:25:ed:e8:21:47:42:3e:7f:6e:e7:41:d2:ba:8d:b4:ea:e0:
0d:5b:15:cb:73:2d:a7:12:47:4f:9c:b6:b8:fb:c5:4c:98:79:
cd:99:45:43:0b:96:e8:bf:72:a8:6b:2e:2e:b2:43:03:7d:7b:
3c:7d:3f:17:cd:29:ea:35:aa:2a:ea:fe:48:8c:88:00:36:a3:
63:83:c9:0f:8e:c5:2a:bb:2d:e5:4a:93:6f:54:0a:aa:3a:37:
da:7a:57:72:63:86:86:0d:8a:91:7a:b8:fa:d6:19:3a:a7:9b:
02:50:b5:a5:51:43:c9:28:5f:42:84:11:fd:eb:f3:bc:6c:71:
85:69:8d:c8:ba:22:99:92:7a:8b:a4:d5:c5:3a:30:b3:95:45:
2e:81:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:33:21 2025 by rpki-client