Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FjVM6_ArIyvT6H0gJsIYUg9xGEw.roa
File: FjVM6_ArIyvT6H0gJsIYUg9xGEw.roa (raw, json)
Hash identifier: s2yLrWa7PtuWUkBPnQ/xLfP8GzBRC+YrjkCqGfVlLPg=
Subject key identifier: 16:35:4C:EB:F0:2B:23:2B:D3:E8:7D:20:26:C2:18:52:0F:71:18:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66DCB4E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FjVM6_ArIyvT6H0gJsIYUg9xGEw.roa
Signing time: Tue 01 Feb 2022 08:08:27 +0000
ROA not before: Tue 01 Feb 2022 08:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725740256 (0x66dcb4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 08:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16354cebf02b232bd3e87d2026c218520f71184c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:39:e0:30:a3:2d:4e:a3:0e:df:38:99:fb:
e4:53:e2:e7:3c:e5:81:1e:1f:c2:40:54:3f:62:00:
79:09:8f:5f:fd:c7:d7:a1:b1:fd:8a:2f:8a:e7:98:
c6:ee:c1:77:5c:da:b2:5c:49:8d:20:4a:dd:a7:50:
9c:68:43:54:c9:f7:08:d3:5b:61:67:8f:2e:8d:0e:
e8:68:0d:85:a5:d6:30:6e:9c:f2:a9:9d:b7:11:71:
e4:09:db:4c:21:41:c4:7a:f9:0f:c2:47:fc:e6:ce:
6b:9e:76:eb:2b:85:fd:e4:d0:21:c0:b6:4f:ae:f1:
91:d4:fe:a4:78:46:d6:47:8c:be:6d:47:b7:79:b7:
49:96:78:5e:f3:f9:df:c8:5b:5e:21:43:7b:82:40:
56:33:ec:af:2e:50:ff:db:4b:d8:4d:6a:66:d3:10:
55:05:a1:e9:e5:83:db:da:be:4d:2e:7f:1f:ba:fb:
43:9b:0e:a7:c3:87:df:45:a4:f8:f8:3b:89:2c:e3:
0e:c1:0c:21:bf:68:45:8b:e2:b2:35:7c:b8:ac:fc:
8b:c4:fe:f9:92:ac:f3:a0:e9:27:58:73:41:b1:e0:
44:c1:d1:35:2a:9e:21:a6:16:12:b5:7c:1f:60:98:
32:c7:a3:00:4c:db:27:b0:95:b4:69:d5:08:c9:58:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:4C:EB:F0:2B:23:2B:D3:E8:7D:20:26:C2:18:52:0F:71:18:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FjVM6_ArIyvT6H0gJsIYUg9xGEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:db:b6:57:71:91:a7:3e:97:4f:6d:69:4e:36:0f:9a:61:db:
04:ae:aa:7d:6f:2c:4b:b8:ef:78:56:35:e6:e5:4e:09:37:77:
ea:0f:ab:9b:4f:2d:ca:ff:e7:b9:9e:4b:a9:e6:1a:4b:4a:a4:
47:44:73:af:74:e2:d2:53:9a:0e:00:bb:3b:aa:01:45:cd:ec:
61:f4:48:a5:1a:09:12:3c:72:69:94:66:68:0b:54:4c:10:6e:
4f:7a:8c:8c:13:8c:c1:20:44:40:44:9c:96:f9:40:71:5f:65:
40:8c:0d:18:45:92:a4:6e:03:34:06:b9:0b:26:e0:84:5f:3f:
25:49:2a:15:74:cd:e8:ba:96:5a:63:89:56:c0:4c:d3:c1:0c:
f3:8b:ba:b7:28:f7:6e:2c:bc:56:52:6b:75:6d:01:ff:c7:5f:
fa:3f:4f:3f:bc:fb:3e:ce:16:4f:7b:32:5d:55:f4:a5:04:ff:
23:da:32:21:19:ef:9e:4f:e2:b2:1c:23:d3:19:0d:37:2b:ce:
98:f3:fd:93:98:1e:92:aa:19:d0:34:6c:fb:a0:de:1f:33:93:
96:37:60:77:09:a2:51:fc:e8:6f:8e:04:85:90:b9:3a:12:f6:
fb:86:e4:e0:0b:28:f5:d2:48:44:46:19:8b:e9:f9:6b:c8:8f:
31:83:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:05:48 2025 by rpki-client