Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwIMm-r3WJlam4Wc_PxNC08s9bI.roa
File: fwIMm-r3WJlam4Wc_PxNC08s9bI.roa (raw, json)
Hash identifier: YX2ic3Inynt9zigDBsyd/u6JltXbq7OCPrUmRgg0ea4=
Subject key identifier: 7F:02:0C:9B:EA:F7:58:99:5A:9B:85:9C:FC:FC:4D:0B:4F:2C:F5:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67E02F04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwIMm-r3WJlam4Wc_PxNC08s9bI.roa
Signing time: Fri 04 Feb 2022 17:19:53 +0000
ROA not before: Fri 04 Feb 2022 17:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742745348 (0x67e02f04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 17:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f020c9beaf758995a9b859cfcfc4d0b4f2cf5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:31:e2:cd:8c:36:39:53:47:3c:b5:2c:1e:
71:2f:fb:a0:69:e4:44:b8:d8:96:82:44:20:4c:a5:
a3:fc:ec:d6:28:44:9e:3b:63:bd:52:e0:89:a8:5b:
ea:95:7a:a9:c3:8b:e6:bc:66:4c:c9:b8:5b:02:76:
7a:ac:7c:cf:1d:d9:73:65:e5:64:bc:08:ef:71:25:
56:c4:33:4d:3a:2a:44:1f:b3:fe:b5:49:09:8c:f7:
d5:0a:45:6a:f0:01:b3:7c:c4:6d:62:68:df:bf:16:
c0:71:8a:55:42:a3:f8:46:f3:08:3f:72:3f:88:35:
47:f5:ff:1a:fb:fb:10:96:f3:d5:5f:4e:c8:9a:e2:
8d:2d:ed:f8:98:ea:8a:b7:f2:fa:b1:50:aa:a5:ae:
ab:5f:cd:1a:7d:4b:ca:aa:07:a0:9e:5d:d2:b1:33:
f3:48:a1:c8:3c:9e:28:ff:a7:98:6e:e3:f2:68:76:
4d:28:e9:65:19:8c:d8:b9:a1:8d:12:71:19:9a:b0:
2f:29:f5:c5:1c:0f:45:59:ce:97:9a:51:59:7d:06:
ad:c3:c1:26:1f:00:5b:9c:9b:5b:f0:18:03:80:8c:
39:05:b1:79:86:53:a4:30:b3:12:9e:96:7c:05:e6:
43:c6:28:61:80:ff:88:ea:8e:25:9d:df:2b:99:d6:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:0C:9B:EA:F7:58:99:5A:9B:85:9C:FC:FC:4D:0B:4F:2C:F5:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwIMm-r3WJlam4Wc_PxNC08s9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:97:25:69:06:3d:a3:e4:1a:a7:9f:b6:24:da:a4:0f:08:8e:
55:60:73:83:62:45:23:1f:30:41:8e:a4:cd:f6:75:12:34:f7:
f1:83:6b:61:43:c4:95:43:92:c9:a4:37:47:22:25:46:dd:4e:
a6:be:66:09:2b:c4:cd:44:7c:fb:5a:75:13:7c:6f:42:22:ec:
73:63:7f:58:91:4a:5e:33:7e:39:93:26:ad:31:2c:ef:df:82:
07:48:4b:50:93:93:10:3e:04:91:e1:0a:fb:c7:5c:4e:8b:63:
cb:9c:fa:6e:9f:bf:0a:e6:41:03:98:6b:7d:97:93:7f:4a:33:
3c:00:49:46:b6:20:f9:47:b4:e8:b9:7a:a2:be:fc:6d:c9:4a:
d2:66:93:de:f8:a0:e1:fc:47:23:6b:fa:7d:0e:fb:c3:4a:4c:
05:42:3c:5c:6e:c9:5a:69:8d:00:ca:03:6b:7b:e9:7e:d5:b0:
5b:7d:ab:7c:25:60:5d:5e:3a:8a:17:bd:b9:5e:b5:7a:dc:f9:
52:02:4a:10:a7:e0:3f:26:d3:8a:84:f1:d8:94:c7:8b:91:5a:
08:ab:5d:47:f9:37:43:91:94:41:6f:eb:56:a0:0c:5a:5b:fc:
87:79:ed:40:62:30:3b:31:7d:1c:94:c8:6c:3b:88:29:a8:a0:
be:e6:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client