Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhZSE9dvlfER3Z6eiCzD9HSns4w.roa
File: FhZSE9dvlfER3Z6eiCzD9HSns4w.roa (raw, json)
Hash identifier: upt9QrB0z/RlNkJvhTNAg531Ok5GmQAvlvNOH4NDLvA=
Subject key identifier: 16:16:52:13:D7:6F:95:F1:11:DD:9E:9E:88:2C:C3:F4:74:A7:B3:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018632A745012A346849B4272D5DC02460EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhZSE9dvlfER3Z6eiCzD9HSns4w.roa
Signing time: Wed 08 Feb 2023 20:11:08 +0000
ROA not before: Wed 08 Feb 2023 20:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:a7:45:01:2a:34:68:49:b4:27:2d:5d:c0:24:60:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 20:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16165213d76f95f111dd9e9e882cc3f474a7b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:71:38:89:d0:e4:4e:bd:0d:f8:70:af:c9:
2a:26:21:6e:51:53:4a:cc:6c:e3:46:2f:28:17:a8:
4b:d0:8d:c2:7d:e3:06:49:8d:d9:13:b8:6f:36:fe:
23:87:9f:74:82:77:a5:5b:3a:c4:28:c9:3b:56:6a:
e6:e5:7f:bb:ad:aa:66:e3:3e:e5:f3:60:ae:ce:e8:
88:65:2e:a0:50:04:cb:2c:fb:e9:64:25:93:07:4f:
93:af:97:a0:00:89:12:49:e1:f0:e8:1c:cf:20:09:
bb:cb:0a:95:74:0f:6f:54:b1:17:3c:ac:f2:6c:28:
41:15:ef:09:50:85:56:61:91:56:15:19:67:84:e9:
24:14:50:0a:08:19:9b:d0:44:fe:6b:70:2b:7f:40:
08:d6:e9:02:c7:ac:a3:00:15:69:ad:a6:58:84:a8:
32:27:1c:75:26:44:d5:91:df:e1:41:b1:60:4a:dc:
02:47:fd:39:70:bd:dd:2f:ad:8a:0a:1d:18:c3:26:
42:24:1f:9c:ad:bd:52:91:b1:cf:26:28:79:3c:28:
da:fb:aa:f5:79:83:30:47:6c:82:61:08:2a:20:1c:
77:e2:7d:47:8d:d6:f4:4f:a4:2a:44:40:b2:86:cc:
8b:1a:5c:80:d6:e2:82:20:b9:0a:89:9f:d7:1d:c6:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:52:13:D7:6F:95:F1:11:DD:9E:9E:88:2C:C3:F4:74:A7:B3:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhZSE9dvlfER3Z6eiCzD9HSns4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:ba:08:35:ab:9c:a2:91:3b:7e:ec:4a:9e:35:d1:95:bf:12:
6d:76:83:d3:03:31:34:dd:68:7c:b0:5d:82:9f:47:6e:0e:19:
31:e3:41:9d:c3:4c:fb:1f:f6:5b:ec:72:1c:be:3b:b3:9e:12:
fa:9a:d8:a4:99:67:10:18:d5:f6:95:a9:ed:57:d0:04:66:86:
de:6b:2d:51:34:d4:12:08:69:5e:ec:0f:58:77:61:ea:5c:70:
09:87:18:bb:24:8f:19:17:88:97:05:d8:42:6e:b7:30:3d:c9:
6d:74:4a:92:03:93:dd:a7:e9:da:c4:ca:20:89:b8:6c:bd:31:
5b:bb:15:86:6e:ea:4a:55:5b:fc:af:aa:84:aa:ae:da:8b:eb:
6c:bb:a9:c6:a3:d0:c1:72:6b:36:da:a2:30:f0:5d:16:4c:73:
d4:df:5c:4b:85:37:d9:d2:5f:23:3b:59:3f:95:88:66:5c:7a:
3a:10:39:fe:97:d0:3e:28:07:e7:df:0a:7e:24:0c:62:2e:6b:
50:2d:6a:57:0b:96:e7:08:87:d6:02:5b:03:db:50:59:7d:bb:
85:6f:73:14:e9:66:17:88:6b:2b:50:b6:53:07:1f:0c:a5:48:
0b:33:e2:a8:38:47:83:d0:43:f5:a5:6f:bb:08:57:17:f1:75:
c0:42:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:56 2025 by rpki-client