Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTCoVKC_fGnzPT_bgTAyf-pTbJA.roa
File: fTCoVKC_fGnzPT_bgTAyf-pTbJA.roa (raw, json)
Hash identifier: EU8rYcpW9s9VtLeLGZdzOyOSYAZgC75+kFcwz3xl29s=
Subject key identifier: 7D:30:A8:54:A0:BF:7C:69:F3:3D:3F:DB:81:30:32:7F:EA:53:6C:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 703980DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTCoVKC_fGnzPT_bgTAyf-pTbJA.roa
Signing time: Sun 06 Mar 2022 14:10:13 +0000
ROA not before: Sun 06 Mar 2022 14:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882816734 (0x703980de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 14:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d30a854a0bf7c69f33d3fdb8130327fea536c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:fe:95:c2:26:87:5a:1a:f4:fb:33:f8:c3:
4b:2f:cf:02:7b:fd:01:9c:8d:4a:b5:56:dd:3f:8f:
0f:14:e1:dd:9b:95:56:8a:75:ec:c8:50:45:67:61:
58:2b:78:f9:b5:19:82:19:b1:1e:7e:4d:1e:57:26:
04:eb:74:7e:61:6e:4d:e6:fc:e7:db:94:84:f3:a4:
d2:b0:41:23:28:a6:e6:d7:ba:85:68:7f:66:2f:cd:
ea:a2:21:b7:2e:d0:c7:52:dd:27:eb:87:5a:16:11:
97:a8:66:7d:d3:57:ce:da:37:a5:e1:76:94:99:21:
aa:1b:40:66:23:5f:a2:2e:21:71:58:93:f8:5d:66:
a3:51:8e:f6:a8:a5:7f:08:59:17:8f:89:74:11:e3:
64:ea:15:99:70:2d:f7:f5:f5:09:e4:d6:0c:2d:78:
73:a6:3a:40:70:05:81:e3:dc:f9:c9:e2:6e:ae:51:
04:02:02:5d:7a:91:1a:1b:e8:f2:1e:b1:6a:3f:35:
47:03:77:25:3d:cb:4c:90:a1:7f:42:40:2e:01:f4:
6f:ae:cd:aa:d0:d0:97:d4:7c:ca:14:1a:ab:1c:4a:
e6:7d:d6:86:4e:c0:32:63:cd:2d:92:f8:ff:13:8f:
5d:1c:ec:f6:3d:bd:d5:98:0a:80:7e:84:46:2d:bd:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:30:A8:54:A0:BF:7C:69:F3:3D:3F:DB:81:30:32:7F:EA:53:6C:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTCoVKC_fGnzPT_bgTAyf-pTbJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:a7:29:3c:6a:7d:42:40:e1:0c:78:f8:49:87:aa:7b:57:59:
fd:2d:65:ca:c8:63:bd:b7:d0:56:00:d4:d8:ed:e1:37:97:03:
67:d5:07:43:2d:e1:2c:e1:dd:0d:a6:85:ec:c9:27:99:0e:22:
2c:ca:e4:9e:79:1c:1f:cb:21:0c:2e:e3:e3:18:be:29:33:16:
58:de:fc:ae:7b:67:c6:76:a7:a3:cd:c9:99:6f:12:e9:d8:13:
2f:8c:ee:b2:03:cd:d2:25:13:87:24:dd:4d:16:25:16:ab:1f:
4c:76:9e:12:ad:0a:b9:89:ff:0c:7a:ee:5b:6a:7d:59:16:8c:
73:16:33:e6:9f:a1:a9:32:3c:53:a2:66:9d:63:77:8c:94:18:
fe:7d:b0:c0:46:07:f8:95:04:ec:1a:5b:b6:60:fc:fa:f0:8a:
13:71:68:10:7a:1b:09:f1:92:d6:fd:fb:0d:d5:65:44:ec:6d:
a5:c3:93:df:85:09:bf:e1:46:e9:51:19:bb:e1:9d:e2:ba:92:
b0:32:1e:5e:65:f9:47:6d:ce:98:e3:e6:04:14:ca:cb:6c:56:
fd:c9:16:14:80:1c:30:65:62:88:ab:4d:55:b1:56:ae:cc:71:
94:81:a9:f4:97:97:2f:88:76:b4:48:00:84:a3:26:44:f7:40:
90:8d:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:38 2025 by rpki-client