Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpKSn7VJ7cB2z7Q5rjED9SQXn3k.roa
File: FpKSn7VJ7cB2z7Q5rjED9SQXn3k.roa (raw, json)
Hash identifier: L8SEkmQGYUPwL8Z9RSQ1F7bfjat0mvLn2+S6lqj6bxI=
Subject key identifier: 16:92:92:9F:B5:49:ED:C0:76:CF:B4:39:AE:31:03:F5:24:17:9F:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C0F1E0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpKSn7VJ7cB2z7Q5rjED9SQXn3k.roa
Signing time: Sun 12 Jun 2022 09:09:05 +0000
ROA not before: Sun 12 Jun 2022 09:09:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349800970 (0x8c0f1e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 09:09:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1692929fb549edc076cfb439ae3103f524179f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:18:2e:75:8d:e7:30:33:53:bc:37:81:61:
a0:a2:52:f8:7f:89:24:fc:46:8c:d5:7a:c7:6c:62:
4c:d2:07:63:a0:25:0c:90:a5:9c:7b:1b:df:29:b8:
00:46:2e:31:52:42:1b:ed:41:5e:32:f2:16:0c:c7:
58:df:4f:81:17:5a:1a:09:59:3b:43:20:29:dc:a0:
27:a6:a0:fe:a9:51:a1:79:e4:9c:8e:16:f4:df:9c:
ab:50:9f:e7:7c:3a:3c:b3:21:3b:69:15:f9:68:a0:
10:df:f6:26:43:f9:ed:0d:fe:b8:63:08:75:a1:70:
4d:df:09:bf:dd:ac:c5:e4:a6:8a:85:56:fe:d9:a7:
3d:6b:d5:83:a6:0f:32:a3:84:51:1a:eb:e7:d4:86:
70:72:f2:a7:a9:29:6f:a0:ad:35:42:54:d4:19:5a:
94:40:7f:a4:90:c7:a7:a1:26:33:5b:44:24:70:46:
01:fd:71:3f:d1:97:1f:f5:af:84:4d:d9:37:c4:b6:
1e:60:d9:cc:e0:35:6b:2f:5a:b8:a2:95:a2:9a:01:
1c:6c:f7:87:30:43:9f:4c:07:a1:39:1e:27:dc:14:
9a:b7:9a:13:d7:42:25:aa:72:45:d7:cf:61:18:98:
9a:35:9e:81:a6:5a:74:3f:78:0c:1b:1d:1e:d9:93:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:92:9F:B5:49:ED:C0:76:CF:B4:39:AE:31:03:F5:24:17:9F:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpKSn7VJ7cB2z7Q5rjED9SQXn3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:30:d4:44:0a:be:19:87:7e:c2:8d:56:7c:64:42:5c:6d:fd:
4f:ec:82:fa:9f:fe:ca:8c:62:fa:21:d5:be:cb:95:0f:fb:da:
57:94:9e:95:b1:b1:dc:4c:c3:d5:d8:13:d4:17:44:ab:a6:b4:
8e:d9:1a:70:ed:8b:e7:9e:38:e5:55:d5:cc:14:2e:2e:48:65:
64:b1:84:3f:2a:cb:61:19:bb:07:97:e3:67:a9:68:f5:24:46:
83:c1:dc:31:1d:fa:6d:75:97:8e:e4:66:36:e2:77:4a:d3:10:
dd:26:05:9b:35:fc:d1:b2:22:13:90:7a:cf:52:bb:b3:85:f6:
b8:b7:f7:ea:74:a1:c0:63:35:96:3c:d1:d0:90:24:a8:2e:f4:
0d:b2:1b:ea:5b:3c:98:c8:a7:2c:56:9e:32:33:0e:36:0b:c0:
eb:d6:96:30:72:7b:c1:0e:66:af:93:2d:37:69:36:be:cb:fc:
3f:87:a1:93:c4:94:1f:dc:76:6b:86:17:ec:4f:c2:9d:28:0a:
71:01:32:68:8b:ad:eb:c4:5a:21:6e:dd:8b:bd:ab:d4:5a:0b:
24:d5:81:0d:12:69:bf:5d:2c:9b:4d:a2:f8:a6:7b:cc:8a:86:
4b:7b:0d:87:f0:61:ff:d5:3f:34:10:97:9a:6e:dd:15:3c:e2:
17:95:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:09 2025 by rpki-client