Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/faiJFKeGrguIhc4hCEC7stVKw90.roa
File: faiJFKeGrguIhc4hCEC7stVKw90.roa (raw, json)
Hash identifier: IVTw+mnfsCuQy8nIp0AyDPI3Cx7XdBSLhT+ykv1Oqug=
Subject key identifier: 7D:A8:89:14:A7:86:AE:0B:88:85:CE:21:08:40:BB:B2:D5:4A:C3:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846C9658ABB55391E08D01C4B2BD33975E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/faiJFKeGrguIhc4hCEC7stVKw90.roa
Signing time: Sat 12 Nov 2022 16:05:03 +0000
ROA not before: Sat 12 Nov 2022 16:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:6c96:3cf2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6c:96:58:ab:b5:53:91:e0:8d:01:c4:b2:bd:33:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 16:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7da88914a786ae0b8885ce210840bbb2d54ac3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:86:83:11:fe:54:7b:57:b4:de:c0:7b:72:
0c:e4:99:3a:86:c5:02:11:b4:d4:59:06:de:29:64:
77:06:43:53:98:cc:3c:29:3f:cf:19:75:61:56:ae:
11:d6:24:cc:a8:94:b6:3e:63:a4:ca:d3:c8:83:ad:
2c:ee:d5:ba:2d:ef:d0:b0:1c:c4:d1:33:a5:62:59:
83:7d:a2:80:6c:1d:6e:ed:4b:2e:a6:b3:e3:25:cb:
d2:a2:7d:2a:50:37:78:dc:85:ce:97:e2:25:ee:70:
af:ea:aa:e4:da:bf:fc:0e:67:bd:01:5c:6f:91:63:
5e:36:16:d4:82:8a:e1:0b:42:57:8f:38:84:8c:5a:
28:92:c2:be:39:0a:8f:be:17:b1:f3:0d:62:6e:4c:
42:88:d6:1b:35:b0:26:9f:a0:85:8a:c6:c6:ed:da:
6f:84:de:50:de:8a:32:2c:36:7c:f2:69:ba:a6:d3:
7d:b4:56:9c:04:4a:76:79:a3:14:4c:23:21:ec:12:
1a:5f:f8:42:f3:ee:dd:ba:70:42:c8:03:d2:88:9d:
10:1c:88:42:09:aa:a0:ab:92:3c:4f:83:65:68:5f:
dd:00:bb:1a:86:92:22:8c:3d:6f:cb:53:c7:ff:24:
66:ce:25:26:0b:c3:c9:ff:ec:f7:4c:04:91:75:3e:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:89:14:A7:86:AE:0B:88:85:CE:21:08:40:BB:B2:D5:4A:C3:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/faiJFKeGrguIhc4hCEC7stVKw90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:e2:f1:c9:f5:8f:8e:9b:a8:b5:9d:6f:d0:ac:be:87:bf:a7:
63:78:3b:fd:c4:36:19:fd:74:f7:80:cd:66:30:fb:07:61:bc:
46:fb:b9:d2:2f:1c:33:f2:4f:32:c3:49:d1:8d:04:a3:cd:eb:
4f:2d:24:a2:6b:27:d6:14:32:be:02:66:08:f3:fe:11:04:88:
1d:9c:15:43:9c:f5:6f:8c:1d:d7:4f:f0:69:05:73:6d:bb:6d:
2c:c4:c0:0f:13:3b:9d:b0:af:56:78:d5:74:22:b8:93:c5:2c:
ad:d4:45:14:26:bc:ef:09:eb:bd:4d:cb:cf:ae:7f:d3:f7:c2:
1e:e8:1e:6b:84:44:ef:23:fb:87:94:c3:a4:43:b0:12:5d:f5:
df:7b:60:c9:b5:67:18:6c:b6:82:d6:1f:9a:54:53:f4:9d:40:
87:a9:cc:14:1d:ed:7d:ec:d3:92:f5:77:10:d1:e4:a3:91:b2:
76:4f:ad:db:c0:2b:32:8c:d9:9f:9a:bc:65:0f:e0:8b:31:29:
2e:21:dd:cd:9c:f1:cc:5a:a8:e8:75:2a:d5:16:ac:09:26:c4:
45:34:72:d1:6f:a9:0c:d2:be:4e:7d:02:e6:0c:f4:54:f8:61:
63:63:15:df:74:fc:de:06:d2:d5:46:0c:20:49:1e:5a:7a:ce:
2a:dc:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:18:08 2025 by rpki-client