Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU_m3XWLhW0DoVrAV-Pnb2FJzDw.roa
File: fU_m3XWLhW0DoVrAV-Pnb2FJzDw.roa (raw, json)
Hash identifier: weadCT2JEgYCYpll3SFphsXKufalVcJmm4bpiMen5zI=
Subject key identifier: 7D:4F:E6:DD:75:8B:85:6D:03:A1:5A:C0:57:E3:E7:6F:61:49:CC:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EF8017947C269663FABA915FDE442D16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU_m3XWLhW0DoVrAV-Pnb2FJzDw.roa
Signing time: Thu 08 Dec 2022 02:11:00 +0000
ROA not before: Thu 08 Dec 2022 02:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:80:17:94:7c:26:96:63:fa:ba:91:5f:de:44:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 02:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d4fe6dd758b856d03a15ac057e3e76f6149cc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:c1:b4:95:0f:a9:b8:b9:7b:20:bc:1b:e6:
da:ca:44:83:d8:76:ff:1b:83:c7:66:79:c3:d6:90:
26:79:7a:85:3e:33:2a:94:ff:d0:c9:0d:f5:68:37:
d9:12:4b:8b:4e:fe:d1:0c:bc:f4:f7:a4:fd:f8:17:
d5:6a:9d:35:2d:d6:09:f3:bd:a8:ba:d9:67:26:c8:
19:d0:35:93:7a:f5:99:9b:89:dd:af:62:f6:65:f7:
fd:f6:a6:4b:1e:79:c0:5b:5f:50:fe:78:5a:62:a0:
1e:93:77:03:7b:ac:3e:06:f5:c7:27:db:99:39:00:
33:48:bb:e2:31:f6:0a:dd:96:52:ec:ec:e4:49:c5:
62:58:0f:78:e1:ad:72:6f:b1:6f:a0:60:0b:c7:0d:
56:22:6e:9a:32:9c:01:39:12:7f:0e:86:82:4e:46:
33:a0:d0:52:bb:6e:f9:5f:26:a3:6d:ff:94:0d:f3:
cd:05:4e:38:42:68:58:cb:41:50:e7:86:b8:1f:f7:
9a:e7:e1:54:a6:66:52:0a:ce:cd:0c:2f:ac:e1:79:
df:80:62:17:dd:0a:79:1c:19:fc:ed:d1:7a:67:50:
b3:33:1d:fd:bc:10:43:c4:77:9a:f8:eb:30:f9:ea:
9d:eb:7a:13:8a:dc:b0:12:d3:4c:2f:3d:2f:63:d0:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:E6:DD:75:8B:85:6D:03:A1:5A:C0:57:E3:E7:6F:61:49:CC:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU_m3XWLhW0DoVrAV-Pnb2FJzDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:5e:98:9a:ee:69:8a:73:5a:f6:0d:f5:11:b3:e2:17:d0:6c:
4d:8a:d5:7a:e6:d3:82:3b:42:e7:3b:ac:dc:ff:ef:c1:b3:04:
51:71:52:48:7c:44:ab:23:2a:e0:2f:7a:a1:d7:33:16:4a:6a:
c1:5a:90:98:d5:32:c6:01:9c:0d:7c:29:42:12:f6:4b:be:c5:
fe:ad:6c:24:b7:47:73:13:c6:19:21:3b:94:44:08:9b:95:60:
ad:cd:59:dc:80:ab:b0:13:e8:a6:ae:5a:f1:3f:4f:4b:de:23:
bd:11:93:79:44:ab:02:74:4d:84:8d:56:5c:53:d8:3b:49:22:
f7:bd:c8:24:d8:0f:a1:5c:d1:f5:df:43:5e:69:7f:f7:ec:e0:
b3:e3:5b:30:0b:81:2c:03:b2:22:ff:8d:f7:3b:30:88:6f:7c:
ff:fe:bd:49:47:11:c7:26:89:cc:be:fd:1d:6f:18:d2:35:7e:
af:07:84:e2:20:76:f2:02:21:bc:de:83:dd:53:21:af:08:ea:
01:1d:98:d5:47:f7:27:b1:f6:17:be:80:53:0f:e9:87:0c:c0:
b0:10:31:cc:da:a0:dd:17:40:20:93:0d:de:91:64:0b:6e:34:
5d:b7:ed:e9:70:87:56:25:f4:72:a7:38:a2:bd:73:73:34:93:
ec:bd:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:01 2025 by rpki-client