Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2fWIlcEgXRnJvw_muCEEwINqF0.roa
File: f2fWIlcEgXRnJvw_muCEEwINqF0.roa (raw, json)
Hash identifier: poVRHoq0uT0+5lD/p2gkPJLfIIgPnBBn4BL8NSY65RI=
Subject key identifier: 7F:67:D6:22:57:04:81:74:67:26:FC:3F:9A:E0:84:13:02:0D:A8:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7508A78F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2fWIlcEgXRnJvw_muCEEwINqF0.roa
Signing time: Wed 23 Mar 2022 13:10:33 +0000
ROA not before: Wed 23 Mar 2022 13:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963501455 (0x7508a78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 13:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f67d622570481746726fc3f9ae08413020da85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:ab:37:06:5d:9c:5c:ee:99:81:a6:26:eb:
7f:61:fe:60:cb:50:8a:7f:6c:a6:6d:cc:b6:a4:f7:
1f:c2:b5:c7:a5:a9:6a:a4:88:5e:57:2a:d6:eb:b7:
d1:80:d8:87:0b:f2:ef:ff:00:ac:52:13:34:dc:d6:
10:9a:ba:30:1a:15:04:64:d1:f8:ef:f6:c3:0d:fe:
80:55:a2:0b:05:fc:0f:c4:83:23:da:16:45:66:60:
a6:c5:0e:44:47:d5:b8:27:8c:33:6f:ec:12:8c:5a:
4e:80:17:54:46:6e:2a:82:32:7f:3d:44:46:b0:32:
e9:d3:0f:ed:c8:51:3e:dc:bd:67:90:2e:6c:6e:da:
6c:fd:10:cc:49:38:a4:a7:e0:fb:1c:12:51:d5:61:
24:fd:be:92:82:6f:da:09:1b:02:68:22:99:3b:33:
49:3e:17:16:39:82:b9:a3:eb:07:89:ba:ff:03:3e:
85:14:9e:2f:e8:09:2f:e3:80:3b:16:77:a4:ad:32:
62:08:78:95:73:e5:74:d4:16:33:a9:8f:56:d8:97:
95:56:ae:7d:ee:e4:fb:5c:87:5a:1c:7d:51:fa:70:
1b:c2:12:e7:1b:2a:0b:7c:b4:ca:df:97:5c:a3:08:
8a:44:9d:9c:43:ce:5f:80:f1:51:49:8a:21:80:4c:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:D6:22:57:04:81:74:67:26:FC:3F:9A:E0:84:13:02:0D:A8:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2fWIlcEgXRnJvw_muCEEwINqF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:c3:52:f9:65:ed:c8:95:4e:1e:ce:7c:53:12:39:77:14:32:
19:86:b4:44:14:b2:30:d6:0a:73:aa:87:66:7f:83:e7:b1:5e:
91:87:1b:d0:17:88:0a:ac:36:88:9d:16:a9:92:72:a2:36:f2:
e3:85:e0:10:54:99:68:d6:75:83:cb:9d:50:ac:3e:d3:88:42:
b2:41:f4:a0:86:59:5b:26:48:5a:19:d3:1c:c8:03:9b:1c:e7:
01:4b:88:08:47:a5:ae:ab:1a:5f:22:a9:7f:0a:39:d8:3c:a1:
80:4c:bf:a4:77:5a:57:12:a4:0d:35:09:ed:e6:76:d1:a2:97:
f7:af:a7:07:59:54:ea:93:e6:38:bc:25:92:e8:57:13:04:45:
3b:f5:6b:88:3d:ee:a7:71:13:d6:5b:5d:27:75:75:bb:17:23:
04:bd:7c:65:db:f6:89:1e:10:9f:c9:ec:25:2a:8e:36:ae:b5:
b5:99:4a:3f:38:55:0f:05:48:50:cb:15:24:bf:91:f6:d7:5f:
08:e0:c5:b1:6f:b6:e8:09:0c:e6:81:38:b7:5a:3b:8e:2d:ce:
a5:dd:40:4d:b3:d7:6d:47:70:14:5c:ef:7a:21:1d:da:95:e2:
fa:a0:0f:14:25:70:a5:79:d3:89:76:93:79:65:08:70:45:63:
5b:32:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:29:34 2025 by rpki-client