Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ft1uodqoxfifRXbbxRC5NRYwzRY.roa
File: ft1uodqoxfifRXbbxRC5NRYwzRY.roa (raw, json)
Hash identifier: pT/ev4E3rGdKtrmYsOYUMy9nP5tO6Un7I60zn9wU4tE=
Subject key identifier: 7E:DD:6E:A1:DA:A8:C5:F8:9F:45:76:DB:C5:10:B9:35:16:30:CD:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DECE325CABFE145815DFEC14B7EDD3EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ft1uodqoxfifRXbbxRC5NRYwzRY.roa
Signing time: Fri 08 Jul 2022 17:14:24 +0000
ROA not before: Fri 08 Jul 2022 17:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:ce:32:5c:ab:fe:14:58:15:df:ec:14:b7:ed:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 17:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7edd6ea1daa8c5f89f4576dbc510b9351630cd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:8d:33:cc:32:56:d6:c7:38:a2:87:e4:28:
ae:69:bf:67:bd:69:ed:4e:dd:cb:d1:01:9d:e9:51:
6f:bc:34:1b:c1:12:43:85:df:90:95:32:c8:14:cd:
2e:5b:22:e6:b5:b0:a6:0c:89:f7:47:dd:61:ac:5a:
cb:22:ce:5a:59:c0:50:40:3c:60:c1:c0:9b:b4:bc:
aa:cd:1b:27:b3:0d:d7:76:db:01:62:92:aa:ab:2b:
38:45:63:37:31:99:d9:8b:ec:72:95:a8:44:c6:65:
4e:2d:aa:83:3f:66:0c:56:4d:37:2d:84:27:b1:83:
54:e2:00:a9:34:09:fe:57:d1:f9:26:8a:64:62:3c:
75:b2:f4:c5:63:ab:47:09:7a:6c:8e:08:65:41:10:
17:89:4e:37:35:c8:a6:49:3c:e0:45:e4:2b:af:03:
6c:88:a2:16:5e:19:a4:9b:48:18:d0:a7:25:35:dc:
df:6c:df:94:10:82:bf:4a:b9:81:d4:c7:27:3b:13:
e1:1b:a5:62:95:83:63:be:a5:a9:4a:9d:0b:43:67:
ab:8e:bb:f0:13:1d:92:45:9f:5d:fb:b0:95:3d:ef:
55:a4:0b:82:e1:df:54:72:cb:3c:62:ec:ba:91:75:
bd:25:22:e4:fa:73:ae:b3:61:9d:41:59:4e:46:18:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:6E:A1:DA:A8:C5:F8:9F:45:76:DB:C5:10:B9:35:16:30:CD:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ft1uodqoxfifRXbbxRC5NRYwzRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:94:2c:20:60:c1:26:15:7a:f9:e9:62:7b:b6:7a:72:a7:df:
ce:2b:6c:77:ea:09:5c:d7:92:54:45:78:d5:72:55:a6:f6:9e:
84:81:dd:6c:d3:9e:4c:be:ff:56:26:51:76:bc:91:9d:5d:2c:
ac:23:93:1e:ee:f7:91:eb:70:77:c2:57:eb:09:1e:0c:5e:3c:
98:b7:ed:e6:11:40:7a:c5:f0:82:81:be:bf:14:f7:65:88:e5:
5d:37:07:59:e7:49:87:2d:52:b4:6e:1e:06:e1:72:fc:aa:ee:
24:2e:0b:67:ab:ea:65:9f:3f:2b:83:12:7c:72:bb:09:e9:eb:
ad:cf:97:c3:11:04:01:8f:5f:1f:e7:61:e2:80:38:d6:ac:4b:
6d:2e:32:fc:89:71:e0:eb:12:7e:c0:1d:cc:2e:d3:0e:de:86:
0e:53:f6:f8:16:02:a2:62:a6:75:f1:c2:c6:f1:9b:cc:04:d7:
13:1b:18:bc:62:bc:85:fa:21:f0:55:62:31:33:57:77:ab:aa:
2e:90:d4:db:34:40:df:4c:d1:77:95:05:81:b3:a1:4f:df:4a:
87:f0:dd:f9:ae:b3:d5:9d:b9:6d:3c:e3:56:cc:a0:6a:d7:f5:
d0:dd:00:ee:01:6a:b7:98:3c:cd:f2:5f:f3:12:b0:f4:07:f4:
f6:88:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:17 2025 by rpki-client