Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2kdP3u1Cy7c7ZPN0RHmqeOYF0Y.roa
File: f2kdP3u1Cy7c7ZPN0RHmqeOYF0Y.roa (raw, json)
Hash identifier: 1a2g0NLJqZV6ZwS6SMMoyuE3SJs5QdMTa1p+G6lFH+Y=
Subject key identifier: 7F:69:1D:3F:7B:B5:0B:2E:DC:ED:93:CD:D1:11:E6:A9:E3:98:17:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185526B4C753798A1820DB2391A0BBBA29D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2kdP3u1Cy7c7ZPN0RHmqeOYF0Y.roa
Signing time: Tue 27 Dec 2022 07:10:41 +0000
ROA not before: Tue 27 Dec 2022 07:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:6b:4c:75:37:98:a1:82:0d:b2:39:1a:0b:bb:a2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 07:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f691d3f7bb50b2edced93cdd111e6a9e3981746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:55:c7:93:47:d3:29:20:a1:b2:1f:57:9a:
36:9c:be:f5:8f:ce:46:4a:71:c6:46:5f:84:77:02:
7e:a6:61:3a:80:9e:87:5d:fe:b7:af:b3:fa:cf:d2:
9d:3c:72:1d:b3:aa:68:f4:59:b9:a4:3c:15:db:97:
83:cd:75:f9:f1:fd:3e:92:32:0e:59:49:7b:9a:7b:
36:be:73:ef:4b:18:7d:9f:78:57:e0:d1:f9:b6:2e:
6f:18:58:a4:ba:e5:ee:5e:36:36:09:5b:42:4d:e6:
b8:61:9e:4d:46:fb:aa:f5:5b:c6:4b:a9:36:1a:96:
a3:d3:20:c3:ab:b5:c9:93:1e:af:31:2b:08:04:1d:
f3:4a:a0:ae:98:ee:ff:61:b1:1c:67:f9:8b:8a:31:
ce:dd:8f:73:41:6c:46:2d:f7:b6:f6:43:84:39:be:
f3:cb:e0:f1:82:79:31:04:45:1c:ff:c1:86:92:a4:
9b:34:57:4c:15:f3:42:d8:34:72:5c:3f:c8:0e:b1:
bb:84:48:51:10:9a:5b:11:fa:5c:b9:5b:fb:36:76:
06:b0:76:5d:70:54:7e:6b:b9:c6:27:e5:a9:df:13:
ac:e5:44:4a:7f:87:20:f6:bb:cc:d1:46:2d:35:3a:
91:fd:ca:07:f8:45:15:cb:64:9f:cc:8c:94:d9:96:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:1D:3F:7B:B5:0B:2E:DC:ED:93:CD:D1:11:E6:A9:E3:98:17:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f2kdP3u1Cy7c7ZPN0RHmqeOYF0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:a5:8a:fe:4c:26:a2:54:ce:f8:4b:38:f3:f0:48:a7:e2:5c:
79:b5:67:75:be:fb:b1:92:4f:f3:88:a2:8a:2d:dd:2f:85:16:
18:89:47:71:cf:e5:29:4c:7c:e3:8b:82:fc:3a:02:d2:bf:22:
bf:26:23:59:9b:b0:da:6c:07:f1:d7:e6:6b:e9:e9:0f:e1:2c:
b7:58:20:fa:90:9e:73:d1:76:b3:28:87:8c:06:e1:0e:9e:eb:
9e:43:2d:45:2e:ce:19:41:0c:80:93:85:4d:2d:f4:ee:c9:39:
38:82:1d:87:67:e4:52:7b:50:ca:98:ff:fc:70:91:af:cb:ff:
e0:c2:3e:a8:ae:fe:0c:1a:97:67:82:3a:7e:c6:8b:2b:0e:0c:
07:a2:16:dd:ff:56:c6:7c:c1:0a:9f:7e:39:07:cd:de:0e:0b:
0c:3f:4e:75:5a:8a:2f:9e:cd:f8:cd:d1:3f:0d:32:a4:91:ff:
9e:53:84:37:85:87:95:88:75:7f:0f:82:f1:3d:5a:b4:a1:72:
80:17:ae:19:e8:53:96:e0:05:df:c4:c9:73:3e:90:3a:a6:67:
fb:0f:1e:b2:c7:75:b4:8c:37:f2:14:c3:7d:a2:7d:c4:61:8c:
79:1d:2b:dd:7a:e6:d7:98:70:b8:02:a9:d4:8e:35:b0:c4:be:
15:5d:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:22 2025 by rpki-client