Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FSJHfOFJHz6rm1mTcdq-uOwufZc.roa
File: FSJHfOFJHz6rm1mTcdq-uOwufZc.roa (raw, json)
Hash identifier: JarUo8wBUWwjNlTmcofZ55qDTVJDmLS/CXlrL3BCtSs=
Subject key identifier: 15:22:47:7C:E1:49:1F:3E:AB:9B:59:93:71:DA:BE:B8:EC:2E:7D:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68B9FFE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FSJHfOFJHz6rm1mTcdq-uOwufZc.roa
Signing time: Mon 07 Feb 2022 14:10:13 +0000
ROA not before: Mon 07 Feb 2022 14:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757020131 (0x68b9ffe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 14:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1522477ce1491f3eab9b599371dabeb8ec2e7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:ce:d5:f5:c0:6d:9d:a8:bb:b1:83:ed:e9:
f3:8e:25:c4:3b:e7:b8:d9:11:fd:b1:4a:4e:8d:08:
6f:44:d9:c8:5c:94:ad:d8:b5:33:ec:42:48:05:6d:
f7:1e:83:a3:39:85:42:e7:66:cf:cd:c7:b7:e5:76:
cb:12:d8:63:23:ca:cd:8c:90:23:da:e6:47:a3:f3:
1a:31:93:e5:22:5a:59:01:fc:31:a5:2e:8e:63:41:
55:3b:a4:4b:c6:13:32:93:58:d2:05:b2:d0:98:4a:
34:cb:e3:3a:22:9e:6b:8d:5c:37:87:69:76:3b:78:
49:1e:81:d7:8a:ce:47:e0:b2:7e:ac:92:f6:36:0d:
f3:ff:9b:a0:50:4d:74:58:59:0c:a9:67:3c:97:8c:
24:fb:b6:ef:cd:e5:8b:33:75:e0:27:6d:24:62:27:
c5:d9:33:c7:bc:b3:0d:ca:1c:f0:ed:09:69:ca:2b:
f5:de:b1:c0:3e:1f:3f:7b:fd:d8:cb:ae:a5:0b:9c:
a1:eb:26:97:35:07:30:78:20:24:62:fd:98:2c:6c:
31:90:c5:d5:09:c5:9c:07:06:d6:11:31:ff:9f:5e:
0f:44:85:d6:06:f4:86:36:5f:52:ef:5f:54:4e:c5:
84:fd:9d:d0:3b:af:a2:5a:67:f0:ae:4b:15:e5:03:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:22:47:7C:E1:49:1F:3E:AB:9B:59:93:71:DA:BE:B8:EC:2E:7D:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FSJHfOFJHz6rm1mTcdq-uOwufZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:5a:4c:d6:51:82:96:be:02:1c:61:e6:9b:d0:6f:61:26:6d:
24:12:da:2d:d2:e9:49:12:17:58:5b:5f:d6:7e:49:bd:06:5e:
e4:46:e7:2a:84:75:eb:ff:ef:21:4b:eb:b1:5a:74:0d:12:46:
a0:d4:d5:2f:02:dc:78:83:24:84:4d:50:1c:fb:63:46:da:68:
13:60:91:d5:e8:cc:58:58:45:9f:80:b5:9d:2c:dd:1c:f2:8b:
76:e3:9f:6a:5f:26:ac:28:1c:87:1a:db:13:ce:7e:79:5c:48:
f7:ca:73:1b:14:1e:aa:2b:08:cd:71:b3:54:d7:c6:76:8d:d1:
fc:d6:bd:c2:49:0e:16:ac:75:cd:c0:44:b9:f3:b8:f6:0e:13:
33:f0:00:f4:c2:6b:86:6d:12:ec:39:b8:6e:6f:97:ce:55:5e:
62:a3:30:ce:19:a9:89:b1:36:38:fc:4f:fb:b0:6d:e4:0b:18:
0a:25:03:5e:4f:91:d3:dd:5f:7c:bb:f8:67:c2:cc:12:e1:ac:
ad:26:13:e7:2a:29:e0:5c:5f:0e:22:3c:f9:fb:ef:51:e6:75:
2c:f2:6f:82:0b:ad:cf:d7:f9:b8:b3:bd:ee:8b:2e:9e:59:fc:
c5:5e:72:a2:34:9a:03:22:fc:ec:15:1e:83:96:81:f9:20:46:
f5:cc:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:19:32 2025 by rpki-client