Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKZxN31cQ-Hp8xu_DMIBS4XSJII.roa
File: FKZxN31cQ-Hp8xu_DMIBS4XSJII.roa (raw, json)
Hash identifier: CycYaw94n6WC6yk/RBzNIwVBrPYZ2h9gBWthKL4DO2I=
Subject key identifier: 14:A6:71:37:7D:5C:43:E1:E9:F3:1B:BF:0C:C2:01:4B:85:D2:24:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D9364D242A1FD233E51FE675D9E03D0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKZxN31cQ-Hp8xu_DMIBS4XSJII.roa
Signing time: Thu 07 Jul 2022 15:10:23 +0000
ROA not before: Thu 07 Jul 2022 15:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:36:4d:24:2a:1f:d2:33:e5:1f:e6:75:d9:e0:3d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 15:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14a671377d5c43e1e9f31bbf0cc2014b85d22482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:24:56:a9:f8:6b:b9:6d:24:9d:ac:a3:ae:
c1:ac:b9:20:6b:85:fd:9b:27:1f:54:a0:29:ea:64:
72:08:51:b2:c7:3d:c4:53:60:3e:4b:81:04:28:40:
9c:b4:00:4c:c9:45:99:82:c4:dc:d6:3d:38:cd:c9:
8f:f9:d1:12:d0:3f:72:50:a8:e5:53:66:fe:18:76:
f8:38:4c:15:d3:80:6a:7b:b8:93:91:a5:3a:5f:aa:
75:c6:fb:ee:a9:78:4c:33:75:5a:35:0a:d5:24:42:
6c:7c:60:da:6c:ec:34:e9:e2:c5:fb:bd:6e:6c:9c:
2d:9d:ea:89:5b:65:61:4c:c3:f5:c3:54:9a:da:1b:
7d:eb:a1:5c:c7:82:23:23:96:e0:bb:b1:31:ae:fd:
78:c5:af:b7:a7:d3:00:76:74:34:ee:ce:cc:46:5b:
b6:f8:fc:1a:4a:65:d5:fa:91:0e:09:bb:27:9b:5a:
72:0a:fb:92:15:7d:bd:6b:b1:90:2e:8d:0e:63:07:
79:b9:6c:17:40:30:36:43:0a:26:33:d1:fd:79:8a:
a9:0c:93:9e:80:c5:ba:58:ce:cf:0b:e8:b3:ca:06:
4e:e1:4a:aa:47:c9:f3:a0:30:f0:0f:6f:27:a0:8f:
d6:36:e3:35:d3:32:2b:fb:fd:41:24:21:12:e0:64:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:71:37:7D:5C:43:E1:E9:F3:1B:BF:0C:C2:01:4B:85:D2:24:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKZxN31cQ-Hp8xu_DMIBS4XSJII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:3d:9e:33:de:cc:22:08:d4:d3:ca:44:6f:9a:a8:f8:58:fb:
90:3e:27:b4:7f:72:bc:ae:b9:94:54:6b:3b:57:3f:70:8b:23:
76:23:25:2c:3d:ac:d6:df:1d:40:e2:b0:f7:4b:8f:4a:3c:84:
17:68:6e:98:61:1d:e9:a0:10:6d:40:2a:00:1a:e5:b4:cb:45:
3f:51:cb:2d:d8:bf:99:ab:d9:3f:01:70:7e:e1:ea:c5:c1:b1:
d3:9d:b2:bd:c8:3b:be:38:7d:a1:8c:77:88:94:d8:8a:fe:b7:
51:67:da:cd:32:ad:5c:d0:73:4b:39:17:c5:e2:4a:a7:94:3a:
6b:80:cf:c2:02:72:fb:2a:34:b4:2e:9f:74:41:12:73:d2:b5:
60:a6:e3:cf:6a:ba:4b:f1:5f:27:a6:0b:5a:ec:13:6d:ed:e2:
97:fe:3c:fc:97:6d:7f:b8:1a:e0:10:3e:65:09:21:89:5e:c3:
16:d0:c1:2d:7d:00:95:81:6c:7b:b3:5a:7d:e5:04:0f:f3:e0:
5b:0d:e2:1d:7d:64:27:08:00:f4:27:57:d4:94:44:9f:a0:67:
7b:bf:83:1b:37:2a:d9:ad:45:38:59:f2:f3:a5:fd:db:e2:30:
9b:5f:1d:74:00:a5:89:57:96:a7:8a:05:34:e6:66:21:2e:05:
4c:8c:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:49:05 2025 by rpki-client