Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XXwWd3_S18oqWThFeEYv3CbOrc.roa
File: _XXwWd3_S18oqWThFeEYv3CbOrc.roa (raw, json)
Hash identifier: FpNesOm5bUzrmMLGfQugD655Ntf9wZCdmIDxRSz9elg=
Subject key identifier: FD:75:F0:59:DD:FF:4B:5F:28:A9:64:E1:15:E1:18:BF:70:9B:3A:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FC519BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XXwWd3_S18oqWThFeEYv3CbOrc.roa
Signing time: Sat 30 Apr 2022 05:09:44 +0000
ROA not before: Sat 30 Apr 2022 05:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143623610 (0x7fc519ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 05:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd75f059ddff4b5f28a964e115e118bf709b3ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:95:a5:2b:27:25:1a:69:0e:6b:14:4b:79:
e1:8d:22:bb:92:00:31:f4:de:ec:05:84:fb:b3:88:
96:42:07:a7:77:db:37:22:7d:ec:23:5a:75:a5:0b:
25:53:06:06:e4:08:ff:2a:2c:03:36:89:39:b9:d2:
c1:0f:6b:de:c3:18:81:1a:72:0b:b4:8e:19:2f:72:
d8:de:05:89:1a:b2:71:bf:74:1f:46:18:5e:ff:8f:
d1:b2:9c:9a:40:41:77:0e:59:b7:db:c9:7a:39:4f:
33:e6:21:57:99:c5:d4:f6:85:15:b4:25:8b:38:31:
8e:55:fd:ad:5b:63:1d:28:79:92:f7:62:2b:94:d1:
b0:f2:33:2f:0e:ba:93:c4:1b:31:c4:c8:11:d8:19:
bb:4f:cc:c8:62:29:9a:57:5b:1e:39:0d:0e:09:f4:
8a:c7:61:a9:87:8a:14:4c:d2:c3:a5:db:62:48:1a:
b1:53:d8:f5:d1:9f:27:3e:22:12:bf:da:4b:54:2e:
ab:2b:91:db:f4:66:d1:89:28:5c:6c:83:90:9e:7f:
b7:2f:56:52:bd:0a:6e:fc:75:07:14:90:4b:cd:af:
72:57:ca:d9:a9:05:6f:78:3b:11:4e:c8:8e:f5:53:
cd:b3:8e:25:38:9a:44:ea:89:00:23:32:72:1c:ca:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:F0:59:DD:FF:4B:5F:28:A9:64:E1:15:E1:18:BF:70:9B:3A:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XXwWd3_S18oqWThFeEYv3CbOrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f9:01:ac:1e:49:25:2c:e7:6a:07:7b:e5:05:02:07:a0:38:
44:a2:dd:02:e3:3b:ab:f0:62:a9:dd:ee:de:43:03:15:26:24:
cd:4b:4d:b7:7d:92:21:f1:c3:e8:9b:fd:4a:d6:4c:e8:d7:51:
79:84:85:68:da:88:89:e9:5d:b7:76:ba:2c:cc:ae:c1:56:73:
c6:e6:fc:14:5c:4b:5b:03:e3:ce:8d:39:4a:21:9f:d0:47:9e:
50:2f:3c:e4:18:d2:a6:6d:f0:1c:2f:42:93:dc:d2:4a:f1:58:
66:fb:32:c6:d5:a3:e3:20:6a:99:e2:57:b8:71:ba:7e:57:fc:
e4:26:de:01:a8:38:c6:20:7d:06:4a:65:10:57:b0:2b:f2:a9:
68:7d:2b:70:23:53:a9:65:cf:84:96:38:7a:86:41:fd:e6:60:
80:66:c8:5b:17:a8:b3:3f:17:71:cd:76:20:f4:89:1c:bf:15:
11:bf:66:76:e8:0a:6d:5f:6b:60:52:0b:f1:72:ef:3d:42:31:
49:56:fe:71:d9:14:df:96:0d:cf:f2:8a:a6:3e:0e:ed:43:44:
c5:c2:09:33:67:c6:9d:1d:42:39:7d:86:c9:13:13:9a:75:7c:
00:ba:19:21:18:80:81:67:af:be:f7:f9:63:f7:fe:b6:d2:87:
90:3a:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:48 2025 by rpki-client