Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FuAuq1va7iUZ2Y2kKrofHVcpv44.roa
File: FuAuq1va7iUZ2Y2kKrofHVcpv44.roa (raw, json)
Hash identifier: 9DZxlZ/NxlzJ+dN9e9v1DOWFOqrYHrAixNqkZvAHFNY=
Subject key identifier: 16:E0:2E:AB:5B:DA:EE:25:19:D9:8D:A4:2A:BA:1F:1D:57:29:BF:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2F28D61B2FB7CD9C76BFE6A324512010
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FuAuq1va7iUZ2Y2kKrofHVcpv44.roa
Signing time: Sat 26 Aug 2023 00:05:19 +0000
ROA not before: Sat 26 Aug 2023 00:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2f28:4e1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2f:28:d6:1b:2f:b7:cd:9c:76:bf:e6:a3:24:51:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 00:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16e02eab5bdaee2519d98da42aba1f1d5729bf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:90:2b:bf:98:a3:f4:c3:92:ed:7e:7d:25:
62:91:9c:14:07:6b:50:3f:da:f0:25:11:7e:e9:97:
92:96:be:1a:d6:4b:19:0a:ed:a1:fd:dc:53:11:84:
8c:74:31:0a:ba:a9:19:97:93:e0:0f:7c:23:e3:50:
52:88:22:88:6a:25:ba:65:8e:4b:16:2e:2d:37:6f:
b1:a0:e6:a0:20:6a:12:7e:6a:89:de:79:c0:f2:df:
78:96:b7:3a:bf:bd:03:20:b6:9a:9e:d7:7e:96:08:
93:66:60:a7:ac:80:c7:ce:fb:d7:0a:7e:84:c0:09:
63:1d:7c:3f:25:31:48:b8:61:17:a2:16:52:dc:2a:
65:a9:ad:2e:ef:3d:d3:86:9b:de:6b:13:75:15:ea:
1c:c7:f7:17:80:ff:90:38:ea:aa:6f:d2:2f:d9:57:
15:4b:ae:da:eb:9b:b3:2f:f2:a4:83:10:c0:d4:a7:
a8:8b:8a:3b:4f:2d:07:a8:af:d1:a4:c7:b6:71:76:
d9:68:d0:8f:e7:cc:8c:24:7f:44:e0:b5:5b:54:d0:
c0:e9:67:38:e8:fb:2d:3b:65:89:89:4f:d5:7e:10:
bb:de:fd:76:24:89:58:a2:04:75:47:e4:57:3f:10:
01:d5:e7:55:49:ff:a5:1a:52:d6:ba:2f:34:4b:6e:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:2E:AB:5B:DA:EE:25:19:D9:8D:A4:2A:BA:1F:1D:57:29:BF:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FuAuq1va7iUZ2Y2kKrofHVcpv44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:e9:f2:86:15:36:03:1f:a3:78:96:9e:ed:00:be:4c:69:20:
6a:fa:e8:30:4b:bd:aa:15:61:5c:d1:49:59:a8:a4:35:ea:48:
71:54:00:c8:34:2e:18:38:94:4a:cc:3e:b0:90:d4:87:1d:0c:
c7:32:06:df:af:ac:77:d4:14:7e:54:3e:94:10:e6:6f:16:20:
99:65:e2:a2:78:a8:ae:89:a3:e2:58:2a:7e:e7:c6:f1:1a:a5:
e6:dc:e4:1e:c5:ef:b9:5d:84:ff:25:6a:d1:dd:7c:76:a6:a8:
c6:ab:9b:e2:e1:e3:0b:23:ec:14:6b:58:86:1a:c3:50:a3:90:
7b:39:9f:ed:96:2e:81:81:ba:2f:21:dc:98:47:cc:d5:4d:d9:
fe:8c:2f:dd:32:91:4a:ee:98:be:96:37:be:69:5c:b3:e5:d3:
12:ab:e8:87:61:7b:cf:68:f0:f9:79:88:ee:7f:71:cf:19:a9:
6c:37:83:8d:e7:92:21:be:42:00:aa:ef:35:5e:5e:b4:39:40:
f3:98:90:b0:03:e5:12:74:9c:b8:6a:32:e4:6d:07:2e:aa:ed:
6d:a4:72:46:81:03:64:b8:e5:83:a0:db:e9:76:89:72:ae:5b:
23:ff:bb:7a:7d:d5:ef:9e:a5:27:1b:ca:8a:3d:f8:1b:60:4e:
ef:d9:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:18 2025 by rpki-client