Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fs1oSHlOyahL7On6-FTkO4NJ13M.roa
File: Fs1oSHlOyahL7On6-FTkO4NJ13M.roa (raw, json)
Hash identifier: xqiUzzN9i2KW0m4L8b69zSxSb6S+D22yn+911ijh+zc=
Subject key identifier: 16:CD:68:48:79:4E:C9:A8:4B:EC:E9:FA:F8:54:E4:3B:83:49:D7:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81912A45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fs1oSHlOyahL7On6-FTkO4NJ13M.roa
Signing time: Fri 06 May 2022 06:04:37 +0000
ROA not before: Fri 06 May 2022 06:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:97f8:5935/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173774405 (0x81912a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 06:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16cd6848794ec9a84bece9faf854e43b8349d773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:89:07:5f:82:42:7f:61:ea:5b:2e:eb:63:
32:22:58:37:0b:33:f3:a6:58:a0:04:e7:81:01:26:
83:8b:2c:9d:60:ee:12:1e:58:d3:7e:75:ff:54:fd:
de:fc:a5:59:1c:f4:75:fd:22:59:69:f4:44:bc:d0:
3b:a8:32:b4:fa:4b:9a:34:cf:e4:fb:e7:84:fc:c8:
25:a0:32:0a:da:d0:05:f6:f6:af:e6:6d:ea:3d:eb:
f4:bd:fc:1d:a7:e9:b9:80:a6:4b:18:bb:97:02:a4:
26:5e:9f:cf:76:7c:6d:2f:70:e2:95:e5:03:1a:a7:
86:73:1d:81:db:0a:96:ef:56:6d:4c:db:a8:01:c4:
35:60:80:6a:94:cd:13:5b:83:1c:61:83:41:39:ff:
2c:9a:a3:73:0a:3f:8c:36:c8:7a:ae:d4:9f:fc:54:
8d:5b:d7:2e:44:ed:3e:1f:5e:83:08:d6:96:ac:b2:
6c:55:e4:59:ba:e4:2d:5b:b0:61:0f:3e:33:5e:34:
bb:87:74:cd:7c:06:44:60:73:43:8b:5b:f6:19:2b:
50:7c:83:eb:fc:8e:1f:a0:ab:89:85:34:a9:28:92:
e4:41:96:f2:eb:4a:89:e3:00:98:73:aa:8a:8d:d4:
d9:cc:3f:7b:1c:d9:94:01:69:d9:d3:16:04:31:f5:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:68:48:79:4E:C9:A8:4B:EC:E9:FA:F8:54:E4:3B:83:49:D7:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fs1oSHlOyahL7On6-FTkO4NJ13M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:05:ab:03:20:9a:95:9f:8f:d5:0a:e3:d0:e2:4e:9b:69:b7:
9c:bc:02:d2:e7:d1:4e:ac:df:9a:d4:2b:a6:d2:76:e2:a4:d8:
7c:10:79:e3:66:5e:42:05:76:52:c0:e9:a8:b2:a0:9f:03:e3:
4b:bd:9e:f8:f2:40:f6:bf:54:b9:0a:41:64:ca:0f:08:83:f7:
e7:a1:15:89:5a:b5:60:66:fc:00:59:9d:9e:9f:d6:81:8b:ad:
6d:be:cf:74:a7:73:6e:f0:52:3d:f8:95:81:d2:22:09:13:d9:
f0:33:9f:a0:36:7c:8a:6e:00:70:6c:98:1d:e5:24:c1:6a:5c:
a8:c3:76:8f:86:47:7c:4d:84:3f:99:63:11:82:a4:8f:bd:dc:
6d:41:ac:2a:9f:f0:16:cd:ec:8d:e0:c2:65:0e:af:22:1f:d5:
2b:c9:fe:93:e9:75:1d:f0:02:39:2a:27:f0:17:5c:03:32:2c:
d5:ed:96:5c:d6:ce:ee:ca:5f:27:08:fd:25:64:c4:1c:a4:be:
79:48:4f:3f:39:a8:63:b9:b7:62:f6:c0:b9:f2:12:d2:82:42:
6c:bf:f5:0e:cb:35:66:a9:86:21:76:92:89:a4:92:1c:45:8c:
8b:fa:3d:c6:04:fb:71:95:10:81:8c:d2:56:54:1e:0b:83:26:
88:73:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:58:04 2025 by rpki-client