Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FsIoscs1HLnG8DzsNbRWU8nF_t0.roa
File: FsIoscs1HLnG8DzsNbRWU8nF_t0.roa (raw, json)
Hash identifier: X/9xIZK5tmUkJgKE7nh0nKo2q1YJGyNOUaZsKjjYn2E=
Subject key identifier: 16:C2:28:B1:CB:35:1C:B9:C6:F0:3C:EC:35:B4:56:53:C9:C5:FE:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018638A95BBADD8267B3B171FF98FAEFD25A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FsIoscs1HLnG8DzsNbRWU8nF_t0.roa
Signing time: Fri 10 Feb 2023 00:11:08 +0000
ROA not before: Fri 10 Feb 2023 00:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:a9:5b:ba:dd:82:67:b3:b1:71:ff:98:fa:ef:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 00:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c228b1cb351cb9c6f03cec35b45653c9c5fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:85:89:af:51:f4:c2:93:34:60:06:9b:d0:
d8:ab:68:55:fc:ac:d4:ae:5f:a9:63:cc:e5:19:09:
cc:74:32:49:6f:ae:08:34:6a:ed:c5:84:4c:6f:ad:
a2:3e:20:bc:5c:52:87:96:9b:03:63:f4:14:ce:20:
85:47:d6:e4:dc:03:3e:63:7c:04:dc:65:98:ef:60:
31:6e:ec:e1:36:c9:bc:c1:eb:f8:86:9e:8b:c9:48:
65:d5:e9:9b:a8:c0:06:5f:31:28:c7:49:d0:b8:b1:
6a:f7:25:91:ef:1f:68:06:af:a7:5a:62:31:d6:8c:
ca:28:89:2b:21:77:56:1c:81:0f:87:1c:aa:d7:cb:
b8:6b:67:9a:48:c2:a3:67:50:58:cc:46:72:c4:e4:
26:40:9c:c1:c4:a3:bf:70:39:b4:12:ea:a4:42:6a:
48:92:04:fa:88:b8:1e:49:fb:dc:da:48:9e:64:1f:
31:6c:a1:f6:73:f9:3a:ed:7a:5b:a7:68:dc:de:ca:
53:a0:5f:80:db:c1:af:41:6f:0a:17:de:89:b9:c4:
0d:4a:4d:3c:81:c0:75:af:fb:3b:7f:6c:73:85:38:
50:73:89:15:76:06:3d:37:23:35:b4:6e:94:b6:8d:
50:fd:74:31:5d:20:30:79:67:d4:11:80:4f:84:be:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:28:B1:CB:35:1C:B9:C6:F0:3C:EC:35:B4:56:53:C9:C5:FE:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FsIoscs1HLnG8DzsNbRWU8nF_t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:e8:ae:50:83:1c:9d:5e:2b:d3:ae:64:ef:6e:81:a3:d0:ad:
db:dc:dc:74:79:16:b7:93:2b:73:ec:4a:ea:d3:26:13:44:d7:
ba:08:97:e3:f4:02:a9:bd:17:5d:3e:c3:09:5f:90:e5:fa:cf:
a1:a9:0b:d9:e3:61:bb:66:14:19:30:d9:93:0e:43:e0:7c:83:
ff:cf:38:1c:00:de:b8:03:e5:6c:74:f4:87:8d:43:d8:8a:5c:
a3:b1:f7:bc:ce:02:8c:0d:0d:2c:d7:25:50:00:f8:ab:90:43:
6f:cd:95:1c:c4:56:6d:22:99:2a:da:57:73:ba:ed:80:c7:96:
49:76:dd:50:6c:50:7d:da:e7:60:05:a4:11:17:73:96:15:9d:
20:10:51:6f:6e:bf:de:e5:a3:00:34:fa:f8:6f:5b:d3:bc:8c:
f0:99:6c:e4:58:ed:b6:d7:e1:cc:c4:84:ab:87:60:20:7f:4b:
88:7c:3e:88:0b:d0:e4:f1:58:38:40:7c:bd:a1:4f:cc:2f:fd:
e4:d6:42:a7:44:66:d4:f2:20:d1:bf:1a:52:27:79:83:d1:6b:
1c:e7:c7:c9:fe:cb:1b:7a:bb:b8:73:3b:2c:66:2d:da:2d:e0:
e0:ed:e5:15:5a:09:e0:c8:ff:fb:14:7f:53:c3:d7:72:16:f6:
aa:56:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:43 2025 by rpki-client