Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTPD_i9RCylewKm6tMr4f62uC5A.roa
File: fTPD_i9RCylewKm6tMr4f62uC5A.roa (raw, json)
Hash identifier: oUy/wmqc6P53ulrXrZ7x7V/CkdSRIdDT/mqYWtXCAJI=
Subject key identifier: 7D:33:C3:FE:2F:51:0B:29:5E:C0:A9:BA:B4:CA:F8:7F:AD:AE:0B:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CD3C388
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTPD_i9RCylewKm6tMr4f62uC5A.roa
Signing time: Tue 22 Feb 2022 18:24:50 +0000
ROA not before: Tue 22 Feb 2022 18:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825817480 (0x6cd3c388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 18:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d33c3fe2f510b295ec0a9bab4caf87fadae0b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:94:dc:4c:43:14:45:79:c6:64:8d:6f:06:
5f:5c:d4:6b:93:f1:4e:e1:02:aa:40:3b:a1:75:ba:
9a:0b:99:88:fa:40:f7:74:04:38:2c:38:bc:26:4b:
41:86:fa:65:65:d2:aa:7d:9d:53:9c:05:27:a6:96:
15:9f:e0:f0:3f:45:04:44:ca:50:e0:5a:3b:ea:9f:
71:60:d4:2a:ad:b4:6a:3d:f0:1e:30:23:9e:f4:3f:
38:cd:32:29:9b:ad:a5:0d:2d:8a:64:a3:45:83:a8:
44:8c:db:00:12:b9:da:83:c6:49:2b:f5:08:f6:fd:
9d:39:21:2a:0e:0e:d8:f3:93:d7:89:da:c5:1f:b8:
b9:7d:7a:1d:ce:2a:23:8b:33:4f:70:cd:ba:0b:c1:
5f:a3:ed:e2:d7:55:c4:d0:b9:91:f6:f8:cd:43:d6:
d0:7f:b6:76:aa:a7:a4:2c:d2:99:9a:4f:8c:f5:32:
72:c3:3f:2c:5b:e6:38:e4:ef:ee:ce:35:26:75:ba:
03:2c:75:9d:ca:2a:12:a9:b2:36:07:89:4d:61:05:
de:8b:3e:6a:f9:14:7a:6a:aa:c5:55:0e:35:eb:66:
5e:57:6f:80:46:b0:f2:3a:66:9a:c8:8e:f4:2c:eb:
d7:fa:58:b5:6f:14:07:e8:d6:ef:ce:46:36:7c:2e:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:33:C3:FE:2F:51:0B:29:5E:C0:A9:BA:B4:CA:F8:7F:AD:AE:0B:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fTPD_i9RCylewKm6tMr4f62uC5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:46:e2:bd:e4:6c:9a:ad:fc:fd:d1:0c:6b:3d:b0:a2:09:46:
64:cb:ae:8a:d0:f0:9e:5c:e5:95:e4:30:10:63:b7:b9:61:df:
59:72:8f:44:1e:e4:49:a8:81:78:fd:2a:d0:8c:62:01:f2:5f:
f5:54:30:b9:95:5f:ef:1d:69:3c:7a:ec:4c:2c:52:31:0f:d8:
db:6c:c9:e1:76:3f:fa:b7:09:2c:a1:cb:44:22:90:64:5f:62:
e7:7a:99:9d:39:5a:93:31:45:40:78:d6:a9:55:bf:b1:a0:d7:
ed:a7:cf:5c:d0:d0:cc:56:59:5a:40:42:2b:81:33:f9:8c:f0:
6e:8f:8a:a5:cb:a2:ec:18:3a:ef:61:63:00:2c:48:93:96:23:
df:16:a8:dd:1a:c9:78:fc:ba:67:68:40:2a:78:56:49:b8:cc:
61:9b:9a:75:bc:79:e2:81:13:20:2d:4c:1d:b9:e6:8e:42:d3:
63:34:cc:f9:a1:94:7d:ea:bd:5b:8e:3a:88:f9:78:31:01:02:
23:87:fb:9b:c5:02:ec:91:1e:5f:eb:0a:61:0d:17:09:7a:1e:
59:53:86:a8:46:7b:82:fd:87:db:2c:6c:23:b6:80:93:c1:d2:
98:ba:c8:44:4b:d1:ac:31:d4:cf:4a:09:b3:d8:de:90:33:6d:
da:b2:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:07 2025 by rpki-client