Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fcU_sTjdsBgi9C8d5C6EHrGyU_I.roa
File: fcU_sTjdsBgi9C8d5C6EHrGyU_I.roa (raw, json)
Hash identifier: fntNcij6Eyxnhd9c4jRGhcjstdkH3uJxVqtJolx0Ix4=
Subject key identifier: 7D:C5:3F:B1:38:DD:B0:18:22:F4:2F:1D:E4:2E:84:1E:B1:B2:53:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7673F2F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fcU_sTjdsBgi9C8d5C6EHrGyU_I.roa
Signing time: Mon 28 Mar 2022 14:10:40 +0000
ROA not before: Mon 28 Mar 2022 14:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987310320 (0x7673f2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 14:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dc53fb138ddb01822f42f1de42e841eb1b253f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0e:09:38:2c:f0:39:dc:75:e7:c5:67:6c:18:
58:6d:d1:a1:27:9e:e8:0c:f0:44:a5:c6:b3:9e:f7:
83:d6:05:73:79:59:49:e8:dd:a0:ff:44:f0:50:ca:
eb:95:a1:cb:02:9e:8b:98:e6:05:54:cd:45:8e:b1:
a7:bf:bd:b6:9b:ce:02:9c:41:24:84:82:5f:5c:fc:
3a:85:48:e2:8f:41:6c:98:d8:c3:22:14:ef:32:ed:
6a:83:0d:57:49:1e:30:23:10:ed:51:f2:19:da:50:
7c:df:73:c1:73:81:7f:62:2d:a7:f5:71:e0:b1:87:
91:37:fc:42:dd:39:f3:d5:34:4c:a7:d4:b2:e1:45:
82:c2:8e:0e:eb:50:62:2d:46:56:86:c0:e2:54:1d:
a3:77:d1:9a:6d:9f:5e:a3:fe:47:02:9b:9c:3e:e8:
34:10:58:0d:24:67:33:06:a3:9b:cf:fb:0f:8f:08:
49:90:2d:24:75:9c:88:d6:1d:b1:8f:8e:40:12:12:
74:88:f0:b0:91:a6:df:1d:43:e6:d4:c5:f8:a2:85:
13:55:85:69:e9:ed:de:40:b4:b9:48:12:d9:b3:f6:
47:eb:2f:13:a7:a7:d8:5d:83:1d:b2:b5:7c:3e:37:
f2:67:be:e0:67:ea:59:60:0e:a0:32:67:ae:ea:af:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:3F:B1:38:DD:B0:18:22:F4:2F:1D:E4:2E:84:1E:B1:B2:53:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fcU_sTjdsBgi9C8d5C6EHrGyU_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:98:be:f2:ce:e0:8c:24:cd:7e:da:36:11:33:f6:7b:35:29:
df:a0:0c:fb:8d:02:38:b3:77:9e:70:f5:40:b3:52:26:0f:cc:
da:23:7f:b5:2d:b6:ef:12:2e:e9:af:de:5d:e5:9e:65:27:b2:
13:1c:be:d0:9b:a6:67:a5:ff:b9:7b:92:b4:13:eb:2b:6b:2a:
3d:0a:92:bd:f7:e9:a8:fa:a5:a6:b9:9f:05:c9:2f:b1:4f:72:
41:b6:3e:06:84:b9:47:f0:6b:d0:83:e0:a0:a2:8f:fc:77:8f:
26:fe:91:e9:62:ab:69:d0:95:7d:9b:c9:59:b5:c9:08:91:9d:
21:19:bf:8b:12:42:5d:a8:72:d6:25:23:92:56:23:93:6e:cf:
2f:76:11:bf:87:1b:13:d8:00:74:6f:2b:c6:bb:84:8e:5b:d1:
cf:9b:39:e5:33:e3:91:05:8a:54:98:c8:b2:e8:50:a5:86:76:
65:a9:1f:44:b7:a6:43:de:14:47:1d:cf:6d:24:fd:51:83:80:
f7:81:f0:9e:01:f2:de:e0:01:1a:9c:70:38:12:ea:07:12:5b:
9e:4b:97:68:59:95:2c:2c:6e:de:45:c8:f3:c8:dd:7e:e5:00:
50:60:36:49:24:65:57:16:30:d7:40:e6:77:4a:c8:d4:18:b6:
3a:d7:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:00 2025 by rpki-client