Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fh5dRN1jnIPShXIqEhRENXxXW5Y.roa
File: Fh5dRN1jnIPShXIqEhRENXxXW5Y.roa (raw, json)
Hash identifier: sV0pvzMzlXHvlShkWzgmCEQQk/KHtUB9oaOquzJXjYk=
Subject key identifier: 16:1E:5D:44:DD:63:9C:83:D2:85:72:2A:12:14:44:35:7C:57:5B:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D9CE051F40316C692F04F9CD3846D968
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fh5dRN1jnIPShXIqEhRENXxXW5Y.roa
Signing time: Sat 03 Dec 2022 21:04:28 +0000
ROA not before: Sat 03 Dec 2022 21:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:d9cd:ea60/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:ce:05:1f:40:31:6c:69:2f:04:f9:cd:38:46:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 21:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=161e5d44dd639c83d285722a121444357c575b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:63:b6:3b:2f:7d:c9:a9:30:c0:f6:5a:c4:
f5:68:a3:a6:a7:e3:df:81:e5:aa:35:7b:41:bc:ca:
ad:8b:2c:8f:e4:e6:3d:4b:62:c9:ee:d6:25:e9:0b:
b7:75:28:fe:a0:8c:e1:ac:8b:49:0e:7d:0d:ca:d2:
c9:c8:eb:e8:a8:f7:64:1a:bb:ad:a2:1a:25:36:3a:
76:03:81:2f:f6:6c:e8:61:c5:ab:cd:bf:cd:94:f9:
fb:8b:d2:f4:c4:6b:d4:49:13:ff:a1:8f:98:57:bd:
45:5f:a2:95:2f:25:dd:db:d2:7e:21:85:9d:b6:68:
3c:6b:2b:ee:65:e5:03:6a:77:77:e8:9b:6a:9c:84:
d2:cf:26:89:d1:4b:91:0e:20:f9:ba:f9:42:5f:ee:
a5:f5:cb:4c:4a:24:81:f6:ee:83:8c:68:51:4c:bb:
4d:18:5c:fb:8d:9b:db:8f:25:95:41:ec:43:45:6b:
5b:20:71:1c:9e:b9:55:9d:10:de:d0:95:e0:d2:c6:
0d:7f:0e:b1:1b:62:13:22:27:a7:14:4c:03:90:3f:
a5:81:81:94:9c:a7:b9:9f:f1:09:45:b0:54:05:3a:
05:12:f7:24:b5:2a:4b:af:d6:c4:13:9d:b7:39:e1:
ed:a9:58:29:99:78:c4:16:c1:e3:26:e1:34:98:94:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:5D:44:DD:63:9C:83:D2:85:72:2A:12:14:44:35:7C:57:5B:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fh5dRN1jnIPShXIqEhRENXxXW5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:0c:5c:69:5a:3c:b7:48:42:6a:7b:af:e1:39:e1:97:d0:c1:
d2:dd:37:db:ab:2f:13:2e:d1:36:02:7a:ab:3e:7b:72:bb:a2:
c7:64:15:65:5c:37:e5:3e:59:6e:c2:3a:26:e3:3c:47:98:17:
29:44:27:7a:cb:3c:ab:76:34:72:67:db:89:72:c5:69:8c:b9:
82:c5:18:81:59:67:9e:d0:d4:35:7c:25:37:12:20:6e:0d:00:
60:c4:13:72:06:07:a0:ef:40:25:44:7f:cb:7d:47:80:ef:aa:
a8:c5:55:4a:8d:67:9e:63:df:26:3d:44:0f:c9:cc:6c:2e:dc:
d8:00:6b:e6:9e:96:c9:ff:15:1e:d1:94:f9:e1:37:e7:aa:b1:
52:ce:02:e5:9f:ac:6c:c3:93:f8:0b:c5:80:4e:0c:d5:05:e8:
0d:1c:a2:b7:6e:8d:0b:6d:a6:51:dc:91:67:44:a2:a7:61:47:
a3:41:79:03:b4:a9:28:bb:2c:f4:e4:98:70:cd:bc:38:38:1c:
fa:64:d6:2c:22:25:26:8d:d2:0d:71:e0:0f:cb:a2:07:a1:01:
05:68:b1:61:5b:27:e1:9c:8d:47:fe:24:e0:ec:69:66:cf:ce:
d0:a7:5c:c7:4d:2a:85:be:fc:18:36:e0:e4:2e:9c:52:13:8c:
72:dc:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:28 2025 by rpki-client