Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FoHYL1Lx_Y9JZMZLJDqtiG7ioMo.roa
File: FoHYL1Lx_Y9JZMZLJDqtiG7ioMo.roa (raw, json)
Hash identifier: xJp38fmxZD2V2ZBNzrl3suANYIHFoFSeKWvZPAoZQiI=
Subject key identifier: 16:81:D8:2F:52:F1:FD:8F:49:64:C6:4B:24:3A:AD:88:6E:E2:A0:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D92A25214A44D5BE018627E0584F6600
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FoHYL1Lx_Y9JZMZLJDqtiG7ioMo.roa
Signing time: Sat 03 Dec 2022 18:05:28 +0000
ROA not before: Sat 03 Dec 2022 18:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:d929:8f12/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:2a:25:21:4a:44:d5:be:01:86:27:e0:58:4f:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 18:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1681d82f52f1fd8f4964c64b243aad886ee2a0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:5b:7c:51:79:1f:4a:81:58:fd:1b:4a:1e:
db:a2:81:ba:3c:6b:aa:bb:94:b4:67:f1:e8:95:7d:
d8:b6:01:05:3f:04:f6:61:52:3e:7a:5f:71:16:4f:
c2:7f:0a:1c:b0:21:34:b4:58:25:4e:cd:2b:c4:36:
82:fd:da:4f:eb:ca:1f:7c:11:7f:19:8a:57:3f:f5:
05:d3:78:72:2d:a3:ae:3a:4f:79:7b:35:2b:5f:ca:
7e:f2:28:58:7d:93:c3:c5:b7:f2:43:c5:c8:05:c6:
4e:3b:35:d4:b9:32:6e:14:ef:1b:aa:f1:0d:a9:4b:
b9:a1:86:84:94:fe:de:73:39:dc:bb:8f:31:09:50:
4a:27:e6:91:78:c0:51:f7:7f:7f:a0:9d:45:a2:91:
09:b1:0f:77:07:9b:00:14:60:35:8e:ef:27:eb:9c:
4d:ff:31:2b:55:cd:3a:9b:74:0c:d0:2e:fa:d2:84:
3a:aa:23:99:c4:55:c9:cd:41:97:2a:eb:95:bb:86:
84:c6:e4:d3:86:cf:25:73:00:d2:ff:65:6f:8d:e3:
e5:f8:c5:6a:fe:65:d6:59:01:c6:49:4a:5e:6c:52:
86:56:4a:64:1f:0a:8d:c4:e4:0e:f3:f1:44:97:37:
04:d8:37:7a:f3:8c:6a:32:07:9b:9e:a2:1c:7d:a9:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:D8:2F:52:F1:FD:8F:49:64:C6:4B:24:3A:AD:88:6E:E2:A0:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FoHYL1Lx_Y9JZMZLJDqtiG7ioMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:57:aa:b0:47:a9:2a:3b:f3:fe:87:4e:97:33:c7:0f:83:e8:
da:0e:0a:2f:57:6a:00:40:c2:9d:3a:e6:a4:ec:4b:de:4f:4e:
02:6c:22:a9:3d:61:a9:50:9e:01:50:d5:8b:5b:79:d8:0b:e9:
49:d8:d8:f8:ec:7d:a9:13:1b:95:03:77:35:b8:e4:f1:60:28:
8f:2c:24:e4:2b:64:4f:de:95:71:dc:27:49:70:9e:2e:29:52:
fe:8f:87:01:50:5e:ef:d1:b3:aa:b2:26:d5:04:ae:16:f4:5c:
bb:f8:08:96:7c:76:e5:e9:d0:fc:da:5d:c6:33:b2:a6:5f:40:
35:40:74:df:ea:7f:66:83:6d:4b:cc:70:57:4d:ac:2a:30:eb:
db:1b:68:ec:31:86:2a:c0:7c:73:7a:ca:55:bc:69:b9:8c:67:
ed:db:61:83:28:85:3f:4f:01:7d:e0:c3:ce:2c:17:8e:01:5e:
38:cf:3e:75:58:f8:27:15:1e:40:0f:ff:88:9c:be:86:79:58:
5f:cf:5a:3d:7f:5f:76:5d:dd:53:b2:74:e5:e5:44:fc:a9:88:
f3:a4:ee:71:fb:26:30:7a:ff:33:fb:b5:2c:19:07:8e:2c:2f:
c1:89:a8:b3:55:d6:87:11:76:52:08:63:5c:af:cb:3b:4d:bc:
11:c8:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:12 2025 by rpki-client