Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqX4urVrZiIis0Cr_q47OOk_fD4.roa
File: fqX4urVrZiIis0Cr_q47OOk_fD4.roa (raw, json)
Hash identifier: z6GbcRUePtR+X8+x4b2EBufk+wFC3yzKcMIb9vRMkN0=
Subject key identifier: 7E:A5:F8:BA:B5:6B:66:22:22:B3:40:AB:FE:AE:3B:38:E9:3F:7C:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F3D715F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqX4urVrZiIis0Cr_q47OOk_fD4.roa
Signing time: Thu 03 Mar 2022 07:09:02 +0000
ROA not before: Thu 03 Mar 2022 07:09:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866297695 (0x6f3d715f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 07:09:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea5f8bab56b662222b340abfeae3b38e93f7c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:8f:e8:90:d5:02:e7:e6:27:c7:86:fc:4c:
2a:10:ca:1c:1d:4c:78:c0:da:65:5a:66:75:74:e8:
93:7f:16:bf:0a:5d:09:18:c2:0d:47:57:8c:f7:a0:
dc:3f:fc:ca:13:39:53:d5:d7:f7:60:4d:8e:12:43:
73:3f:d1:0f:82:73:e2:93:2b:79:b5:65:40:14:66:
01:21:75:a6:bd:a5:a1:81:7a:43:f4:17:bf:28:20:
2e:80:e7:b2:2d:9a:26:fa:45:15:34:ab:78:e0:6a:
ce:a7:ff:9b:49:bf:12:67:a4:5b:c1:6d:e7:65:3d:
76:27:67:95:1d:c2:be:bf:06:35:7b:e9:1c:34:67:
60:51:1b:7f:53:a1:e7:a3:ea:c1:78:87:dd:b1:82:
32:29:81:ff:f3:ba:c2:91:a2:fd:4b:87:24:6f:2e:
77:83:75:4a:b2:a2:b1:c9:a0:c5:20:9b:ab:2f:12:
11:de:31:3d:07:c4:68:73:37:1c:79:b4:03:21:18:
c6:93:4e:98:ad:1d:42:8f:a7:64:44:9a:25:e8:d9:
22:b8:44:fe:d5:a2:45:b0:b4:ed:76:c9:fe:56:37:
56:90:4d:dc:ef:e1:81:79:83:11:9f:b9:49:18:f8:
32:5b:12:17:4b:07:7e:b7:41:c1:5e:7f:66:03:17:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:F8:BA:B5:6B:66:22:22:B3:40:AB:FE:AE:3B:38:E9:3F:7C:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqX4urVrZiIis0Cr_q47OOk_fD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:fa:dc:20:7b:07:da:3f:24:fb:02:ac:e4:7b:0d:dc:f7:6b:
b2:58:73:24:4d:08:73:82:d8:ad:bb:0a:38:ed:3b:87:f0:8b:
e4:d6:98:04:b1:c6:da:4d:40:f0:b1:da:63:fd:26:6b:26:35:
b6:12:16:e8:eb:f4:ae:7f:10:08:97:9c:d0:ff:2e:51:ac:6a:
df:a4:3c:72:5b:17:f1:1f:54:66:1c:67:8a:04:94:85:a2:5f:
03:8a:5b:80:67:26:77:0a:ab:bc:7a:96:30:cd:83:d3:d1:82:
e3:2b:e6:68:47:17:1b:bc:d2:14:23:9b:db:66:bb:d8:d8:9b:
c9:b3:ae:40:2b:65:84:9d:68:c5:b3:94:ae:43:4a:d1:71:2d:
0a:84:f3:0d:d2:6d:10:df:82:9a:91:c4:ad:4d:e9:e8:3e:73:
46:1b:cd:a8:cf:ac:dc:e6:cc:9c:72:60:47:08:6f:8e:78:49:
dc:2b:65:7a:c8:00:66:26:1c:ca:cc:6b:bb:7b:01:57:bc:eb:
14:a2:78:c3:50:c4:5e:4e:b9:c9:64:3c:63:f9:78:1f:07:f5:
b2:29:bf:ae:6d:98:64:2a:ed:1d:67:1c:65:d2:14:a2:14:0e:
0c:7a:83:88:eb:97:8d:23:68:1e:8d:b7:e1:3c:63:af:46:31:
1c:bf:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:54:34 2025 by rpki-client