Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fubtn47Pfa0X3wbBqiSQ5rGGaYA.roa
File: fubtn47Pfa0X3wbBqiSQ5rGGaYA.roa (raw, json)
Hash identifier: DaleOT/camD3MPgPVr6V8NKnfNoUZlMUERD8MuVxHCU=
Subject key identifier: 7E:E6:ED:9F:8E:CF:7D:AD:17:DF:06:C1:AA:24:90:E6:B1:86:69:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851543A7E11EE8035AF08D089EB79A2666
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fubtn47Pfa0X3wbBqiSQ5rGGaYA.roa
Signing time: Thu 15 Dec 2022 10:10:33 +0000
ROA not before: Thu 15 Dec 2022 10:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:43:a7:e1:1e:e8:03:5a:f0:8d:08:9e:b7:9a:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 10:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ee6ed9f8ecf7dad17df06c1aa2490e6b1866980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:c5:d2:a9:da:49:04:58:9f:71:bf:78:81:
9f:30:fd:fd:9c:16:d2:4f:39:aa:be:46:02:d6:8a:
f7:a5:fb:9e:ff:07:13:07:ef:cb:35:cd:18:e1:7c:
18:6d:c7:2e:bb:da:99:47:2d:99:df:2f:0d:e8:94:
3e:e2:c1:e5:f6:7c:9d:3d:0a:dd:d1:95:aa:d2:54:
cd:9c:00:27:0a:9e:b9:ec:5d:06:27:1e:46:74:20:
17:9f:a3:9d:06:d9:45:04:6a:14:76:ff:50:4c:7b:
9a:75:4b:49:84:ec:4c:9b:b1:7d:ec:63:0f:13:62:
31:0c:aa:91:7a:b7:81:59:82:81:32:a3:f4:32:53:
47:69:2b:af:b0:2c:a0:54:3a:88:3c:71:d2:12:ef:
7c:72:b7:a7:7e:8a:bc:37:34:fb:ba:a3:da:7b:2d:
55:2a:1f:96:a3:30:89:d3:b3:d2:c0:48:e8:91:ae:
98:c9:80:ab:1e:45:44:a4:06:f2:75:fe:95:4c:b0:
8a:9a:77:b0:74:06:70:3c:97:db:4c:b5:92:37:42:
f0:1b:b2:f1:a9:d3:ad:75:f3:d7:19:12:50:b5:d0:
6e:16:3e:c4:15:0a:9d:01:c1:0a:e9:2e:b0:93:71:
64:37:b3:c1:b2:eb:2a:05:9a:ea:8c:16:c1:3b:96:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:ED:9F:8E:CF:7D:AD:17:DF:06:C1:AA:24:90:E6:B1:86:69:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fubtn47Pfa0X3wbBqiSQ5rGGaYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:ee:7c:7d:d6:8f:65:71:47:89:91:29:55:31:1b:d8:a8:31:
a5:ad:f4:00:89:f0:3a:ac:17:7d:bf:da:b5:12:1d:be:68:b0:
54:96:d6:cf:20:b3:d5:10:b0:d1:fc:36:60:b7:ea:74:f3:97:
90:56:99:3f:ae:34:20:38:61:05:90:c9:ef:56:f0:dc:ba:b4:
f3:de:1a:b8:04:dc:a5:0c:81:5f:34:c6:14:ac:e9:3a:20:1a:
ac:b4:31:76:a4:b2:4c:34:8d:31:10:f4:e0:fc:9f:89:5f:0c:
e8:13:f5:3f:5a:ef:83:e3:10:50:03:87:55:c6:ea:8e:49:88:
59:65:82:ee:5a:27:12:04:44:c1:aa:20:33:28:45:1a:2a:c2:
aa:ea:80:be:7a:6f:15:e2:69:b3:63:94:37:f9:a4:f2:f0:42:
f7:9a:2b:44:db:8e:5a:40:be:0d:29:c4:0c:0b:62:a2:3d:d1:
8b:6a:21:83:f6:22:9d:7b:e9:26:d0:c0:64:54:b2:52:69:97:
28:ff:a1:d8:ad:93:dd:b3:bd:cd:00:98:ea:72:60:fa:c7:29:
b3:47:85:30:14:ad:8a:89:53:67:b6:76:69:fd:0b:a7:7e:96:
d4:85:7c:75:91:76:32:2c:8a:57:5c:db:35:2c:46:cf:23:d1:
0b:6b:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:12:49 2025 by rpki-client