Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ftm3Fq5W4ptTGGm_ayYahz6M_SI.roa
File: ftm3Fq5W4ptTGGm_ayYahz6M_SI.roa (raw, json)
Hash identifier: LuspIpposCHyv4myd04SztGQq37feNnFCJa5LHPiCKA=
Subject key identifier: 7E:D9:B7:16:AE:56:E2:9B:53:18:69:BF:6B:26:1A:87:3E:8C:FD:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D1AB87E0CAE0E74C836B6041982F7C78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ftm3Fq5W4ptTGGm_ayYahz6M_SI.roa
Signing time: Wed 24 Aug 2022 21:04:15 +0000
ROA not before: Wed 24 Aug 2022 21:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:d1ab:7aee/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:ab:87:e0:ca:e0:e7:4c:83:6b:60:41:98:2f:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 21:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ed9b716ae56e29b531869bf6b261a873e8cfd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:21:b2:71:44:77:3d:42:7c:86:84:11:b6:
6b:af:61:d4:33:9e:41:c2:a1:c5:91:06:03:c3:cc:
9e:4f:00:66:0d:92:b7:32:d1:53:95:d8:95:21:8c:
3c:23:c4:70:d3:db:8d:e3:ce:7f:b8:cf:cb:72:e8:
1c:60:23:2b:04:b3:33:be:33:20:ab:8a:78:01:90:
56:db:38:9c:a7:a5:ac:fd:fa:12:c0:bf:b0:74:25:
84:57:1c:98:33:70:6e:6b:bb:3b:55:fd:ac:f8:00:
a0:e0:04:0d:b3:f4:15:0e:36:63:cc:f0:48:c8:9e:
83:48:7a:bf:30:80:22:d2:1b:a2:68:e4:13:cb:df:
c0:1b:67:c8:08:6a:93:c2:f1:53:43:79:1e:b6:67:
c7:7b:4d:29:85:66:95:8b:2b:9a:77:21:2a:a3:2a:
44:71:0d:d9:0e:cd:88:c3:92:df:5e:24:65:f4:ba:
4d:a2:75:a3:36:88:5f:61:80:12:1c:c6:11:4f:e8:
d5:70:92:d9:ef:c8:ab:f0:d6:16:4e:58:25:76:e6:
66:13:9a:3f:5f:1e:d7:dd:33:b4:98:ee:96:c9:1a:
12:89:04:c2:84:5f:a6:86:66:b7:56:9f:5d:d5:cb:
95:31:ca:b1:bb:54:35:0d:c8:57:bb:fe:71:73:61:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:B7:16:AE:56:E2:9B:53:18:69:BF:6B:26:1A:87:3E:8C:FD:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ftm3Fq5W4ptTGGm_ayYahz6M_SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:07:0a:ca:12:10:da:e2:5e:06:fe:90:7b:c6:ed:43:27:60:
40:74:ca:d7:50:5b:a6:37:68:40:18:d6:7e:8f:1d:f7:d3:fe:
6b:3a:98:52:4f:b6:90:7b:e0:e4:1d:b7:98:41:ef:dd:a3:32:
c7:67:10:63:5c:39:f0:44:86:50:c4:ac:2b:0b:2c:1e:9d:ca:
76:c0:d7:24:3f:97:6e:2c:99:39:25:7e:30:d9:e4:54:4b:19:
ba:20:9c:b5:73:69:a6:68:e4:47:36:78:92:52:2a:b3:11:74:
76:41:5b:f7:6a:ce:c4:a3:aa:7b:9b:ea:1a:c2:a0:64:3b:ed:
9b:28:d5:09:f5:46:e7:b9:eb:dc:6a:3c:ac:54:e7:14:a9:79:
c4:fa:22:01:e7:e6:ad:7b:5d:be:97:ba:8e:38:ed:27:09:b9:
7f:38:e5:38:f0:f3:b4:1f:83:5d:35:3e:87:73:8c:64:6b:31:
17:09:7d:33:2a:72:45:0a:45:5a:c6:3a:a0:c8:ec:1d:9c:21:
5e:dd:78:34:4f:ea:aa:70:0e:9f:1c:c5:8d:b9:90:dd:a7:5d:
45:53:fb:31:31:31:e1:92:fd:8f:56:54:6b:19:22:31:a0:16:
42:38:32:f0:ce:9e:93:6f:81:8b:e8:88:f4:df:38:84:3f:2c:
12:cc:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:10:48 2025 by rpki-client