Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1WzFqGNdqmNeXskYEOKnPYtqCg.roa
File: f1WzFqGNdqmNeXskYEOKnPYtqCg.roa (raw, json)
Hash identifier: x//hLVel1sRYA2Tzlv7uZe/BDgWxBUaQkQtEEMRVTpQ=
Subject key identifier: 7F:55:B3:16:A1:8D:76:A9:8D:79:7B:24:60:43:8A:9C:F6:2D:A8:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018486FAF3ABC570401C27DEA49C7679C3CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1WzFqGNdqmNeXskYEOKnPYtqCg.roa
Signing time: Thu 17 Nov 2022 19:05:04 +0000
ROA not before: Thu 17 Nov 2022 19:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64:ffff:0:184:86fa:7b33/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:fa:f3:ab:c5:70:40:1c:27:de:a4:9c:76:79:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 19:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f55b316a18d76a98d797b2460438a9cf62da828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:1d:8e:3a:4b:47:10:81:b5:02:60:25:a2:
0a:39:49:19:8b:74:5a:5d:ea:99:f2:ef:12:9b:a5:
a1:95:e5:b2:cb:46:41:a1:58:e1:24:58:fc:84:18:
17:9e:32:75:9c:42:e6:dc:00:94:c5:6e:5e:91:ef:
99:81:3c:a8:4e:34:c7:4d:9d:51:8f:55:c1:2f:96:
11:ae:f7:2a:da:bb:74:c5:89:7d:f1:f6:43:a6:51:
7a:38:64:ec:dd:2d:7d:66:13:46:fc:76:cd:6d:a2:
d7:7a:24:82:98:0f:79:de:9c:27:da:89:2a:e7:00:
92:cf:af:a9:b4:f5:b6:32:94:d4:f4:12:cf:fa:7d:
1c:b5:84:b3:0c:8d:1f:01:3d:77:81:9b:fc:32:fa:
b4:f5:9d:2d:b3:5e:32:c9:2b:c0:f0:3a:38:4d:7b:
08:3c:6c:bc:8e:21:e0:76:65:d4:f5:c3:46:db:89:
62:d3:51:2b:ff:bf:d0:e6:35:49:0e:1a:e4:4c:1b:
b6:a8:79:69:75:c2:78:c8:06:20:2a:87:cf:ab:0d:
63:c3:68:a2:c9:88:1d:b9:b7:be:78:97:a1:c3:70:
79:7a:0a:c1:ad:2d:49:35:71:8a:0e:cb:ad:ca:8f:
3f:d2:13:6e:51:3c:18:ea:f1:24:4f:5d:06:a9:06:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:B3:16:A1:8D:76:A9:8D:79:7B:24:60:43:8A:9C:F6:2D:A8:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f1WzFqGNdqmNeXskYEOKnPYtqCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:04:32:3e:b0:7b:80:d0:ca:9d:0e:c4:af:50:35:e5:31:f3:
27:6b:79:4b:0e:b6:98:4d:21:10:a9:4b:c2:e3:fe:da:71:05:
7a:65:bb:04:69:29:af:31:cd:ad:e8:bd:55:1f:82:2e:b8:39:
e1:24:0c:f5:d5:c8:7f:4d:e7:f8:f3:91:45:77:39:e6:cd:7b:
4a:19:3e:73:ac:7a:3c:d1:40:68:65:5c:b6:1d:cf:13:ac:ab:
3d:13:80:ab:0a:85:81:65:6a:dd:05:48:62:42:8e:6d:72:a3:
56:f7:a8:cc:8e:54:7b:f5:18:40:0a:c7:ed:5f:6e:0f:59:4a:
c8:84:34:2a:1d:8a:a7:98:ea:82:c1:71:08:a3:b6:f7:c1:aa:
fe:ae:fb:ff:e3:0f:c6:0d:45:ec:3c:74:e2:d7:48:7e:64:d6:
a6:a8:c4:f7:72:ec:0f:be:36:5a:6f:3a:66:3c:7c:b4:2f:ea:
c9:2f:7a:27:ff:2d:53:3b:6e:d7:b7:f9:3a:cf:bc:a3:e3:f1:
83:6e:dd:97:c4:59:9f:7b:a6:66:e6:40:bf:f3:d8:af:3e:3b:
ec:59:2e:aa:ed:37:44:8c:9e:37:ee:12:17:b8:8e:de:72:90:
eb:d0:bd:6b:06:52:6f:cd:c5:4b:43:6c:13:55:92:e2:07:cf:
5e:6c:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:37 2025 by rpki-client