Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feNkwtodxaYPunOdJjWKaBMIda4.roa
File: feNkwtodxaYPunOdJjWKaBMIda4.roa (raw, json)
Hash identifier: if+9lXVMw01tSuJ4UgxyHnfAvmdXFVxCHSZcVsGkTgE=
Subject key identifier: 7D:E3:64:C2:DA:1D:C5:A6:0F:BA:73:9D:26:35:8A:68:13:08:75:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E8AA33E5176AF11996589890CE2BB1CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feNkwtodxaYPunOdJjWKaBMIda4.roa
Signing time: Tue 18 Oct 2022 01:16:52 +0000
ROA not before: Tue 18 Oct 2022 01:16:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e8:aa:33:e5:17:6a:f1:19:96:58:98:90:ce:2b:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 01:16:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7de364c2da1dc5a60fba739d26358a68130875ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d7:95:fb:22:1d:c6:59:84:90:80:c7:6b:3c:
7e:30:39:08:25:23:13:03:4a:58:dc:51:7f:1c:b9:
3b:16:70:ef:c1:ec:c0:0b:d5:5b:73:06:1c:5d:3f:
05:f5:45:e2:e4:99:5c:51:1d:01:82:d0:16:3c:07:
1b:69:c4:b0:7c:3b:d1:13:8f:15:f9:23:fd:76:eb:
d8:ff:86:74:5e:c2:3b:e2:71:6a:c8:7e:cb:92:a2:
25:fc:ea:ce:f4:6d:2a:ee:0b:a4:69:bd:be:83:0d:
96:f9:dc:21:e9:a5:89:c8:19:2c:68:c2:42:4d:55:
f3:11:bf:e8:c5:76:06:2e:fa:85:e4:37:4f:db:c2:
6a:8a:98:98:55:85:b1:cb:75:18:e9:60:e5:d9:52:
38:20:98:68:7b:de:3e:88:f0:ed:90:0b:8c:4f:eb:
05:0b:7a:ad:44:06:e7:57:68:ae:8a:2d:60:c4:46:
99:f0:4e:06:5d:18:fb:6f:56:09:b5:cd:36:a9:36:
4d:1b:43:02:76:13:e1:a7:fa:6e:55:06:9d:e2:66:
c9:71:29:63:78:15:a2:db:33:b2:a1:aa:58:04:7d:
da:59:f3:72:58:48:3c:5a:d2:4d:bb:d3:c8:dc:a8:
af:44:ae:fd:01:5f:30:de:8e:0a:cf:b2:17:1b:33:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:64:C2:DA:1D:C5:A6:0F:BA:73:9D:26:35:8A:68:13:08:75:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feNkwtodxaYPunOdJjWKaBMIda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:ad:f0:09:70:01:13:51:a3:1d:13:c9:1a:41:b9:03:a3:ef:
70:8e:de:d4:3a:4c:ce:6d:80:16:de:df:3c:c5:1d:a2:8e:c4:
81:6c:d1:8f:95:23:52:a7:85:39:56:42:b1:af:ed:30:66:f6:
6a:bb:5d:32:7a:99:5f:8b:98:a7:3d:f2:ab:02:22:d6:69:20:
04:21:8c:5b:98:0b:a6:54:6e:40:f2:f0:7a:65:d8:83:ca:43:
ca:db:bd:b1:bc:e4:ee:8c:45:e9:e6:bb:09:a6:e1:35:76:ee:
38:9b:24:a6:c0:1b:8d:7d:0a:73:99:c2:1d:54:9d:d0:23:76:
be:91:01:85:ea:7b:08:9e:7a:e7:50:c4:10:ec:03:68:ca:5b:
f8:0b:93:0f:9d:f5:ee:e4:23:e8:42:c4:1d:48:6d:bb:b5:6a:
89:86:61:38:66:ca:12:cf:41:e8:4f:d2:77:35:23:1b:8c:5c:
2f:b2:9b:e5:62:84:fa:89:5d:89:2a:1d:87:d7:3f:a5:12:ba:
16:ff:d3:b5:ee:14:fb:68:bd:65:e4:52:e7:fc:18:6d:b1:78:
45:fd:f4:fc:54:9e:5e:53:31:0c:a3:f5:0c:ec:f5:50:c6:c6:
9d:f7:bf:6e:86:01:c8:e2:81:d7:19:61:f7:f4:3b:5e:e0:64:
db:64:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:03 2025 by rpki-client