Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNcKTySUCPHRTlgNY7jMnueH4Uo.roa
File: fNcKTySUCPHRTlgNY7jMnueH4Uo.roa (raw, json)
Hash identifier: O8FEY5IqxQsXpVxYuwLJYWFjFt0rGoDIVD0JcVIivaE=
Subject key identifier: 7C:D7:0A:4F:24:94:08:F1:D1:4E:58:0D:63:B8:CC:9E:E7:87:E1:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018518AD175B04DA37E8CB8055C33DBB5B6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNcKTySUCPHRTlgNY7jMnueH4Uo.roa
Signing time: Fri 16 Dec 2022 02:04:34 +0000
ROA not before: Fri 16 Dec 2022 02:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:18ac:b17d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:ad:17:5b:04:da:37:e8:cb:80:55:c3:3d:bb:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 02:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cd70a4f249408f1d14e580d63b8cc9ee787e14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:8a:50:03:6f:64:75:20:51:a9:f5:db:70:
b0:cd:b5:00:40:97:e0:28:d0:3a:4e:26:19:27:02:
7a:4f:56:b5:c7:60:18:13:b4:f4:8a:3b:39:eb:e4:
1d:a8:b6:59:42:15:eb:12:3e:14:85:15:05:e0:f9:
08:4b:8b:7c:4a:3d:9b:d8:8c:62:6d:76:4b:52:ed:
c3:95:39:f4:14:6a:cb:b5:ba:da:f5:d8:ac:01:bb:
ae:5c:b7:4d:e3:84:ab:9f:d6:73:5d:30:62:37:6f:
d1:1d:62:44:9c:31:36:51:17:06:3a:ab:9a:07:70:
ab:d2:58:b8:dc:c8:1e:b4:9d:6a:25:2d:2c:72:cd:
50:92:e9:5f:dc:0c:c6:cb:77:b2:33:0f:14:b2:99:
e4:51:4e:93:b6:00:1d:eb:64:2b:e8:83:be:b6:d9:
ab:4b:bc:87:0a:e9:87:1e:bf:cb:30:37:9f:2c:4d:
ce:0f:2a:4a:69:97:b9:f2:2b:f1:fc:4a:f0:52:85:
79:05:a1:f7:11:0d:d0:ec:27:e1:aa:de:79:5d:47:
5c:ba:a2:73:ce:3f:d5:da:65:a9:cb:35:9a:ba:4c:
04:33:5d:ba:00:a5:91:8c:55:09:a0:5a:5f:e0:fc:
af:6e:76:af:17:77:85:cd:52:7e:cc:de:08:0d:d7:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:0A:4F:24:94:08:F1:D1:4E:58:0D:63:B8:CC:9E:E7:87:E1:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNcKTySUCPHRTlgNY7jMnueH4Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:4f:89:47:f0:2e:e8:3a:99:16:cf:2a:43:e1:48:7e:a4:45:
5a:e2:a6:cb:c9:a5:8b:73:43:2a:07:51:0b:6a:2e:74:31:54:
30:ff:b0:04:2e:64:bd:f3:a1:36:71:a0:93:35:b7:4b:a9:b9:
48:93:3b:cb:3e:5e:20:24:60:13:4f:d1:20:21:3f:fc:e6:0d:
b6:65:72:b8:f9:70:be:b2:b9:5b:9d:87:79:3a:07:e6:a1:d3:
c4:0e:79:e0:e3:56:12:69:60:5f:61:8a:c8:3e:cc:aa:92:26:
32:bf:76:1f:3f:51:f3:71:76:0d:d4:64:1b:9b:f8:d5:5f:3a:
7a:69:cd:4c:03:5b:8a:b6:5e:9a:e3:0a:68:63:7e:c4:ce:fa:
29:eb:ff:01:08:e0:dc:ee:f4:fb:f7:68:85:fb:7f:ea:55:04:
34:06:7a:e7:2a:e8:12:8d:39:d0:19:1c:c8:1a:01:29:83:30:
87:95:f3:43:43:67:19:2f:0f:fd:15:ad:93:18:be:8f:9b:bf:
92:ec:fc:68:bc:98:27:94:63:4c:8b:b1:1c:8c:33:44:9c:a7:
3e:fe:cf:6b:f1:e8:f1:51:43:f4:96:06:19:48:4f:10:5e:c4:
f9:13:6f:9e:b5:68:27:88:fb:e5:c9:db:b2:8c:da:eb:e3:21:
6d:d1:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:20:50 2025 by rpki-client