Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSvTSj0nUuFsamK_ZQhPgjuHX1M.roa
File: fSvTSj0nUuFsamK_ZQhPgjuHX1M.roa (raw, json)
Hash identifier: x6GshpWp28SR8B9lqPQzadP6orhif05kC7rGGDpzYB8=
Subject key identifier: 7D:2B:D3:4A:3D:27:52:E1:6C:6A:62:BF:65:08:4F:82:3B:87:5F:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182ED9C65D7A03A0D22220EC13EE1FFAA02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSvTSj0nUuFsamK_ZQhPgjuHX1M.roa
Signing time: Tue 30 Aug 2022 07:17:06 +0000
ROA not before: Tue 30 Aug 2022 07:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:9c:65:d7:a0:3a:0d:22:22:0e:c1:3e:e1:ff:aa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 07:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d2bd34a3d2752e16c6a62bf65084f823b875f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:d2:19:b6:82:13:cb:0e:29:3a:0d:aa:61:
f1:2f:8e:43:24:b0:ec:15:0b:3f:05:66:26:e4:3e:
f1:ec:c2:fd:85:cf:18:5b:96:08:a1:a8:42:63:11:
de:df:f9:4c:e4:0c:65:4c:39:a1:90:ab:6f:9a:e3:
35:42:c8:5e:5a:e7:77:a1:48:aa:93:d9:95:e8:8f:
40:50:a0:6c:6d:b7:85:c6:05:1f:29:91:bb:74:98:
8c:a2:aa:28:50:5f:64:33:f0:2b:ae:6d:f2:52:a1:
40:68:a1:2f:d8:3c:fc:54:f1:58:cc:96:80:23:f9:
8a:f0:8b:5e:db:24:ae:a5:3c:41:15:66:ba:4b:a0:
ea:42:1f:d5:0e:fe:53:4e:f2:89:29:b7:e6:06:87:
23:43:d2:cc:67:50:6f:34:3e:9d:c2:6a:9c:57:19:
8d:b1:29:c4:e5:a0:85:80:9c:79:90:df:e3:8b:36:
d1:c4:d9:ef:0e:fd:45:fd:26:5e:57:f3:44:ce:28:
d2:77:41:8e:29:9e:c3:9d:7b:f5:2f:d2:9b:50:2c:
b0:5e:a2:fc:83:73:1c:76:4b:12:94:69:ed:f7:f1:
d1:2b:21:35:9f:21:88:69:84:62:98:4e:d1:08:f4:
e2:e0:2b:f5:46:5e:e9:11:25:04:e0:ef:16:48:fc:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:D3:4A:3D:27:52:E1:6C:6A:62:BF:65:08:4F:82:3B:87:5F:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSvTSj0nUuFsamK_ZQhPgjuHX1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:8d:8f:72:63:08:ab:f3:b3:7e:91:ae:a0:5a:25:0c:9e:5c:
b9:e0:c0:1d:99:6d:a3:11:7e:99:86:08:8c:bc:d5:00:1c:2e:
e8:0b:b6:ab:96:1e:83:6f:b3:76:5c:6f:0c:da:da:91:0f:dd:
67:64:7a:24:11:b1:21:60:e4:ba:17:65:df:67:b5:a9:f0:4c:
76:75:58:cf:52:5c:4a:11:88:b3:35:e0:ba:a2:7b:a0:00:2a:
d7:da:f9:7b:c0:12:29:15:60:fa:72:bf:d6:48:8a:86:be:28:
99:21:a3:ac:49:b8:8b:06:0c:ac:2a:d0:a6:b0:d9:55:2a:20:
7c:71:e6:ce:8f:1f:46:46:c1:12:2b:2a:e2:52:99:d2:be:78:
7c:97:5d:77:ff:9c:f1:e9:5a:3e:28:3f:c8:02:d2:ed:02:73:
2a:68:78:df:e2:10:d5:1a:e2:82:6b:99:f4:d9:1b:eb:8a:d7:
9e:b1:44:69:7a:fa:0a:08:31:8b:34:67:e9:25:24:a4:16:35:
7f:62:b1:fd:33:54:cf:f0:c4:91:e3:e7:9d:23:e5:65:9c:c5:
08:76:0c:a2:ef:fb:49:f4:98:fd:ab:bd:1f:5b:43:9f:e6:bc:
ea:71:c3:c9:53:80:b1:4d:37:1c:46:d5:1a:78:72:3b:97:42:
cb:f9:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:46 2025 by rpki-client