Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkNxkTm_20gT4U44PhT9eo0amEk.roa
File: fkNxkTm_20gT4U44PhT9eo0amEk.roa (raw, json)
Hash identifier: IXVbXeFfjx3Qg5DSLjJzqrJZJZwcMfG7/fJC81MNaOc=
Subject key identifier: 7E:43:71:91:39:BF:DB:48:13:E1:4E:38:3E:14:FD:7A:8D:1A:98:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D4AD279A23A8625A6783508B8CEF272B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkNxkTm_20gT4U44PhT9eo0amEk.roa
Signing time: Fri 02 Dec 2022 21:10:28 +0000
ROA not before: Fri 02 Dec 2022 21:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:ad:27:9a:23:a8:62:5a:67:83:50:8b:8c:ef:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 21:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e43719139bfdb4813e14e383e14fd7a8d1a9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:40:99:0d:1b:0a:c5:92:3a:9b:64:c5:76:
12:bb:13:f6:d0:42:e3:44:56:0d:10:50:03:ac:1b:
ab:5b:55:3d:ef:10:05:cc:4c:71:ea:d1:7e:8f:b1:
0b:e9:e7:59:4b:df:a2:4e:c9:1a:36:c3:c2:16:07:
86:82:c7:d7:d3:95:12:ae:24:41:d7:e1:d3:1e:38:
cf:39:ef:2a:f0:36:4d:93:a3:6f:af:d5:f3:bf:9e:
22:20:68:3a:46:91:c7:0f:f9:ec:7c:e6:79:1c:78:
e7:0b:9a:b0:09:17:bf:c7:f6:68:b7:18:cb:d9:e3:
ae:12:68:c8:59:83:5d:a1:31:98:d0:0b:b0:4d:8b:
5f:43:76:9f:0e:2a:7c:51:9e:d7:92:cc:55:2a:1e:
de:7b:10:5f:3c:5c:7b:a2:c6:26:f4:2f:de:48:83:
18:46:e8:23:86:0a:84:c8:77:20:e0:c5:29:df:bc:
b1:65:e0:1a:8c:04:ef:79:41:4e:ef:14:5a:24:ad:
17:a5:f7:5c:db:fc:f6:88:da:0c:45:48:ff:1d:6b:
5f:f3:13:46:c3:50:86:8c:a3:9d:1a:dd:4a:1a:06:
74:05:a7:42:4c:ee:01:57:de:1b:68:b9:6e:e6:1c:
83:70:da:8d:08:bf:cf:39:50:c5:35:89:47:d5:a2:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:71:91:39:BF:DB:48:13:E1:4E:38:3E:14:FD:7A:8D:1A:98:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkNxkTm_20gT4U44PhT9eo0amEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:8b:8b:99:cc:7d:35:a2:5c:31:35:6b:8c:27:45:d8:40:72:
8e:8b:9a:6e:ad:0a:c7:13:a0:df:7c:da:99:7b:7b:f9:44:09:
93:47:a4:84:68:78:42:53:67:5e:0f:1c:92:14:e7:70:ef:86:
69:03:4d:56:fe:12:f5:24:5d:e2:a6:54:19:0f:50:a3:fd:94:
b6:c7:c7:d3:41:f3:1c:e3:97:6e:96:b5:2e:35:ac:d8:3a:a9:
34:68:70:98:cc:06:f3:2d:d0:2d:71:81:ed:e3:e7:fc:1b:84:
13:48:77:8c:8d:c7:83:1e:a4:52:e4:e6:51:b9:63:ac:69:26:
ae:ff:93:64:66:1d:fe:6f:ea:21:d4:41:84:9b:c9:1b:62:bf:
8d:d1:a9:48:97:12:3c:c5:3d:fb:5f:11:a2:5d:23:f6:9a:e7:
60:26:b3:09:34:bc:26:ae:39:00:7f:79:ad:7d:ed:d1:c7:d8:
db:0b:98:31:1b:29:1b:a7:d3:cd:61:0e:6a:b3:48:e2:5d:4d:
86:87:74:b6:5c:80:c5:c5:1e:e9:8c:ee:80:6c:30:7f:82:9c:
a6:03:d6:c5:7b:34:0e:8e:7f:e0:0d:eb:fe:3b:54:26:2f:f9:
e0:6b:15:5f:bd:08:81:f2:05:34:e8:68:96:de:05:cd:dd:c2:
be:32:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:49:43 2025 by rpki-client