Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fy0w2qsWWuuBlZvU0Bh30x76qP8.roa
File: Fy0w2qsWWuuBlZvU0Bh30x76qP8.roa (raw, json)
Hash identifier: GlGm8HLLQkwelHv2Qrw59hLpUFL5KZoktpTvkgdaAWc=
Subject key identifier: 17:2D:30:DA:AB:16:5A:EB:81:95:9B:D4:D0:18:77:D3:1E:FA:A8:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185553397D2C8C9B8021188013C3781CCE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fy0w2qsWWuuBlZvU0Bh30x76qP8.roa
Signing time: Tue 27 Dec 2022 20:08:42 +0000
ROA not before: Tue 27 Dec 2022 20:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:33:97:d2:c8:c9:b8:02:11:88:01:3c:37:81:cc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 20:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172d30daab165aeb81959bd4d01877d31efaa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:47:5f:15:af:7a:1d:24:43:fe:b0:51:d7:
34:86:7f:a1:78:60:f3:95:e6:8f:a2:b8:4c:ea:0d:
a0:67:64:f1:c3:db:06:a7:55:cb:72:b4:1a:19:6d:
ee:70:90:1b:ee:29:e8:4a:2c:77:87:ac:41:ca:23:
98:69:8e:40:50:b7:71:3e:db:b1:57:1c:5b:3a:d8:
c3:5d:d7:c7:06:8a:53:53:c4:db:ff:4e:e7:85:99:
0e:5b:2c:4f:6c:ac:67:c2:6e:b6:8c:8f:3d:04:e7:
b1:67:95:30:8d:00:57:15:8c:ba:77:62:37:73:d6:
ed:3d:f5:0f:5a:c8:98:87:b5:4b:76:4f:37:cb:90:
8b:20:0e:6c:61:28:6a:6a:e8:41:49:74:0c:e3:f0:
f6:97:1e:dc:df:22:53:20:e2:0f:3d:45:47:a4:ba:
bc:b2:9e:33:47:f4:f4:74:a8:7c:99:55:58:a8:ef:
89:68:a8:6b:f7:a6:95:41:ef:35:7d:c1:af:0b:ef:
26:73:d5:9b:8f:2c:65:d5:16:94:77:69:80:7b:44:
e3:23:21:f6:f6:cb:93:4b:78:75:a5:a8:d2:f6:72:
cf:85:97:84:1d:ba:03:9d:7a:58:77:1d:00:99:fa:
22:67:da:48:1a:b5:c1:59:2c:8e:55:73:9e:50:a7:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:30:DA:AB:16:5A:EB:81:95:9B:D4:D0:18:77:D3:1E:FA:A8:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fy0w2qsWWuuBlZvU0Bh30x76qP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a8:0f:5e:98:15:57:1a:7f:74:f6:e0:7b:02:27:03:90:7e:
fb:45:18:cc:c6:b5:eb:26:e2:38:71:63:d2:11:72:7b:19:03:
71:a8:07:45:ca:27:47:7e:9b:5f:a5:67:ff:97:7e:bd:18:05:
f6:a7:2f:14:78:86:87:77:f0:0a:c9:b3:f9:1d:19:d9:75:55:
b4:5c:0c:7a:55:ba:5f:8b:19:da:fb:0f:e1:ad:e1:59:9b:42:
c9:98:8f:3e:f1:b9:9d:2b:2d:b9:47:b5:2c:0b:b5:4f:bd:f2:
09:72:17:94:03:d1:e2:c2:12:f1:00:06:06:50:8b:cb:c7:fb:
2e:1c:fd:27:0a:98:81:35:87:f9:b6:4b:1d:8a:f9:cb:f6:77:
f7:d3:3e:71:c1:e6:09:51:eb:fb:85:66:1b:cc:ab:d2:34:ff:
de:52:7e:a9:4f:8d:c1:1a:2a:e0:a8:3c:8f:70:2d:29:ba:8d:
ca:49:16:36:ee:0b:34:75:d3:9d:7c:dc:b9:00:a8:45:ec:2a:
71:e3:4a:51:79:71:6e:83:e1:a5:0d:ca:2d:29:2f:f8:10:59:
21:ad:fa:56:df:af:5b:5f:48:a4:11:d9:9c:e8:9b:34:e2:8b:
ee:3f:45:3c:dc:9f:24:d2:45:71:f2:41:b5:44:36:4d:f8:88:
d1:16:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:35 2025 by rpki-client