Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_dne30R3iunu9DcjUOcWc-Nxh4.roa
File: F_dne30R3iunu9DcjUOcWc-Nxh4.roa (raw, json)
Hash identifier: 50CLj0tgoXiINvdBcILiM7gBUD8lCvgM03b8SGElqAU=
Subject key identifier: 17:F7:67:7B:7D:11:DE:2B:A7:BB:D0:DC:8D:43:9C:59:CF:8D:C6:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7587CFEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_dne30R3iunu9DcjUOcWc-Nxh4.roa
Signing time: Fri 25 Mar 2022 10:10:27 +0000
ROA not before: Fri 25 Mar 2022 10:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1971834858 (0x7587cfea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 10:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17f7677b7d11de2ba7bbd0dc8d439c59cf8dc61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:5e:65:fe:a7:42:5a:90:75:4d:19:bf:e7:
06:07:bc:95:12:80:5e:30:df:62:6f:bb:47:a7:f4:
0d:aa:6f:cf:fe:6d:95:ef:b9:c4:d7:7a:9a:74:13:
d2:06:3c:95:8f:e1:bd:1d:1e:38:ac:f9:ab:ce:ea:
e6:ee:e7:28:a3:04:f7:6f:a1:98:de:14:a4:85:96:
4c:57:84:36:e9:26:2c:bf:00:5f:0a:90:70:2f:62:
41:b4:0b:2e:11:ae:52:f2:16:42:40:3b:a4:c9:19:
53:eb:56:f5:30:de:6c:2a:c7:40:96:d7:ee:fa:67:
21:27:80:02:50:14:ae:15:6e:b9:7a:75:7c:08:1a:
30:3b:84:79:f5:8c:3e:91:b5:2a:bb:63:94:30:06:
b6:e9:d3:0d:e7:39:ed:18:ca:85:c6:d0:5d:30:71:
d8:31:fd:63:dd:dd:e9:fb:4d:76:a2:61:7e:b7:6f:
fa:17:17:50:11:b1:cc:51:e5:02:56:4f:5e:40:6d:
e2:7b:1e:69:a6:a8:cd:4f:24:ed:8c:a6:0a:5f:81:
9b:7e:e6:92:6d:a7:29:c1:a2:ae:67:ba:79:c7:c9:
4c:79:7e:1d:0d:8e:ca:4f:6c:5b:98:e0:31:43:47:
69:3c:ae:b0:d4:7a:b4:51:27:a4:07:93:70:25:6d:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:67:7B:7D:11:DE:2B:A7:BB:D0:DC:8D:43:9C:59:CF:8D:C6:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_dne30R3iunu9DcjUOcWc-Nxh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:ae:eb:54:d5:7b:df:22:17:ae:33:47:47:60:49:63:48:60:
54:0e:4a:b8:50:b7:58:94:37:9e:08:e3:9a:c1:81:1b:c8:8d:
75:da:b5:d2:00:02:dc:dc:a9:1f:d5:71:8b:a9:25:2d:ad:55:
f4:d0:33:cb:3e:91:ea:58:68:c7:e6:80:a4:c1:04:0a:57:31:
e4:f0:bf:0c:76:0e:b2:15:b7:66:ed:e0:91:10:86:f4:3e:9e:
05:7b:c4:55:6f:54:59:8b:36:c5:45:b8:c8:10:38:12:c4:c5:
f6:14:7d:15:47:47:18:1f:50:d9:1d:e0:1f:94:6d:35:3c:dc:
23:30:1e:67:6a:0e:6f:89:a7:96:8c:59:3b:a8:2e:79:29:d0:
28:3d:db:c1:21:f6:76:71:60:53:9a:d0:b3:e4:cf:2b:e6:f6:
91:88:71:6f:00:e3:7a:fe:85:c3:5a:28:9e:69:ed:8d:41:3b:
e5:49:5e:d1:ba:94:b7:0c:3d:81:52:fe:ec:8b:9a:96:a6:d1:
83:c2:58:07:b3:ee:f1:ff:e4:cb:07:8f:4a:7b:26:35:4a:c8:
73:03:19:0b:fd:59:77:0e:89:07:bf:82:0c:12:bd:e7:43:bd:
23:64:3d:fe:a8:6c:23:73:75:f2:dd:9d:40:a8:a4:c6:69:49:
7d:9d:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:16:04 2025 by rpki-client