Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwdPf6OHw5sUc6OVCpS7wkqyUO0.roa
File: fwdPf6OHw5sUc6OVCpS7wkqyUO0.roa (raw, json)
Hash identifier: WRynJ3pSKHOnIRrRio8O9vyXKitrZ6iJ97gSkaXMWLo=
Subject key identifier: 7F:07:4F:7F:A3:87:C3:9B:14:73:A3:95:0A:94:BB:C2:4A:B2:50:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A36F019A24D682D17289E2E0859020F57
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwdPf6OHw5sUc6OVCpS7wkqyUO0.roa
Signing time: Sun 27 Aug 2023 12:20:19 +0000
ROA not before: Sun 27 Aug 2023 12:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:f0:19:a2:4d:68:2d:17:28:9e:2e:08:59:02:0f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 12:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f074f7fa387c39b1473a3950a94bbc24ab250ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:8e:a2:f5:17:94:3d:54:2c:ad:ab:c2:da:
e1:db:8d:b3:5c:34:54:86:d8:f6:fb:c1:d7:da:91:
a8:4c:6f:d5:79:3f:7c:23:56:b5:e9:f5:9b:94:ad:
45:a2:79:0b:72:15:ed:32:2a:47:71:9e:a7:9a:e7:
7d:c4:dd:05:d6:4f:2c:22:fc:00:97:fb:01:8a:3e:
02:1c:ff:84:67:bb:5d:1e:2b:5a:75:93:3c:b6:19:
f1:f0:f7:a1:2a:b4:5f:6c:bb:dc:3a:eb:64:8b:32:
3a:40:27:b0:d8:46:e6:6c:e6:ec:46:e9:11:fd:78:
5b:9b:30:50:05:66:f2:a7:e9:e6:9a:1b:79:4c:cd:
9c:f9:8a:3b:ed:6b:4f:fa:0b:b4:2d:6e:7c:5f:b5:
a9:4f:d6:db:ef:6e:0b:c7:e6:2b:2d:df:b9:d9:fb:
bd:a7:0a:bd:cb:79:a4:af:6c:6f:94:e3:e1:77:19:
31:5c:8d:9e:46:d0:cf:b5:0e:a4:40:c9:ab:e9:f8:
0b:cf:d9:7a:1a:31:39:50:7a:76:0a:7a:cf:d0:e7:
a9:52:1c:97:0a:88:7d:b5:26:f7:07:d8:e4:32:9d:
c3:56:e5:c9:e2:d9:2c:53:0b:76:fe:a5:17:76:4e:
8d:4c:11:72:20:66:a4:b6:06:5b:32:8f:2b:7b:8c:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:4F:7F:A3:87:C3:9B:14:73:A3:95:0A:94:BB:C2:4A:B2:50:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwdPf6OHw5sUc6OVCpS7wkqyUO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:19:54:51:cc:97:0e:41:8a:78:f7:d2:8e:62:3d:f3:f1:12:
97:f4:8f:8e:32:6b:6b:19:4f:b0:9d:6d:b5:14:c2:ff:1d:04:
ad:36:eb:c9:ce:aa:3e:1c:40:fa:72:5c:e0:a0:eb:fd:4b:a0:
8b:64:49:a2:b4:8a:30:17:0d:e8:df:a0:9c:95:59:38:b4:43:
3b:1a:c0:2d:51:7e:ea:78:bf:47:e2:5c:eb:8f:fd:e0:34:35:
be:65:60:e5:93:93:a4:da:d9:0f:49:a9:30:84:ef:9d:12:18:
94:d8:23:56:28:13:8f:c0:b9:55:83:55:1d:93:fb:76:88:82:
f5:26:66:27:25:96:5c:f2:fb:89:10:af:37:3b:eb:ec:4a:e7:
11:3b:60:96:91:50:7d:5d:bc:31:95:12:7e:86:c4:1a:32:f8:
6c:22:24:3d:d0:9d:89:0d:31:e5:cd:64:14:48:3c:43:fc:bf:
99:67:f7:7a:99:03:cf:b4:f0:10:16:8b:5b:60:f4:71:84:a9:
d8:fb:af:5b:c6:a8:2c:61:b8:4c:7f:d9:44:bb:d4:07:a9:43:
e9:e4:dc:48:fb:ca:fa:5a:0d:e7:7f:34:f7:29:15:02:9d:eb:
46:5f:1a:06:15:60:61:1a:4e:b4:a3:fa:29:23:a3:15:f8:9e:
75:73:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:59:56 2025 by rpki-client