Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ff7hJjUj9ywXtX5BHSesl7w5Hrg.roa
File: Ff7hJjUj9ywXtX5BHSesl7w5Hrg.roa (raw, json)
Hash identifier: lzzwwf+V/PIJZgDsjZE7qV8HAoudCty5VfDkHjFZwB0=
Subject key identifier: 15:FE:E1:26:35:23:F7:2C:17:B5:7E:41:1D:27:AC:97:BC:39:1E:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 788615C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ff7hJjUj9ywXtX5BHSesl7w5Hrg.roa
Signing time: Tue 05 Apr 2022 01:11:43 +0000
ROA not before: Tue 05 Apr 2022 01:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022053314 (0x788615c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 01:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15fee1263523f72c17b57e411d27ac97bc391eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:fc:81:94:21:93:be:2d:0d:ba:cf:c9:f6:
0e:65:47:f1:4a:5c:a5:b4:b8:33:3f:96:bb:9e:3c:
8d:0d:22:c4:47:56:11:0d:2e:7a:ab:de:49:8b:d1:
5a:0b:21:54:80:67:a8:30:61:13:91:68:d4:7f:16:
d5:48:9a:05:22:ec:32:d9:64:dd:16:71:ca:3a:92:
85:4f:a5:46:14:a9:8c:5e:8a:d2:e1:e4:3e:ca:9f:
69:c5:cc:ff:70:a8:bc:cc:93:51:90:d3:28:7a:4a:
30:02:99:b4:eb:21:4f:c4:b3:45:0d:2a:f5:c6:e4:
d2:cb:a0:91:49:b5:d9:bc:fe:5e:09:46:7c:ca:e5:
4a:02:6c:f9:a3:b8:7b:8a:26:55:f9:19:0e:0c:24:
3d:26:81:b9:96:c5:28:35:80:f3:e2:2f:79:dd:de:
14:2c:c9:ff:2e:ed:96:ca:7e:ad:e7:31:f0:43:be:
67:e6:d1:a9:35:7a:3c:91:85:8d:85:ad:bb:11:38:
37:77:81:3f:43:68:47:fd:43:60:ab:44:75:5f:b0:
f2:cb:34:3e:7b:30:c3:47:21:76:63:7d:b3:d5:28:
1c:b2:38:46:31:eb:f0:cc:89:6b:d7:a3:52:a8:56:
15:e6:fa:41:38:5a:92:fb:ea:45:39:98:cc:3f:d8:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:E1:26:35:23:F7:2C:17:B5:7E:41:1D:27:AC:97:BC:39:1E:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ff7hJjUj9ywXtX5BHSesl7w5Hrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:da:a6:e9:e0:b6:a7:d0:7e:e9:02:9c:f4:82:54:60:b4:34:
70:b0:be:74:58:36:b8:e6:53:99:14:5c:55:07:1b:ff:19:bf:
91:82:a3:ab:9c:ca:a4:c6:65:5e:3c:32:c7:20:ce:12:b1:d2:
2b:3d:78:7d:ae:3d:90:d8:db:a6:aa:9d:c3:9d:35:e1:25:ea:
df:8e:85:db:6b:be:2d:93:6e:fa:ad:79:60:97:16:c2:00:a6:
55:1d:94:ec:59:73:6f:4f:01:1b:48:ec:b4:86:c7:34:36:70:
5c:02:a9:ec:8b:38:8d:13:87:0a:2f:47:82:43:e7:9f:74:22:
39:ef:64:87:94:10:63:bd:5d:76:4b:02:8d:ba:5d:88:22:b6:
41:f5:ce:6f:1d:3b:a9:7c:f1:a7:b7:02:35:7d:9f:f6:e5:42:
f2:39:91:4e:64:8a:9d:0f:57:d7:bb:bf:f6:08:92:46:3e:8e:
39:69:97:86:9c:a8:76:19:9b:9c:00:44:b0:ea:8a:86:c8:e2:
81:49:ce:4a:d4:91:f5:4a:d7:92:45:d7:7c:af:28:86:c9:61:
45:30:4d:68:96:b2:7a:d3:78:af:cc:b3:62:63:99:74:d1:c8:
b5:b1:2d:e4:09:00:1e:d4:a2:48:c0:ca:a3:cd:65:da:d1:3f:
2c:00:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:32 2025 by rpki-client