Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkuxKczAtWj0zlXPrzEmUmCnPWA.roa
File: fkuxKczAtWj0zlXPrzEmUmCnPWA.roa (raw, json)
Hash identifier: gX+qq/djudMBOd6b0pZ50HBsmJQD177RE3mxv5AWlxM=
Subject key identifier: 7E:4B:B1:29:CC:C0:B5:68:F4:CE:55:CF:AF:31:26:52:60:A7:3D:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D7E83A54EEF0F1F4F619D0DA6D4AAFED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkuxKczAtWj0zlXPrzEmUmCnPWA.roa
Signing time: Thu 07 Jul 2022 09:05:29 +0000
ROA not before: Thu 07 Jul 2022 09:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:d7e7:53c3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:e8:3a:54:ee:f0:f1:f4:f6:19:d0:da:6d:4a:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 09:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e4bb129ccc0b568f4ce55cfaf31265260a73d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:8c:5a:15:41:ba:b6:cd:e8:1f:40:bf:b0:
47:8e:e7:4e:2e:c9:f2:dd:44:ad:44:44:1e:81:24:
84:5b:85:80:e6:3d:dd:b6:82:e2:5b:bf:07:94:6f:
18:34:04:4b:92:32:d9:b8:77:af:be:29:df:0a:5d:
9a:a0:4f:36:43:42:7b:ed:13:b5:53:43:09:b8:2e:
29:a6:2b:4a:8e:70:ba:8a:3c:f2:37:21:17:b0:5b:
f5:23:94:4f:19:a9:2b:f1:e1:84:ec:e2:bb:9e:45:
eb:e6:b7:fe:6b:6b:01:32:f2:e2:84:e5:e9:ea:af:
60:5a:de:87:40:7e:0f:23:df:c8:0e:5d:2b:35:ff:
0a:11:c3:9f:21:25:9a:e4:d1:7a:c2:ae:df:da:2e:
aa:85:10:38:ec:51:50:7a:fc:6a:c6:d6:63:8b:93:
14:f7:f3:ad:bf:cc:8d:94:98:55:90:06:65:97:66:
0b:af:fa:2a:33:37:61:61:f1:87:ea:be:1f:62:85:
db:c5:69:cd:73:32:28:36:28:9b:b1:bd:b9:14:35:
15:94:7f:db:02:9c:33:b1:24:33:1f:56:df:6d:c2:
a1:57:ff:34:76:f6:b2:95:92:34:5e:c1:1d:11:8f:
9f:f4:26:73:7b:64:90:dd:1a:22:93:9a:fd:e2:ce:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:B1:29:CC:C0:B5:68:F4:CE:55:CF:AF:31:26:52:60:A7:3D:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fkuxKczAtWj0zlXPrzEmUmCnPWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:af:0c:ab:a0:13:a9:cb:ed:4e:31:c1:85:dd:cf:be:1c:24:
aa:e7:5b:03:fb:0c:33:a8:15:f3:1f:50:8b:c9:57:6c:41:79:
31:65:35:f9:6e:04:cf:ef:73:cb:b5:83:46:f1:04:4a:1d:eb:
1f:31:5f:c7:8f:e3:2a:63:01:c7:5f:fa:87:ec:92:2b:76:c2:
e4:c4:5d:90:4b:d6:52:0b:d2:40:43:67:8c:ff:55:7c:c0:0b:
1c:79:5e:9c:f6:35:bb:22:c7:84:2b:e6:d9:30:ab:bd:33:69:
55:ec:4a:bd:f2:d4:5c:81:01:5e:45:23:b3:54:52:15:e6:74:
71:c1:75:1d:9f:61:e5:d8:a4:16:3e:f6:d8:37:f9:f3:ea:44:
bd:ef:47:cc:17:fa:7e:49:3e:8f:ab:a2:ff:c1:5e:1b:2e:3e:
71:bd:72:7f:76:8e:83:65:4d:7b:47:a3:91:5b:10:87:74:c9:
01:6c:30:ae:b3:75:0f:40:7a:d3:aa:da:e4:a4:9a:db:47:91:
06:bb:d0:44:79:25:c6:9f:06:92:d7:b7:5d:da:2d:2a:bc:c0:
47:d8:d5:fd:71:e9:e6:40:2f:8a:d2:95:76:7d:9a:2f:68:c2:
70:e9:9e:9e:97:78:ec:e8:49:24:b3:4b:0c:70:d3:21:d1:30:
b0:71:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:39:13 2025 by rpki-client