Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fC64Ys5GxmUKH3VoNt93eVzpQ2Y.roa
File: fC64Ys5GxmUKH3VoNt93eVzpQ2Y.roa (raw, json)
Hash identifier: 8xTC7UAqJmNvs2bMwJ8RvdhMuF7w5WH3Q78nzgktTjE=
Subject key identifier: 7C:2E:B8:62:CE:46:C6:65:0A:1F:75:68:36:DF:77:79:5C:E9:43:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018412B303ED5A5FB7D9C0026189E5505755
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fC64Ys5GxmUKH3VoNt93eVzpQ2Y.roa
Signing time: Wed 26 Oct 2022 05:10:32 +0000
ROA not before: Wed 26 Oct 2022 05:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:b3:03:ed:5a:5f:b7:d9:c0:02:61:89:e5:50:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 05:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c2eb862ce46c6650a1f756836df77795ce94366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:45:3b:5f:14:5f:fe:9e:50:cf:11:ad:e8:
5b:f1:c9:b4:1c:9a:6a:4c:c1:6d:6d:6c:dd:39:55:
6f:8f:f8:6c:d9:c0:9a:7b:b2:ef:63:12:5c:ab:3d:
19:8b:15:a8:d2:82:0e:ce:fa:82:08:4f:30:7c:4f:
00:9a:2b:b8:84:95:67:64:fc:50:e6:91:a6:f3:6e:
e7:6e:77:89:64:88:78:22:cd:60:8a:e2:49:08:07:
fc:ce:c7:a0:5d:8f:d7:57:e9:60:e6:ca:b5:7c:a5:
70:7a:a3:fd:7c:35:42:36:24:52:e5:a6:80:96:32:
50:5e:b7:e5:47:e5:b3:e9:3b:2e:57:0c:0d:2f:d5:
df:50:12:53:3f:7f:d2:85:56:b2:3f:01:d0:b7:a6:
71:3d:46:36:0a:12:a7:6a:d3:a5:44:38:91:1e:04:
8e:d3:de:93:e4:64:d0:12:c6:18:78:39:13:6c:ad:
be:44:67:6d:06:5d:f0:dd:b0:39:54:be:d7:7a:72:
c2:fa:8a:63:3f:6c:3c:c2:01:ab:08:aa:ee:f3:ec:
67:6e:90:a4:22:40:93:6c:06:dc:ce:28:6e:59:8e:
d0:f3:25:bc:07:8f:c8:26:fe:cb:eb:d4:ef:df:a7:
d1:2c:0a:4f:91:0f:b4:22:48:f9:83:a2:75:63:f6:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:B8:62:CE:46:C6:65:0A:1F:75:68:36:DF:77:79:5C:E9:43:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fC64Ys5GxmUKH3VoNt93eVzpQ2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:e2:26:3c:7b:fa:5c:48:53:15:15:be:42:17:07:bf:1f:df:
eb:d4:54:21:d8:aa:aa:f1:e2:03:01:e0:a7:de:09:53:65:e6:
fd:99:77:45:dc:89:c1:a7:97:94:28:01:de:27:be:a8:ee:36:
1c:c0:14:71:27:37:8f:d1:0e:21:32:b3:d3:a3:51:38:a9:a0:
76:b9:69:5a:41:2a:22:01:f7:df:b4:b3:90:3f:f5:1c:c8:49:
db:ac:89:12:12:aa:88:9e:cd:72:74:24:c5:a9:ce:7f:ae:6b:
d7:16:28:05:26:fd:bd:9a:27:d3:8a:e4:3c:af:56:cd:03:39:
ef:cc:46:f7:bb:1b:86:62:28:cd:4a:03:df:7f:c4:60:1c:88:
20:f3:17:46:f9:98:b8:94:a6:9a:fc:a1:4a:72:b4:c4:41:45:
e5:46:5b:80:02:c1:ec:03:00:49:86:78:25:15:4c:50:98:25:
72:eb:30:00:72:52:63:c7:81:dd:5e:7b:48:c9:ab:72:3d:e4:
b9:ec:e2:a9:dd:88:94:0b:06:dc:c3:ab:56:c1:80:45:4a:34:
9a:53:36:1e:a7:6f:ce:43:a8:ed:96:5a:ec:ec:ac:da:db:bb:
78:d0:60:8d:88:17:19:db:44:f0:45:8c:b9:34:79:45:15:9f:
1b:3f:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:16:08 2025 by rpki-client