Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW91SjRXXft-3aNSUr1ydN6mlXM.roa
File: FW91SjRXXft-3aNSUr1ydN6mlXM.roa (raw, json)
Hash identifier: 2DGV2NQWJD8wfQaHky0+3v+UsJjD6YUBVJ+RlWY+FOI=
Subject key identifier: 15:6F:75:4A:34:57:5D:FB:7E:DD:A3:52:52:BD:72:74:DE:A6:95:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 781349EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW91SjRXXft-3aNSUr1ydN6mlXM.roa
Signing time: Sun 03 Apr 2022 12:09:33 +0000
ROA not before: Sun 03 Apr 2022 12:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014530026 (0x781349ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 12:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=156f754a34575dfb7edda35252bd7274dea69573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:d0:28:0d:dd:d5:3e:c4:29:40:13:87:bf:
5f:13:13:e6:98:b2:3b:c8:2d:f4:22:6c:67:49:7a:
1f:d5:75:12:42:c2:4c:bc:e7:6b:42:45:ae:95:53:
e7:74:62:0c:77:ea:5d:4f:be:b6:05:ab:6c:20:db:
06:6b:6e:55:29:85:a6:4b:45:92:4f:a4:a8:10:c6:
d6:58:15:ab:85:0c:0c:ad:bf:bf:86:f7:e9:2b:8e:
99:5e:9d:d8:4c:1d:70:4d:4e:46:6f:37:67:00:0c:
61:3d:4e:7a:49:b3:be:43:25:c9:19:b8:2b:54:2d:
07:1a:89:91:91:3b:62:8e:60:d1:a8:5e:35:d8:dc:
0f:99:e0:6f:2a:6c:68:23:6f:fe:81:b8:7e:73:0c:
de:32:5b:26:8f:db:8b:f0:90:ee:f3:34:44:8b:01:
1b:a4:8d:04:91:79:c4:8e:74:b6:c6:3e:e7:ec:12:
d1:bc:f5:aa:c4:fd:f4:2d:e5:54:9e:68:76:f0:1f:
c8:ee:c1:43:36:f0:58:95:8d:e6:e7:61:c6:49:e8:
42:f4:1f:ca:29:14:e1:83:41:25:50:0c:1c:5e:21:
78:e0:dc:9d:c3:14:28:08:67:86:80:f9:b8:5d:2d:
35:e2:8c:20:72:cf:e9:e6:a0:47:7b:4b:78:3c:f3:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6F:75:4A:34:57:5D:FB:7E:DD:A3:52:52:BD:72:74:DE:A6:95:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW91SjRXXft-3aNSUr1ydN6mlXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:fa:61:4a:d0:99:85:b0:b0:e8:78:7b:bd:c9:46:f7:d2:f3:
de:86:23:59:84:d1:03:04:36:9b:fa:c5:66:55:10:44:55:64:
68:95:d0:42:d8:f0:c3:09:24:5a:b1:a1:c6:9e:7b:25:33:5d:
1d:e5:da:31:ce:c9:fb:cc:e3:b1:47:69:53:03:82:17:29:00:
fc:25:ba:6d:17:97:4c:36:92:01:57:b6:3c:a8:2f:fe:7a:3f:
a8:65:fa:ce:c4:24:ec:3a:14:25:b1:43:b6:56:c2:18:1f:92:
a0:65:ea:51:c5:5d:a2:68:d1:5e:00:2f:97:21:69:93:56:65:
05:21:c6:92:a6:6b:2b:5b:77:91:34:86:fd:f6:5d:9f:09:b6:
34:6a:b3:66:05:f3:71:28:80:05:91:90:15:bd:e9:2f:cd:52:
1f:2f:a8:9d:8c:23:aa:77:66:6b:fd:f9:da:27:c9:a1:ce:2c:
94:74:11:d8:a6:b1:1e:a3:16:03:85:7b:95:51:57:ab:ac:47:
d6:42:79:a1:f6:a8:1d:90:48:27:6a:f5:f9:93:0e:eb:69:4c:
76:f1:22:15:ac:04:be:87:18:ae:e5:af:79:11:9d:66:bc:33:
98:f7:2a:ac:70:05:9e:0c:13:3b:16:7e:9d:30:ab:a0:c8:c4:
8d:4e:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:44 2025 by rpki-client