Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fV1PHuYT6IekIts4-j9jtGyLaXU.roa
File: fV1PHuYT6IekIts4-j9jtGyLaXU.roa (raw, json)
Hash identifier: 6iRYCFQJC3WXXWgU8JPsv++ZOM59ygOgGSgPiUJkQWM=
Subject key identifier: 7D:5D:4F:1E:E6:13:E8:87:A4:22:DB:38:FA:3F:63:B4:6C:8B:69:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018258E55ED3B6C6324089963DAB0DACE53E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fV1PHuYT6IekIts4-j9jtGyLaXU.roa
Signing time: Mon 01 Aug 2022 10:13:23 +0000
ROA not before: Mon 01 Aug 2022 10:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:e5:5e:d3:b6:c6:32:40:89:96:3d:ab:0d:ac:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 10:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5d4f1ee613e887a422db38fa3f63b46c8b6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:99:30:01:2b:2d:86:f7:37:67:79:c8:a9:
83:8a:cd:bf:a2:21:fe:84:11:83:29:e0:24:0b:37:
16:03:6d:82:02:85:45:7e:d7:62:24:5b:5f:4b:07:
ef:7f:63:79:62:d5:b3:5e:d1:4d:4d:77:af:8c:30:
51:1f:27:1d:6c:dc:15:83:aa:a9:c4:4a:9d:88:de:
d6:6d:1a:18:b2:e1:a1:de:c2:74:9b:c8:58:8e:db:
50:84:29:5d:d2:ff:af:49:b5:d0:6a:f8:b0:d8:f3:
4f:f0:87:47:a1:2f:c6:fa:72:80:f0:cd:f2:28:11:
75:d2:74:19:5b:e5:a5:d8:0a:15:c9:aa:d7:f9:62:
7c:d1:8c:ef:67:fb:43:8b:a6:64:e1:48:59:6f:2b:
a0:9f:42:bf:d4:b3:cd:f8:3d:56:dd:2b:1e:99:0f:
1f:83:ea:69:ed:eb:34:e6:ea:97:0a:d9:3e:41:a2:
c2:19:05:78:0d:23:90:30:9e:fc:91:db:89:2f:40:
58:7b:db:d6:93:d7:35:44:f3:4f:04:48:12:00:50:
35:63:d9:e8:99:5b:26:62:d7:bd:13:cd:f2:f7:e8:
14:1d:62:27:f6:6e:47:ae:64:7e:b6:e5:c1:b5:16:
20:23:96:6a:94:49:a6:02:bc:0f:ec:24:c8:cb:cb:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:4F:1E:E6:13:E8:87:A4:22:DB:38:FA:3F:63:B4:6C:8B:69:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fV1PHuYT6IekIts4-j9jtGyLaXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:78:da:4c:67:73:1f:e8:93:6e:c4:52:31:50:5e:b5:ff:90:
1f:0e:62:74:b8:3d:2e:62:99:1b:bd:e0:82:0c:d6:a9:46:db:
5f:ca:cb:b3:cf:09:a3:04:bc:46:df:01:01:ba:25:49:b5:7e:
7f:d8:6a:94:93:64:7b:7a:5b:79:90:da:b1:80:78:f3:63:de:
c3:53:0a:3e:1b:c3:3b:99:b8:49:78:e6:9f:a4:1c:e4:a3:1f:
04:1b:3d:04:00:9e:ad:28:73:4a:29:a3:b0:c1:a1:f8:73:1c:
ec:90:6e:bb:6e:c4:4e:af:6c:1d:88:2a:fe:fd:d9:6f:5d:bf:
b5:7c:45:37:be:3e:99:85:69:8d:bd:16:5a:d1:65:98:11:0f:
bc:94:6e:33:c3:c9:dc:9d:c7:08:31:3e:b0:e7:39:fd:c0:5d:
c6:b6:29:41:f1:61:84:78:a8:74:25:37:9d:b9:25:9d:06:0d:
ab:60:68:aa:97:60:89:7e:23:6b:a1:2e:3c:8a:4d:d6:1b:c9:
19:ce:93:fa:20:f8:2f:5a:7c:3c:de:dd:d1:5f:29:b4:6e:a4:
bd:14:32:b5:e3:3e:5e:e2:c0:cc:ce:7a:5f:1f:5c:51:6a:97:
68:49:9e:00:97:5e:46:36:14:eb:eb:d9:0f:be:bb:5d:34:a3:
86:c1:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:29 2025 by rpki-client