Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ffmA6I16QSDV0TD2lL0cs_6SEy0.roa
File: ffmA6I16QSDV0TD2lL0cs_6SEy0.roa (raw, json)
Hash identifier: FxCCc6BQbiIxsMaGLlyAhhIXPkVV+EBufiy1g33da5U=
Subject key identifier: 7D:F9:80:E8:8D:7A:41:20:D5:D1:30:F6:94:BD:1C:B3:FE:92:13:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899CA10BFF70F8DA04D73CA3F947A896EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ffmA6I16QSDV0TD2lL0cs_6SEy0.roa
Signing time: Fri 28 Jul 2023 13:12:27 +0000
ROA not before: Fri 28 Jul 2023 13:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:a1:0b:ff:70:f8:da:04:d7:3c:a3:f9:47:a8:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 13:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df980e88d7a4120d5d130f694bd1cb3fe92132d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:ab:f4:46:d4:a6:26:bd:7f:b0:2d:6e:38:
71:6c:34:c0:21:16:03:68:d9:05:da:d4:cf:2b:f1:
b6:f3:4d:71:73:9a:ea:b4:4b:4d:a9:a0:f3:dc:45:
4d:d3:85:5b:b8:86:44:3d:ed:26:0b:7c:81:8e:f1:
26:0d:47:6a:55:ae:c3:a0:85:10:46:80:04:bf:6c:
97:93:8c:c6:ed:fb:aa:d3:c2:bd:81:da:8d:cd:2c:
e8:a5:ba:1a:87:89:32:f0:00:5f:34:b3:1f:ad:72:
0c:3e:cf:65:26:be:da:97:7d:8e:5d:fd:55:a1:01:
35:b9:18:84:73:95:a4:61:4d:ee:c4:91:78:cf:73:
c3:32:16:a7:66:0f:4b:40:52:e1:bf:e8:cb:48:fc:
56:35:05:8c:cb:37:8c:f8:0c:96:3b:2d:9a:5c:95:
f6:67:c7:da:37:10:92:ed:87:92:69:5a:82:ed:5b:
fb:5b:2c:ce:c6:e1:9a:fd:1e:e1:9e:e0:e2:f2:74:
11:31:88:b2:29:28:a4:05:3c:85:72:aa:14:d2:62:
71:5a:58:2b:0e:47:cd:e5:07:bf:f5:24:35:96:7b:
53:45:90:45:cf:e7:5f:45:33:45:69:ae:82:13:36:
91:7c:32:b7:d4:cc:9f:54:74:08:a8:56:4d:11:4c:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:80:E8:8D:7A:41:20:D5:D1:30:F6:94:BD:1C:B3:FE:92:13:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ffmA6I16QSDV0TD2lL0cs_6SEy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:f9:9c:4a:7b:89:36:9d:73:00:d5:ac:9a:1b:03:63:54:47:
45:64:d7:c7:ba:c3:b7:ba:a3:bc:be:d8:a5:3c:52:ad:87:d7:
36:52:24:98:f0:82:e6:a6:36:41:4d:55:75:ed:8e:71:ff:8e:
f1:83:38:b6:28:51:3d:01:48:d2:1a:2c:1a:c3:e6:1d:d7:e7:
3b:96:d7:b3:30:d5:9e:a4:ce:48:a8:c7:82:8a:24:16:fa:c5:
9e:09:f1:f3:46:31:ca:18:78:1d:c0:18:b0:2b:3b:c6:c6:0f:
37:d4:ca:d2:84:03:0f:90:f8:3d:56:5a:e2:da:97:44:ba:47:
08:c5:90:9a:33:e1:a4:92:32:10:dc:3e:4a:ac:70:38:5d:5c:
22:d3:9d:cd:cb:d6:ac:51:82:a2:b4:0e:55:2b:16:c7:7d:1f:
09:2e:0f:55:b6:61:a6:49:f4:9c:8c:45:84:0d:16:41:5f:28:
ab:c4:76:31:a1:3c:b3:94:21:b0:98:b0:35:37:d2:96:61:b3:
f1:c4:bd:ff:8c:e9:a6:c8:e5:2b:6d:f7:8e:96:7d:74:b9:59:
b5:08:2a:e8:8b:fb:93:81:e4:a0:88:ab:2a:f1:70:b2:8f:ca:
71:61:9f:90:1a:b5:9a:82:2c:eb:2e:bd:bc:b9:06:c3:eb:c0:
fd:d1:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:22:17 2025 by rpki-client