Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfA3EHLCfl3oOkNVKdx0_JxlYfM.roa
File: FfA3EHLCfl3oOkNVKdx0_JxlYfM.roa (raw, json)
Hash identifier: Xysm/8edouMq5zNpHBBXhvRHTIRs6o02Lg4pXkd62X4=
Subject key identifier: 15:F0:37:10:72:C2:7E:5D:E8:3A:43:55:29:DC:74:FC:9C:65:61:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FDA1299
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfA3EHLCfl3oOkNVKdx0_JxlYfM.roa
Signing time: Sat 30 Apr 2022 11:10:48 +0000
ROA not before: Sat 30 Apr 2022 11:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144998041 (0x7fda1299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 11:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f0371072c27e5de83a435529dc74fc9c6561f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:4e:ac:41:5f:06:85:0a:e4:c1:b0:95:0b:
7f:6d:66:7b:30:e3:43:ae:cc:28:10:5b:99:40:fc:
bf:df:20:d5:7d:e6:44:e8:81:84:61:dc:fd:ff:7e:
bc:da:44:d1:5a:26:c3:e1:09:b6:0d:e4:9e:72:e0:
61:f7:a1:8a:a6:fd:66:b8:73:ad:9c:ae:6d:03:1c:
7b:7b:35:94:56:3c:e4:e0:35:97:f1:f4:a7:26:60:
1a:30:13:a9:44:8b:34:e0:67:ee:1c:f4:19:dd:db:
ca:5e:ed:be:16:b3:de:c2:ed:36:64:d2:2a:33:5c:
4c:c9:d0:e3:88:aa:90:69:c9:c1:ec:94:76:24:25:
73:45:a1:3e:8f:63:c5:40:48:64:2a:8f:ab:90:4e:
4a:e1:db:82:01:f2:4e:fa:f5:66:ae:0f:b6:52:7a:
d7:54:91:60:66:08:98:51:8b:68:12:49:30:f3:60:
a9:6b:8c:29:21:e0:4c:19:81:d9:83:2f:ab:10:db:
3a:26:81:00:dc:93:0f:9a:2c:86:c0:78:fb:48:dc:
cf:da:71:e1:88:1d:71:e3:de:d3:69:c0:37:a7:3e:
37:8d:20:69:e4:96:e0:dd:ae:e8:7f:4d:a1:df:12:
0c:42:47:b1:28:2f:5a:50:af:13:77:70:a2:fc:7a:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:37:10:72:C2:7E:5D:E8:3A:43:55:29:DC:74:FC:9C:65:61:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfA3EHLCfl3oOkNVKdx0_JxlYfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:7f:d9:fa:2d:f4:49:ca:82:e9:6a:a0:c1:ac:20:fc:d1:56:
11:58:b8:ae:c1:ad:d0:98:f8:c7:17:96:da:88:1e:b2:94:62:
d9:c6:7c:5f:33:fb:bb:be:f1:71:53:e8:70:03:79:2f:60:8c:
ce:c0:96:b7:54:48:5c:21:3b:75:e4:8e:b9:76:49:4f:e3:d1:
17:b4:52:a8:0b:b4:12:23:97:a1:1b:b6:e0:cd:ab:e8:9a:11:
cd:7a:29:23:1a:82:b2:2c:22:82:28:07:b3:2a:6a:f1:90:48:
d6:fc:1a:9d:43:39:31:0e:bb:21:dd:83:d6:b9:20:43:c5:5f:
51:7a:9d:2c:0f:75:3a:95:87:9f:01:cb:9a:66:f1:6c:61:ca:
bc:bd:8d:70:22:4e:6d:15:dc:85:8d:6e:2e:2a:40:9b:6a:f5:
88:4b:e2:b7:45:3b:f5:18:ab:82:58:4e:05:f3:6c:92:01:39:
f1:fa:74:81:f2:d4:62:78:04:59:26:76:c5:ea:ef:3f:2c:d1:
85:88:5b:80:42:5a:17:2e:f0:b3:51:f9:46:1e:c7:3d:7f:66:
cf:50:2e:20:cd:36:b1:1b:2f:ab:1e:bf:d6:19:98:45:64:2e:
b2:81:ab:c9:4f:a8:a0:c4:a9:70:60:76:e5:b9:c7:0e:88:d9:
af:1f:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:21:01 2025 by rpki-client