Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FflnDINSiqS2C1cGo2oqis885PM.roa
File: FflnDINSiqS2C1cGo2oqis885PM.roa (raw, json)
Hash identifier: ncSSqkSO/FCJTyjgzY+AnjvH4+c080pbt9Pqf2ppf1s=
Subject key identifier: 15:F9:67:0C:83:52:8A:A4:B6:0B:57:06:A3:6A:2A:8A:CF:3C:E4:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842A859FD80B092D3C8064794D21ED8377
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FflnDINSiqS2C1cGo2oqis885PM.roa
Signing time: Sun 30 Oct 2022 20:11:51 +0000
ROA not before: Sun 30 Oct 2022 20:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2a:85:9f:d8:0b:09:2d:3c:80:64:79:4d:21:ed:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 20:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f9670c83528aa4b60b5706a36a2a8acf3ce4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:64:b1:2e:47:bd:20:12:8b:0e:75:f3:c8:
80:7a:fd:5f:d4:37:88:49:20:63:f6:c6:ee:07:94:
e4:6d:9b:28:f7:2d:69:4c:39:95:10:09:ea:82:b7:
5a:5a:f3:a9:ef:bd:35:3b:eb:10:36:dc:54:6d:7c:
e6:8c:da:c8:d5:28:25:44:27:db:d3:be:cf:0a:9d:
42:01:e5:ec:a1:14:90:cf:5c:fa:7d:ea:71:bd:32:
c4:7b:40:7c:8c:94:da:e6:b1:eb:e1:bf:c1:b6:aa:
37:8f:95:31:7d:56:92:d4:94:6e:0f:f8:80:a5:0b:
a4:5a:70:8a:9c:7e:84:12:f1:de:bf:9a:54:9b:d4:
a9:a8:cb:db:72:49:cc:be:a8:81:77:a8:ea:39:cf:
73:a9:d7:1b:cb:19:5a:1d:3b:6a:39:4b:b0:45:2d:
f3:d1:0d:0c:f7:91:eb:5d:e7:d1:b4:e5:7b:12:df:
8c:91:9b:0a:0b:26:be:ef:3c:6b:fb:9a:86:28:73:
09:db:6b:2b:ec:1d:b2:a0:0a:80:a0:3f:fb:98:45:
e9:ce:93:9c:7b:0d:ab:ee:5f:bd:32:70:1a:57:ef:
7f:1f:b1:65:84:c7:08:d9:99:c3:48:ba:c2:55:80:
6f:6b:6e:53:9a:10:51:f4:bd:4c:07:91:90:2e:17:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:67:0C:83:52:8A:A4:B6:0B:57:06:A3:6A:2A:8A:CF:3C:E4:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FflnDINSiqS2C1cGo2oqis885PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:a8:bb:ed:9b:ad:96:84:9d:14:95:a2:44:1b:57:d8:ee:e3:
7f:0c:59:ca:b3:77:21:03:3d:67:00:e8:a4:43:42:0b:4c:19:
80:3d:7e:d2:dd:9b:62:f8:3d:b3:58:a1:f6:96:cd:20:e5:2c:
29:b0:05:0f:42:b9:16:36:15:7d:17:e2:35:45:80:73:74:ed:
a7:3a:b6:11:8f:36:da:ae:56:00:9c:09:35:89:eb:0d:8d:ba:
75:a0:c1:58:a9:a6:d8:a3:12:fb:9e:3e:36:0c:3e:74:07:f8:
59:3f:d7:0f:fe:9c:4f:5e:5e:8a:99:e9:a3:73:d8:b9:39:46:
46:c9:f0:4c:a6:1c:90:7f:9a:55:c2:0b:42:98:e5:ea:c0:a8:
3c:68:4b:7f:5f:a3:87:4e:99:44:e9:22:da:43:d3:c7:2a:2b:
89:40:59:bc:c2:69:fe:e4:87:a8:e9:fe:e2:fb:aa:dc:37:a1:
c1:22:0e:f1:40:cc:69:9e:ca:12:01:c7:46:a4:c8:d6:38:94:
b6:8d:e6:89:0e:5a:bc:a6:7b:79:1c:ad:3c:4d:f7:1c:24:ac:
77:92:48:27:dc:b9:1b:2a:12:66:59:32:65:0a:c1:ec:52:0d:
b7:1b:cc:34:ef:d4:b7:6c:79:34:36:9c:7d:2e:4d:6e:65:70:
87:78:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:40:47 2025 by rpki-client