Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fs-8t7OW9HCVMCx5wdsuulJwdJ0.roa
File: fs-8t7OW9HCVMCx5wdsuulJwdJ0.roa (raw, json)
Hash identifier: kkw4ipWXDVKBrVuA/4UcvC0uyK3qQGelBbZegFDkedo=
Subject key identifier: 7E:CF:BC:B7:B3:96:F4:70:95:30:2C:79:C1:DB:2E:BA:52:70:74:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6893CB22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fs-8t7OW9HCVMCx5wdsuulJwdJ0.roa
Signing time: Mon 07 Feb 2022 01:09:22 +0000
ROA not before: Mon 07 Feb 2022 01:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754516258 (0x6893cb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 01:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ecfbcb7b396f47095302c79c1db2eba5270749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:bc:e5:d0:1f:8e:54:54:d1:a6:ce:45:20:
64:12:c6:7d:47:86:33:1f:73:d1:70:15:23:fb:30:
b0:80:08:c3:98:ce:34:24:62:dc:82:0a:4f:04:bf:
62:d6:ac:20:6a:ad:a2:5f:51:5e:f2:4b:ba:de:e7:
98:0d:00:37:b0:1c:ea:9f:b3:fd:79:73:b4:35:f4:
4c:0b:aa:a2:b1:ab:10:ff:fb:ac:83:08:81:d5:ac:
c0:95:5a:74:7a:8a:85:62:95:fc:e9:a4:9e:d7:b2:
fb:f1:71:60:c1:17:6f:9a:3c:38:ab:90:0e:de:5a:
84:f0:39:1d:49:cc:84:44:ba:f9:c7:af:2e:8d:41:
d4:b0:0b:50:23:6e:e8:71:a4:54:d2:de:49:f4:04:
dc:ba:7a:2f:f0:dd:81:ec:2c:49:98:88:25:d1:df:
cb:f6:75:46:dc:b6:bc:d7:40:95:78:6e:77:0e:9f:
b8:81:78:b0:d0:ba:48:fa:ad:ca:70:57:18:56:61:
d1:b6:e5:e2:be:97:40:26:1d:ca:de:33:9a:2f:53:
c7:1d:14:41:54:e1:e6:5c:5e:ae:de:4e:31:f2:6d:
7b:fc:8c:29:ee:a8:86:90:4f:a3:53:c5:dc:49:0b:
f8:d1:19:a4:26:87:dd:ba:77:6a:28:42:78:8d:b9:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:BC:B7:B3:96:F4:70:95:30:2C:79:C1:DB:2E:BA:52:70:74:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fs-8t7OW9HCVMCx5wdsuulJwdJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:f1:a4:db:3f:40:3f:13:75:1a:96:60:ca:de:cb:1e:19:f6:
86:a8:8b:f3:0f:07:bf:27:9b:54:42:b6:f2:a1:45:ee:e9:b6:
c7:cf:cc:be:24:f9:c6:af:7e:e4:ac:39:be:dd:fe:45:1c:0f:
cd:a9:e0:46:00:4d:b5:5b:36:88:2a:6e:88:2f:1e:57:a0:ad:
19:36:78:cb:cb:bc:e1:3a:21:30:4a:91:98:38:5a:01:52:af:
8c:4a:24:1e:8a:02:6c:73:c9:47:4d:05:67:75:fc:81:c5:68:
cf:95:7d:eb:2e:27:15:39:ef:cb:5b:60:73:e4:6b:87:6d:e2:
9e:07:23:89:34:e7:58:c5:5a:73:f9:66:b1:bd:74:33:ca:d6:
ae:23:52:f1:5f:67:97:f7:0f:d5:bc:b0:d3:72:6c:d9:32:1f:
c6:ec:4d:2f:2b:ed:22:c7:80:e1:24:c2:6f:a5:5b:32:11:e0:
cc:10:b5:43:5a:78:be:f0:85:c6:86:85:d5:ec:3f:a1:2a:74:
59:ab:cf:5a:e1:a7:37:47:e7:63:1c:08:23:65:6d:21:a9:c0:
61:e6:38:16:d2:d0:32:61:4d:af:25:d9:55:a5:1e:9b:36:73:
73:bb:b9:e4:07:b6:50:4b:52:0b:a3:28:6d:f0:41:b3:59:28:
0b:96:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:26 2025 by rpki-client