Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDFYJBPh70RJSr1WHCzjZ4I1v9M.roa
File: fDFYJBPh70RJSr1WHCzjZ4I1v9M.roa (raw, json)
Hash identifier: /oGXuJtLgs2I0TcPT95LgiOGM2xByIA7aGpVcVGdwZk=
Subject key identifier: 7C:31:58:24:13:E1:EF:44:49:4A:BD:56:1C:2C:E3:67:82:35:BF:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AC6C1C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDFYJBPh70RJSr1WHCzjZ4I1v9M.roa
Signing time: Tue 12 Apr 2022 21:09:23 +0000
ROA not before: Tue 12 Apr 2022 21:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059846086 (0x7ac6c1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 21:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c31582413e1ef44494abd561c2ce3678235bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:1d:b3:14:65:bc:2c:7d:72:f4:d8:1a:9f:
22:c5:02:9f:27:e8:bd:08:09:81:d4:e1:61:b2:79:
9e:79:76:1c:34:f9:47:c9:2e:67:09:59:d5:ff:0e:
98:d8:81:7a:ad:b7:28:a3:0a:f1:8d:62:42:5c:9a:
e3:cc:61:42:55:d3:16:34:94:19:2a:fe:87:c4:9b:
66:15:47:15:fa:9e:f9:6e:c2:17:95:a4:d6:1a:d7:
03:a6:4b:bf:f5:14:11:b5:23:25:02:d0:ab:a7:7b:
71:80:65:db:fd:91:e0:72:ee:c8:f6:29:af:4d:94:
c7:0e:97:84:6f:28:05:01:81:bd:19:a9:39:b1:6b:
67:ce:a4:3b:2a:1b:f8:f8:69:43:10:1d:58:1d:06:
85:39:49:19:8d:a6:08:6c:46:9d:84:9f:35:cd:c1:
ed:ec:e6:5d:ce:f4:4f:a9:11:0b:39:24:c7:50:d8:
49:bd:fe:4f:03:bf:e1:d6:0e:c5:f9:db:5c:63:3a:
bb:aa:88:c9:a4:3c:eb:92:cd:56:ea:e4:56:9a:2c:
32:06:ec:24:ba:bc:db:f4:4c:e3:88:78:12:01:10:
b9:37:ed:4f:5c:72:41:98:32:1e:31:45:c6:f4:e7:
b5:db:fb:28:b7:c8:31:9a:6c:a7:01:00:6c:57:9c:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:58:24:13:E1:EF:44:49:4A:BD:56:1C:2C:E3:67:82:35:BF:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDFYJBPh70RJSr1WHCzjZ4I1v9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:c7:db:a8:1b:a5:de:08:68:44:e0:94:50:c3:b7:b0:a8:d9:
44:76:db:35:a2:af:09:f3:2e:49:b0:bd:d4:ee:82:95:0e:4f:
36:cd:b9:41:26:5b:e4:59:ca:8e:51:bf:d0:ab:4a:85:a9:56:
00:b3:89:5e:95:87:2f:19:f9:80:42:8b:a5:9f:2c:5e:1a:7c:
f1:a7:b8:95:91:38:70:23:00:e9:d0:1c:c0:31:ef:65:18:7b:
d1:04:22:07:32:b7:96:73:af:4b:fa:bb:b0:fb:ee:6a:0f:df:
0a:87:e6:75:c2:3b:80:ab:2f:cb:d9:5a:57:13:e7:ab:64:96:
5b:f0:b7:58:96:b9:1a:36:a7:3f:b4:99:e3:ec:4a:51:bc:04:
7b:28:18:60:eb:a8:1c:0d:f5:8f:4a:0d:f8:e5:66:2b:38:3d:
dc:20:fc:4a:57:41:95:9a:bc:02:48:2e:8c:e0:ee:8f:9c:08:
39:dc:83:f5:02:46:dc:af:ee:cd:bb:bb:ec:f6:69:21:fa:4c:
b6:bc:6f:f4:61:40:79:1d:26:a5:ea:86:99:94:a1:75:00:bf:
7c:7d:79:fe:78:06:a7:41:f2:92:e3:ca:b1:0d:cc:a5:b2:9f:
73:cc:a0:bd:6b:bd:55:82:a0:3a:d4:ce:a6:e5:22:c6:e5:33:
9d:8e:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:55:41 2025 by rpki-client