Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhhkH2XBCu2D-bev-zFxNdEx0U4.roa
File: FhhkH2XBCu2D-bev-zFxNdEx0U4.roa (raw, json)
Hash identifier: 3rJD5DtCllptG01s9/FJmMvfx2PaQszZq8K5LZjGIa4=
Subject key identifier: 16:18:64:1F:65:C1:0A:ED:83:F9:B7:AF:FB:31:71:35:D1:31:D1:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AD02D0F7481940A660BE5E79DAAAA8BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhhkH2XBCu2D-bev-zFxNdEx0U4.roa
Signing time: Wed 17 Aug 2022 18:13:39 +0000
ROA not before: Wed 17 Aug 2022 18:13:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:02:d0:f7:48:19:40:a6:60:be:5e:79:da:aa:a8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 18:13:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1618641f65c10aed83f9b7affb317135d131d14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:d3:63:e0:ff:78:85:3c:fb:24:a2:5d:ff:
65:33:83:03:98:13:0a:06:c5:12:a0:4a:11:ef:e9:
f1:38:5e:eb:1f:7a:0f:0f:3b:ef:a8:36:ce:5b:db:
57:12:f4:5c:06:cb:27:bf:68:5e:47:9f:d1:e3:d1:
ff:7c:fb:2a:01:8e:25:df:40:14:67:bb:b0:db:c3:
a7:f0:80:9c:23:cb:4e:5e:68:dc:ee:4b:2a:92:94:
f5:ee:a1:c4:f3:35:84:d0:f7:2c:23:1c:8c:d8:7f:
41:c7:ff:9a:e3:27:ba:88:24:5b:0b:0a:79:97:c0:
0a:eb:59:c9:53:4b:9c:2f:05:9e:8a:e5:99:28:00:
6f:d4:2e:71:50:30:4b:08:06:b3:c5:93:2f:98:67:
47:7e:08:9c:94:34:1c:f8:83:69:7a:6e:4d:e3:fe:
1f:82:da:5a:0d:45:6a:49:ee:6c:65:13:83:95:5a:
fc:cd:01:99:2d:be:fb:ee:37:3b:a1:fc:06:c9:34:
56:5e:9a:85:5e:33:96:2b:ad:90:84:78:0e:75:61:
ac:a1:40:86:d9:b1:e6:7f:fd:fe:72:33:8f:5d:a8:
30:34:40:4c:6a:90:50:61:8b:72:b6:f5:72:2c:d1:
1f:ec:34:15:62:5c:e2:27:4b:89:38:ff:90:2a:64:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:64:1F:65:C1:0A:ED:83:F9:B7:AF:FB:31:71:35:D1:31:D1:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhhkH2XBCu2D-bev-zFxNdEx0U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:d6:d6:d0:cf:2a:66:e4:96:3d:71:19:6e:6b:9c:f5:da:8f:
96:ed:c6:b1:3e:e8:d0:08:2d:90:90:45:3d:8f:bf:35:1e:c6:
51:92:95:53:91:70:20:68:5c:01:32:45:12:df:87:86:3f:49:
53:b2:2f:3d:1c:62:55:75:f5:e0:2d:cc:b2:00:60:07:0a:2c:
3e:28:3e:ee:16:16:e7:1e:fd:05:d3:67:d4:43:8f:de:54:e0:
dd:0f:db:c1:04:04:71:8a:2d:71:bf:44:79:53:f5:1f:77:72:
83:52:b8:8a:55:4d:7b:0d:bd:3a:4c:fc:8c:f7:24:51:de:bb:
ca:23:e2:00:bd:6e:ce:f4:be:86:8d:64:1d:d8:39:8d:46:b0:
57:8c:72:0b:e2:a7:8e:da:15:fa:8f:1b:36:7c:2b:11:10:8d:
2c:6c:29:f8:6d:c0:61:4d:dc:b2:30:c4:a0:8f:75:45:df:3a:
e8:fb:4e:14:89:25:ba:71:bf:0f:89:f3:2b:c9:a5:69:13:3f:
a7:07:5a:38:1f:fe:04:23:91:f4:f8:04:ca:ab:ff:0a:09:d2:
cd:3e:1c:07:7c:0a:47:62:57:97:6b:00:a7:1e:31:42:fb:61:
12:58:d1:b8:40:11:99:a1:01:80:22:c6:75:38:fb:dc:51:5d:
91:67:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:04:56 2025 by rpki-client