Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FlIIpsSDGDux9wIQ_IofA95Lorw.roa
File: FlIIpsSDGDux9wIQ_IofA95Lorw.roa (raw, json)
Hash identifier: Ce7YLviQBqb4xzUvxt2VbeSYZkLAAQhxGNObDmD71/E=
Subject key identifier: 16:52:08:A6:C4:83:18:3B:B1:F7:02:10:FC:8A:1F:03:DE:4B:A2:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018664DB9529981ADCCF5479A793879D286A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FlIIpsSDGDux9wIQ_IofA95Lorw.roa
Signing time: Sat 18 Feb 2023 14:09:17 +0000
ROA not before: Sat 18 Feb 2023 14:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:db:95:29:98:1a:dc:cf:54:79:a7:93:87:9d:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 14:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=165208a6c483183bb1f70210fc8a1f03de4ba2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:57:e1:da:30:78:b5:01:66:ec:e3:05:26:
1a:4e:1c:d9:80:d1:e9:94:91:db:fa:cf:b5:cc:9e:
5f:d1:31:4f:a5:ec:1b:93:be:2c:c6:63:09:1d:24:
24:0e:ef:18:8e:c6:c8:11:64:7a:b3:07:72:9c:9d:
c1:0c:40:18:08:7f:2a:7a:da:0d:33:89:83:d1:84:
3c:14:58:d4:80:1a:06:25:81:71:30:63:ed:e9:d1:
70:b1:f7:70:e2:33:44:b1:ae:39:45:c8:58:2b:ce:
c1:7a:98:68:8f:11:1d:e6:b0:52:b7:61:5d:4c:ce:
c0:37:15:48:9d:63:c6:dd:bf:d5:10:ed:45:62:5c:
58:ab:16:0c:af:e9:8d:39:cc:29:60:66:6f:b6:96:
c8:fb:78:f2:7f:e6:f1:e6:b2:07:f6:16:ad:74:73:
84:0b:75:86:1b:19:c1:1f:e1:99:c7:97:04:54:fd:
16:ff:e8:0b:78:0b:79:f3:bf:a7:a8:2b:fa:2c:db:
7a:ad:cf:c4:43:e9:e2:f3:d4:c8:95:04:ec:70:a8:
46:bb:fb:fe:47:3d:2f:ee:44:a0:0f:38:3f:66:1a:
99:ba:37:20:47:8d:a7:3a:46:9d:9e:21:3e:51:6c:
d2:a2:aa:1b:ca:d5:4d:f2:bc:f5:51:ac:3e:a9:51:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:08:A6:C4:83:18:3B:B1:F7:02:10:FC:8A:1F:03:DE:4B:A2:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FlIIpsSDGDux9wIQ_IofA95Lorw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d0:84:9d:a5:a1:f5:61:66:0b:c7:36:8b:0a:58:0c:f2:79:
4d:db:f0:c1:86:8d:aa:74:bf:11:e5:bc:7e:06:40:81:8a:35:
7a:b5:56:af:28:1b:6f:61:80:be:d4:13:b3:71:10:26:01:f6:
0a:02:8c:a5:0e:92:50:02:70:d1:c0:40:55:da:69:7f:05:9b:
bd:37:72:22:1d:26:1f:d1:e5:f4:d5:8f:06:2e:d0:54:33:f3:
4c:b8:6d:c6:04:24:93:a7:cb:74:32:79:5b:62:3c:05:e1:63:
3f:1f:5a:5a:1a:c8:10:ec:8f:c2:d8:11:63:47:81:e2:e5:7f:
a5:cc:42:b0:da:ca:8e:da:d2:7b:9e:9f:ce:0f:a0:d1:0b:7e:
2c:85:ec:06:97:69:21:dd:49:d1:80:8b:41:05:b2:8e:c7:0b:
7a:ae:4a:5f:6a:a7:0b:d9:fe:a9:07:25:a4:09:0b:48:df:43:
19:0f:4c:ab:b9:b5:dc:54:df:2d:93:1f:40:01:05:e8:6e:cd:
c0:61:d6:4c:8e:30:cf:63:1a:20:f1:7e:53:c3:37:d2:6f:a1:
98:43:e2:42:4c:7b:d9:27:e5:35:21:7e:21:d3:5a:ff:c2:50:
31:10:42:27:89:0c:8f:24:ac:37:48:53:7d:09:14:e0:c6:5e:
39:d5:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:25 2025 by rpki-client