Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd3VQk-8rXoJJwWfuX4x_Cy5jGM.roa
File: fd3VQk-8rXoJJwWfuX4x_Cy5jGM.roa (raw, json)
Hash identifier: 6N3jJc+1hnTkYTYOQ5ZK9DVl53gOIVBobske4lBJ+aI=
Subject key identifier: 7D:DD:D5:42:4F:BC:AD:7A:09:27:05:9F:B9:7E:31:FC:2C:B9:8C:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88C960F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd3VQk-8rXoJJwWfuX4x_Cy5jGM.roa
Signing time: Tue 31 May 2022 18:10:13 +0000
ROA not before: Tue 31 May 2022 18:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294898933 (0x88c960f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 18:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dddd5424fbcad7a0927059fb97e31fc2cb98c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:3c:90:63:19:f0:70:ba:fa:3d:bb:6c:e9:
67:2d:1a:40:31:ca:00:ba:d9:85:55:ae:8d:37:ee:
3e:79:57:be:8a:f6:8a:24:45:58:45:cd:1a:1d:50:
ea:a5:10:a6:c1:33:21:fe:ed:c6:13:58:d7:9a:03:
a5:f0:04:47:96:2d:9e:a3:8c:fb:91:a3:66:58:35:
47:c3:6e:d3:1f:61:76:a5:e6:6a:c6:b2:c8:40:9f:
cb:93:a3:d7:28:76:35:cd:24:41:48:71:db:37:43:
79:80:e2:a7:cb:29:d0:0c:ec:53:7b:cb:f2:d0:33:
1f:6f:ed:fa:fe:09:97:c5:93:fd:f8:d5:f5:d7:26:
85:d4:91:17:2c:e1:d0:33:32:a1:a6:42:8d:bf:fb:
9e:6e:b6:8d:db:6a:ae:3e:15:e0:98:9a:a7:57:72:
f8:f0:e4:3e:60:2f:ad:1a:4d:b5:53:95:9f:93:62:
e1:c2:f0:10:3c:8b:bd:e7:05:32:92:54:dd:30:6b:
02:01:5a:b9:0a:2f:5d:78:30:14:ed:64:8f:91:39:
56:19:66:79:34:5c:77:61:79:c9:ab:ec:99:57:d3:
54:a0:10:a9:56:1f:9b:47:d9:01:3b:07:6d:97:da:
48:9a:0f:fa:13:a3:e4:27:6c:cf:9f:47:86:ac:86:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:D5:42:4F:BC:AD:7A:09:27:05:9F:B9:7E:31:FC:2C:B9:8C:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd3VQk-8rXoJJwWfuX4x_Cy5jGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:bf:a2:b8:2c:20:27:ed:c2:22:02:26:c5:53:38:6e:0c:e3:
82:22:74:00:d3:84:86:61:48:b1:44:8b:e0:28:f2:b1:53:c9:
34:35:a4:ef:ca:af:7b:33:3d:51:ce:b4:13:f4:4a:4d:b4:c6:
ca:0f:81:0b:a3:82:b5:6c:1b:aa:c5:92:3d:5e:d7:2e:14:76:
31:35:59:f8:24:38:ce:b9:05:ac:92:5d:50:95:98:75:02:8b:
f5:12:66:a4:29:34:53:51:81:0d:34:97:f7:79:15:ac:f4:3b:
0d:43:5e:43:3b:2b:e6:46:e0:31:88:d7:a9:cc:f2:44:64:5e:
75:2b:0f:62:92:c9:c4:75:ff:6a:aa:29:d6:07:a5:73:f2:26:
40:31:8d:fc:0a:6f:9d:f6:bf:0a:f8:cf:45:17:e1:42:13:9d:
16:6a:12:9f:99:be:71:6a:04:f5:35:45:fb:1c:e3:18:07:ec:
b7:1e:12:dc:b5:ff:39:b8:25:b8:cc:26:14:88:a7:89:9b:63:
db:ad:d6:7c:c9:03:28:21:63:d3:55:41:8f:68:65:2c:b2:48:
86:c8:63:67:65:bc:bd:29:a2:9c:b0:ac:ed:7c:5f:de:0e:18:
f0:1b:d6:00:92:65:43:53:32:9d:bc:19:db:fd:1c:82:5f:5f:
b9:b6:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:35 2025 by rpki-client