Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZfNSNxqzebiezln8YAPfc9_cb4.roa
File: FZfNSNxqzebiezln8YAPfc9_cb4.roa (raw, json)
Hash identifier: PzyjTrQJelmlml+uY/qfgJusal7FV8wXKKVMHxZ7DHQ=
Subject key identifier: 15:97:CD:48:DC:6A:CD:E6:E2:7B:39:67:F1:80:0F:7D:CF:7F:71:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E28DE96CB90C1EB19651336894DFB9E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZfNSNxqzebiezln8YAPfc9_cb4.roa
Signing time: Fri 11 Aug 2023 03:04:58 +0000
ROA not before: Fri 11 Aug 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:e28d:e0f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:8d:e9:6c:b9:0c:1e:b1:96:51:33:68:94:df:b9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1597cd48dc6acde6e27b3967f1800f7dcf7f71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:e8:0d:66:34:ca:f4:c0:72:ab:bb:14:60:
ad:e2:c0:ee:28:4f:03:2d:1b:85:cf:9a:b9:fb:dd:
77:e9:31:a2:08:da:bc:a2:f3:d8:19:04:d1:00:38:
0c:55:cd:31:06:a2:83:0c:b8:ec:94:51:fa:94:50:
c3:5e:31:6f:6a:c8:72:61:60:95:c1:28:6a:76:b1:
1e:8a:6c:38:ac:27:05:87:0a:0d:5c:15:2a:10:7d:
8f:4d:7c:90:89:25:8c:bd:dc:2a:dd:24:cb:b6:fc:
55:e1:ae:c4:6a:ec:1d:44:d2:69:99:6c:4b:6c:2f:
b8:15:53:64:f1:7e:22:1e:62:5d:0b:17:2f:ad:6d:
3d:d0:f7:b2:b2:b1:f6:df:42:60:78:0e:f2:b0:e9:
b9:6a:f2:eb:0b:e4:70:17:ac:6c:dd:f9:71:51:2f:
7e:b8:f0:b2:90:4b:67:cb:16:62:e0:e4:60:5a:d3:
ac:6d:d3:78:8f:f2:6d:63:f9:8c:4f:34:50:ce:3a:
eb:e1:14:01:77:a7:e8:93:56:f4:89:0b:25:58:54:
53:69:4c:e1:75:99:a2:1b:15:45:bf:48:98:1e:96:
41:f8:68:ea:41:d6:f9:f5:47:80:95:a5:9b:4e:d5:
39:c4:db:b3:a7:56:7a:e8:42:95:eb:e6:33:51:fe:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:CD:48:DC:6A:CD:E6:E2:7B:39:67:F1:80:0F:7D:CF:7F:71:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZfNSNxqzebiezln8YAPfc9_cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:76:d8:25:3e:d5:23:3e:95:77:4a:06:58:55:92:de:22:1f:
11:4e:6a:b0:57:0e:3a:ee:d8:af:5b:bc:2d:99:f7:0a:b2:b4:
fb:e4:1b:34:3d:07:9a:53:af:ef:de:a5:25:d0:a0:a8:67:e7:
fe:67:dc:89:b9:a1:36:2b:9a:93:2c:ec:71:d6:38:4c:ef:c6:
ae:da:51:00:1b:e0:4a:e5:38:9f:d7:00:75:6f:81:79:98:c3:
16:df:0d:33:31:f3:ce:1e:7f:7e:39:62:19:b8:02:3a:af:b9:
80:e3:ba:32:01:70:ef:a4:eb:ef:ae:9b:ba:6c:96:da:5d:81:
e1:fe:ec:97:47:a6:8f:ce:be:12:1b:0b:bd:5a:10:50:93:d2:
4c:57:59:72:13:e9:f9:50:80:0d:d0:b1:3f:b6:60:19:71:83:
cf:75:f4:ad:65:31:24:7c:0e:6c:5c:bc:06:7b:08:b1:82:43:
43:e3:1a:5c:d5:ef:97:99:8b:6b:3e:a2:7a:0c:88:57:bf:85:
1e:8e:75:c0:04:59:c7:5b:14:7c:87:c7:31:eb:35:02:0b:b5:
6d:12:d3:f5:a5:a9:9e:18:78:75:39:ef:af:ab:92:fe:bf:b3:
ff:c6:39:55:bc:0d:67:68:3d:bd:1a:45:6c:06:d0:c6:be:9c:
bd:04:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:58:14 2025 by rpki-client