Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_hBvoFA47u5Z-17U3zOAUNd2jg.roa
File: f_hBvoFA47u5Z-17U3zOAUNd2jg.roa (raw, json)
Hash identifier: 8k+FDVcNIXqu4y3gkmxR3If4s8LlUqx6keH+/yg35vs=
Subject key identifier: 7F:F8:41:BE:81:40:E3:BB:B9:67:ED:7B:53:7C:CE:01:43:5D:DA:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A7A5F02B9D46D6C8B37FFAA64D7096DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_hBvoFA47u5Z-17U3zOAUNd2jg.roa
Signing time: Wed 05 Oct 2022 10:16:53 +0000
ROA not before: Wed 05 Oct 2022 10:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:a5:f0:2b:9d:46:d6:c8:b3:7f:fa:a6:4d:70:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 10:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff841be8140e3bbb967ed7b537cce01435dda38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:e6:02:4e:fc:88:9e:37:55:1f:e2:0d:74:
3c:14:95:81:b1:15:4d:1c:42:ef:ec:80:cc:6d:51:
82:c0:65:5f:34:99:ec:32:98:2d:48:37:e7:f9:62:
55:a2:59:96:55:ff:73:25:39:aa:db:ef:9d:ea:5e:
2b:6a:e3:13:09:10:ac:c4:a4:c5:11:a1:8a:ba:a4:
83:e6:00:9e:89:72:60:10:a5:49:cd:48:ce:fc:d9:
e8:47:d9:ec:2c:94:82:dc:89:00:08:3c:49:b3:78:
7f:8f:75:eb:67:a9:d7:ef:5a:43:5f:8e:02:d1:53:
4f:5e:44:7c:24:62:05:03:6c:fa:43:a1:72:4d:c7:
35:84:0e:1d:c7:07:64:c4:99:7f:1c:4f:f0:92:ae:
e2:d2:39:15:be:87:16:95:ad:27:fc:3d:b3:51:9d:
a7:86:d5:3f:7c:a1:51:cf:dc:20:31:59:bf:3e:c6:
69:30:6e:7d:c7:36:c1:ff:97:41:8a:61:31:4b:a4:
dd:e1:39:50:ea:56:e2:55:5e:4b:8d:9b:20:37:8d:
b8:a4:3e:a3:38:0c:cc:38:d2:2c:7f:e4:0d:cd:07:
15:c8:45:43:ff:ab:c7:60:f3:0a:59:4f:c0:e2:fc:
71:80:2e:f6:02:5c:bb:61:a0:0d:15:4e:3c:80:a7:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:41:BE:81:40:E3:BB:B9:67:ED:7B:53:7C:CE:01:43:5D:DA:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_hBvoFA47u5Z-17U3zOAUNd2jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:54:e1:eb:6d:f6:e2:fd:80:7f:c3:d1:d0:00:a5:27:59:50:
f5:a7:f2:ff:4e:2e:3e:35:9d:90:dc:e9:6c:98:5c:85:de:a2:
14:51:18:a2:6d:ef:b0:f6:77:47:34:0e:f4:d6:44:be:ac:d5:
82:67:7d:22:07:69:c0:a8:c8:18:5c:10:1f:15:fa:37:31:c0:
82:50:14:dc:c4:7c:83:b1:b0:c9:e8:ec:59:01:ff:4e:7c:b4:
0f:60:41:1f:b0:51:db:d5:c4:dc:86:6e:b0:a7:9c:5c:64:57:
b5:4b:6a:7a:e3:b4:58:98:18:2e:0e:05:27:1e:c7:44:c3:06:
8e:93:54:71:18:a3:e7:21:eb:e2:40:bc:82:5f:ce:e6:49:84:
3b:7c:97:40:8d:df:05:15:a3:7d:1c:47:cb:f3:6c:3c:42:60:
30:b4:bc:3d:6f:03:8b:34:3f:2d:dd:c8:ee:c3:13:f0:1e:f3:
aa:e0:1a:fe:f4:32:04:01:f0:83:9e:a8:60:54:fa:83:35:dd:
22:12:cf:5e:20:07:10:fd:aa:eb:b2:e7:c3:81:6e:2b:7a:cf:
80:0c:3c:1b:12:00:85:75:e3:6f:0d:d2:cd:69:f3:89:ca:e8:
35:de:7c:04:b5:31:a5:6f:ff:22:f6:2c:d5:e0:c7:78:79:81:
5e:46:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:40:01 2025 by rpki-client