Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fz-anfIapkoVgqF_0CrllPw2daE.roa
File: fz-anfIapkoVgqF_0CrllPw2daE.roa (raw, json)
Hash identifier: m6QKQxbBxr3A6aSYybZjEAAmK+JUELCGrWGaq4C/8gs=
Subject key identifier: 7F:3F:9A:9D:F2:1A:A6:4A:15:82:A1:7F:D0:2A:E5:94:FC:36:75:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186624A3C7F964FE4F8268D6B7AAC3BBAF0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fz-anfIapkoVgqF_0CrllPw2daE.roa
Signing time: Sat 18 Feb 2023 02:11:17 +0000
ROA not before: Sat 18 Feb 2023 02:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:62:4a:3c:7f:96:4f:e4:f8:26:8d:6b:7a:ac:3b:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 02:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f3f9a9df21aa64a1582a17fd02ae594fc3675a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:13:c3:f1:48:30:83:bc:b2:2b:b6:3e:91:
da:45:11:42:83:d4:34:9d:48:72:70:61:3b:73:b7:
88:d1:da:3d:ab:16:b6:19:50:b2:3b:af:4c:50:2b:
a0:9e:46:f8:17:ca:81:2e:18:e8:db:b1:c3:7e:25:
04:55:40:5d:ba:10:92:99:c2:26:f2:a7:32:74:b4:
91:e9:73:16:be:34:70:eb:ae:e0:7a:71:fc:b6:1a:
6c:dd:06:2d:cf:c9:a3:dc:cd:89:eb:7b:11:42:94:
fc:f1:fd:23:98:2f:43:9d:16:42:a9:9c:84:01:eb:
8b:a5:37:14:48:49:48:67:f1:93:b1:48:60:5c:ba:
aa:5d:52:f9:26:1d:77:9e:6b:2c:e9:dd:56:e1:11:
74:7f:aa:c7:12:5d:74:d4:e3:f6:0a:c1:e7:7c:c0:
bc:1c:e7:c9:6c:21:8d:5a:cf:8b:d6:eb:61:08:06:
fb:84:df:52:68:42:6c:46:2b:5f:c1:5f:d3:5d:1c:
1f:c8:2a:37:e5:b9:f5:f1:57:3b:69:b4:e9:5a:ed:
43:0e:3a:70:4b:5c:83:e2:4f:bd:9a:6f:cb:fa:91:
c4:1b:63:e7:13:97:81:f5:65:44:91:45:d2:bf:c1:
f7:ad:f8:d5:39:d7:ad:ad:94:3f:fd:c9:cc:b3:38:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:9A:9D:F2:1A:A6:4A:15:82:A1:7F:D0:2A:E5:94:FC:36:75:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fz-anfIapkoVgqF_0CrllPw2daE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:6c:5b:d8:c4:04:e8:3d:01:07:2a:4e:42:34:2a:f9:bd:d1:
0c:e1:cf:62:56:72:75:5f:70:c3:4f:cf:ed:7d:72:ba:46:c2:
b4:ca:64:b4:ff:ae:7f:d3:c8:79:78:12:15:e9:d0:55:82:17:
8b:09:fc:68:2e:00:b1:8e:47:ea:aa:0e:af:ae:be:a6:7b:3c:
15:58:6e:77:24:ec:73:55:ce:9f:90:b9:0c:76:66:68:e1:2b:
60:9f:b5:dd:4b:e6:4d:2f:9c:c7:5a:a1:b9:35:18:57:b8:d7:
dc:43:ec:ab:30:b0:f9:68:47:12:f1:ee:63:0b:ff:48:3a:cb:
04:0e:af:46:8d:39:41:51:59:2d:7a:f4:1d:f2:bb:23:42:ad:
15:e2:ad:4a:65:66:1e:f0:36:c5:c2:a4:7e:d0:3c:7d:fd:92:
4e:62:a0:c2:d0:d9:69:5f:6f:24:c1:4e:14:94:10:15:14:b8:
d3:6c:92:2a:55:ea:7a:17:ea:4d:73:9c:f2:b5:e9:4d:86:31:
df:4c:8b:9a:28:78:7b:b2:b4:4b:d5:aa:fd:ed:15:5b:2f:9f:
ae:a7:1f:d0:1e:01:6f:96:0f:be:65:a7:46:e3:d2:2f:3e:31:
ef:b5:95:44:19:61:2f:29:6b:d0:11:eb:6b:da:18:37:3d:38:
fe:b0:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:46:18 2025 by rpki-client