Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FtPFbF1bTDArqMOGEufN2t8dWTc.roa
File: FtPFbF1bTDArqMOGEufN2t8dWTc.roa (raw, json)
Hash identifier: lH9VogTuwb8z7lhDgDMZwGNTIorgC4JUUfqvkeQKulY=
Subject key identifier: 16:D3:C5:6C:5D:5B:4C:30:2B:A8:C3:86:12:E7:CD:DA:DF:1D:59:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FA71E10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FtPFbF1bTDArqMOGEufN2t8dWTc.roa
Signing time: Fri 04 Mar 2022 18:04:26 +0000
ROA not before: Fri 04 Mar 2022 18:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:561a:ba39/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873223184 (0x6fa71e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 18:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16d3c56c5d5b4c302ba8c38612e7cddadf1d5937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:3e:7b:0a:99:fa:03:65:7f:de:2c:84:b1:
3d:39:a6:6c:93:a6:c3:de:81:36:fc:1d:21:d5:dd:
10:ad:11:91:ca:92:76:99:21:5d:0d:7a:c1:69:40:
28:21:ef:ce:c5:4f:a5:bc:9e:14:50:34:6b:2e:d5:
38:13:89:8c:a5:2a:81:18:b7:bc:c1:be:1f:e4:6f:
60:3d:bd:50:a0:5a:a5:53:8e:b7:6b:08:68:8d:33:
b7:a6:ae:f9:33:62:14:4f:57:6c:4b:93:b1:c5:0e:
cd:01:ef:35:cf:7d:4a:33:53:a7:b4:f1:09:2c:bf:
77:c4:f5:1a:cb:40:a8:f2:7c:a5:40:b5:84:e1:1e:
65:49:bd:55:6b:46:1e:7d:4d:d3:b2:4c:34:fd:b9:
75:95:48:bd:f6:4a:5b:dc:a2:32:b9:29:43:34:9a:
b8:fc:ab:86:bf:2f:50:bf:10:7f:ec:61:3b:2b:39:
a3:84:54:59:c3:4e:8e:9b:63:29:07:6d:3d:9c:06:
fd:64:1f:32:6e:f5:0b:15:d3:79:fe:07:32:c8:4d:
8b:56:17:16:e8:4b:78:19:8e:04:84:f1:93:20:63:
a7:ed:eb:f1:56:ae:44:0e:55:7b:7f:b0:4d:61:67:
e9:50:08:e0:51:49:b4:00:4c:62:22:d2:8e:c9:9b:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:C5:6C:5D:5B:4C:30:2B:A8:C3:86:12:E7:CD:DA:DF:1D:59:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FtPFbF1bTDArqMOGEufN2t8dWTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:0c:ed:b8:83:8c:e7:48:d1:b2:e6:51:c5:b9:33:d8:12:e7:
ba:d4:f4:28:b8:11:4a:71:7c:07:4e:f3:3d:1c:9f:cd:5f:99:
0b:b1:3d:94:50:43:ab:89:b9:98:79:cc:f7:fa:81:c0:9b:8e:
90:77:63:c1:33:34:6d:df:08:01:f1:9d:e5:34:b1:63:cc:38:
92:16:f8:4c:e8:89:f3:1e:c4:cc:a9:2f:f4:d3:96:7a:45:13:
8e:24:da:8e:63:86:76:2d:e8:24:c0:e9:be:7f:f9:a6:3d:a0:
67:66:d0:98:2d:28:9c:eb:2b:b2:82:5f:d9:b1:45:10:95:52:
88:d8:fb:1c:4c:ae:9b:7a:2c:e3:7a:ad:84:82:80:69:40:9c:
46:b3:a8:b0:e7:21:b0:00:32:97:9d:e0:0c:be:b5:eb:a2:aa:
15:a7:5f:80:33:c3:75:9b:13:f6:1f:0d:ca:09:98:b4:8e:1c:
47:c3:88:ec:48:56:c4:d9:54:19:95:44:a9:07:42:b8:3e:94:
b3:86:33:a1:a0:17:35:2d:fd:65:58:98:95:5a:19:b6:15:32:
4c:70:d1:cc:37:99:65:a0:68:be:c6:a3:10:79:0b:2d:18:e3:
b3:5e:9a:b3:7d:a0:5d:32:6c:b3:75:5c:a2:2d:30:34:88:e1:
d4:f1:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:04:04 2025 by rpki-client