Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FqE3iEmY_un6qZi0jGDdxmKDqWI.roa
File: FqE3iEmY_un6qZi0jGDdxmKDqWI.roa (raw, json)
Hash identifier: 9WpkNN14ibi3bMZsVFNcUrE3ZLaIIaXtz/P34CYl1DM=
Subject key identifier: 16:A1:37:88:49:98:FE:E9:FA:A9:98:B4:8C:60:DD:C6:62:83:A9:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74BECACD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FqE3iEmY_un6qZi0jGDdxmKDqWI.roa
Signing time: Tue 22 Mar 2022 13:10:20 +0000
ROA not before: Tue 22 Mar 2022 13:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958660813 (0x74becacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 13:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16a137884998fee9faa998b48c60ddc66283a962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:41:1f:fe:f5:00:b3:60:83:64:f2:c2:32:
f7:87:a6:ce:f5:23:71:c9:5f:b6:5e:05:a1:e4:1a:
c5:d2:05:9e:4c:39:30:5a:cc:74:ab:c5:42:c7:e8:
1c:b8:79:44:20:86:be:d6:a1:a1:2a:fd:98:28:f0:
1e:cf:ef:e4:70:b6:89:77:23:d1:ea:5b:21:f1:21:
b2:19:53:ab:b1:4a:41:96:38:2e:4e:3c:fe:6a:e7:
d2:ab:ba:56:c3:1e:b0:4f:e3:f9:32:c8:54:22:ec:
bd:c4:e7:e7:9a:b9:4a:3a:76:d3:93:dc:64:73:b5:
93:b8:b6:6c:e3:e9:cb:49:44:ab:e7:da:5d:83:8a:
e7:d3:8f:e6:04:21:a5:aa:a8:af:5d:55:08:85:a3:
3c:cb:bc:ae:d3:25:48:07:eb:99:71:c8:49:49:ad:
9a:0e:e0:94:8b:25:a6:af:14:e3:e3:1d:78:0d:3a:
11:43:f4:ad:0e:6c:5e:56:12:e2:1f:f9:bc:c0:43:
c8:2e:9e:8e:88:38:5e:ac:4c:06:d8:fe:00:8b:48:
7e:fd:8e:dd:c8:e3:c3:45:15:29:22:62:44:a5:d0:
1e:2f:a7:c7:85:5d:77:7c:48:e5:24:20:40:15:49:
01:50:51:46:cc:af:d0:4a:e2:58:89:1d:ac:22:fa:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:37:88:49:98:FE:E9:FA:A9:98:B4:8C:60:DD:C6:62:83:A9:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FqE3iEmY_un6qZi0jGDdxmKDqWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:9f:35:62:fe:bc:20:d2:8f:d0:a1:e0:32:e0:7d:42:dc:cb:
01:51:51:b1:65:f6:db:d4:b7:a8:f2:28:a5:a8:9f:eb:45:3d:
6c:72:6f:e9:9e:c7:7b:45:e2:3d:da:fa:4a:a6:b6:9a:59:a6:
7b:05:b5:d6:d0:1a:43:14:96:45:98:10:db:af:e2:d0:9b:aa:
b6:1e:b0:64:3c:dc:69:1a:0a:77:52:f0:cb:23:ff:14:6f:a6:
63:d7:bf:db:37:53:9d:40:4e:6a:67:c2:0d:5d:38:9f:46:98:
79:98:a8:f2:77:ae:8d:cb:57:9c:cd:45:92:ce:ca:38:87:10:
3a:60:9f:5d:86:ca:fb:2e:9f:60:0a:8f:f0:f9:6c:a6:92:b8:
80:4e:a6:30:a9:d6:e4:b0:29:05:f9:3b:4c:f4:8a:32:ed:4e:
68:72:92:bd:3f:20:60:50:8b:bb:c9:fd:d0:94:b9:ff:25:1b:
a1:5f:9f:34:3b:11:91:c3:46:14:cf:3a:0a:07:0a:a1:4e:7c:
e0:17:44:2c:1d:03:42:3b:3d:9e:45:ce:98:0c:ba:ff:b4:91:
c3:aa:03:1f:8a:9b:20:5d:30:64:61:52:9a:bf:fb:1a:e3:e2:
25:d3:08:c2:69:69:82:db:c5:e1:4b:21:84:cd:26:73:f0:cd:
27:dd:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:45 2025 by rpki-client