Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1JL57MASj0ZsP7EH0mCQrSGq0k.roa
File: f1JL57MASj0ZsP7EH0mCQrSGq0k.roa (raw, json)
Hash identifier: DaaXC8lPAJrcmKnUKxt2336no6m2mHv7VXR8ngDX6s8=
Subject key identifier: 7F:52:4B:E7:B3:00:4A:3D:19:B0:FE:C4:1F:49:82:42:B4:86:AB:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9054A015
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1JL57MASj0ZsP7EH0mCQrSGq0k.roa
Signing time: Mon 27 Jun 2022 17:05:32 +0000
ROA not before: Mon 27 Jun 2022 17:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:181:a61f:5f24/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421465109 (0x9054a015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 27 17:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f524be7b3004a3d19b0fec41f498242b486ab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:ef:25:43:92:a7:8d:39:4f:3a:6e:9a:ae:
32:ef:b0:ea:92:1c:d7:fc:1b:59:80:d9:a1:dc:b6:
33:44:00:08:b5:91:b6:a8:f1:e2:2e:0f:77:6c:60:
67:6d:f5:73:b7:e6:49:bb:3f:f6:ed:fb:29:ec:6e:
6e:94:46:ad:96:64:34:f3:16:9c:5d:23:35:1f:e3:
53:f1:f0:dd:03:4f:01:9d:81:29:93:ea:1c:bb:85:
a6:8b:96:22:7a:2f:18:fd:36:26:52:fa:c3:8c:a4:
05:4f:17:a0:03:5f:27:fc:b3:ab:b4:9d:43:d1:46:
92:f5:a7:09:36:25:15:27:83:6a:04:44:ed:71:7a:
46:28:e7:bc:54:e1:ef:87:12:3d:23:b9:23:53:70:
f0:d0:1b:94:3a:5e:1b:e7:d0:09:5a:94:c2:a2:8f:
8a:0c:66:6c:0e:b0:54:d3:36:14:93:96:b1:a0:e9:
bf:28:fe:19:74:4a:0e:81:b6:42:63:53:0c:f5:26:
d9:34:aa:d4:5e:a0:99:72:5c:96:48:56:18:d3:16:
52:c8:9e:e2:98:46:6b:a1:40:09:dd:6f:cc:33:0a:
e1:93:b4:ec:c2:39:40:34:62:73:64:be:42:1c:e5:
26:ea:8b:af:96:6b:01:ca:2a:1b:18:a3:6d:71:98:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:4B:E7:B3:00:4A:3D:19:B0:FE:C4:1F:49:82:42:B4:86:AB:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1JL57MASj0ZsP7EH0mCQrSGq0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:d8:63:f3:d8:db:d9:39:ff:0a:7b:ce:5c:95:34:2d:a8:38:
45:64:3c:37:49:8a:3c:cd:df:1d:03:35:76:99:5c:42:01:8c:
a5:37:9a:8d:de:ea:e5:fd:8c:c6:e3:2c:36:c0:28:6d:dd:3a:
7d:66:7d:49:f9:07:b1:52:4f:72:01:b8:63:bb:5e:67:ef:ae:
ce:c2:c4:8f:d1:56:96:fc:4f:c5:fe:f0:cd:d6:34:2b:21:13:
c7:73:19:16:a6:15:9c:47:36:84:0a:f4:a5:c7:f6:ed:ab:23:
f5:7a:6e:f2:05:8a:3a:6d:81:2b:06:10:83:91:1d:01:2c:19:
39:3e:4a:1e:8e:9c:ea:cc:e9:90:30:33:58:1b:bd:14:2d:a5:
77:6b:0f:31:5c:ad:7a:2a:e5:71:11:af:cd:53:07:a1:e5:a0:
b8:69:c8:00:87:f2:7f:e6:aa:41:a1:18:4f:41:25:cd:17:e8:
b1:a2:c6:55:97:6f:ff:ca:7a:25:29:93:81:16:65:37:3e:87:
db:ee:3a:c7:98:72:b8:52:32:56:c8:a5:5f:32:a0:f5:58:37:
55:7b:e6:7c:4e:5e:36:64:70:15:e8:e0:3c:dc:63:4b:31:ed:
16:d5:f8:f2:1e:a5:1d:e6:39:10:7a:9b:15:dd:10:07:bb:6d:
0d:6e:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:33:53 2025 by rpki-client