Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sfdi6TKbOPXPXdpo_4QWDnpiCAg.roa
File: sfdi6TKbOPXPXdpo_4QWDnpiCAg.roa (raw, json)
Hash identifier: /BWFtFho8Gh1jUnkXtuOMnU95ypN7bHsYzQjvudvmw4=
Subject key identifier: B1:F7:62:E9:32:9B:38:F5:CF:5D:DA:68:FF:84:16:0E:7A:62:08:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183048EAC960A54103EAF473A5FE6B7303A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sfdi6TKbOPXPXdpo_4QWDnpiCAg.roa
Signing time: Sat 03 Sep 2022 18:13:22 +0000
ROA not before: Sat 03 Sep 2022 18:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:04:8e:ac:96:0a:54:10:3e:af:47:3a:5f:e6:b7:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 18:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1f762e9329b38f5cf5dda68ff84160e7a620808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:71:cf:ad:02:f5:7d:66:98:2b:a0:0f:12:
a5:9f:6f:31:99:72:0a:96:2d:c3:a4:f1:56:0d:af:
9c:a6:3f:a9:6c:36:b6:ab:7d:97:01:7a:f3:99:01:
48:e3:8b:c5:d2:b9:91:90:ef:19:0f:02:7f:74:ec:
bd:64:aa:1f:17:2c:9e:9e:b4:f3:5f:9c:ee:10:d3:
ae:18:c8:a7:7d:b4:5b:19:ed:e6:2a:f4:80:b4:fd:
b7:61:73:7f:81:23:13:2c:d6:5a:94:91:b0:1b:95:
79:b7:da:a6:5c:5f:47:40:80:87:09:30:32:ef:21:
81:e9:86:28:05:a5:68:9b:bb:02:39:c6:5b:a5:15:
b1:c5:fa:d6:ee:c6:ee:cc:d3:02:7a:55:0f:ef:1c:
bb:f5:d9:2b:f4:6b:cd:25:61:bc:96:4f:bf:b8:6a:
8d:51:a4:f3:83:3b:a6:25:55:4a:be:70:95:c5:1d:
3b:e0:cb:54:73:ca:02:ea:6d:be:51:d7:f7:4f:bf:
00:93:be:ea:e4:8f:02:33:c2:03:8d:5b:c9:84:c8:
a6:57:d9:f9:d4:b5:b6:6a:15:7a:7c:ba:f8:64:9e:
3c:0d:f2:f0:5e:1f:ff:34:65:26:99:5b:5c:94:52:
c5:35:e0:80:15:8d:a7:b1:87:dd:73:25:ba:43:61:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:62:E9:32:9B:38:F5:CF:5D:DA:68:FF:84:16:0E:7A:62:08:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sfdi6TKbOPXPXdpo_4QWDnpiCAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:bf:cf:37:1d:b4:c1:de:f1:11:cd:10:d9:71:8e:e6:77:27:
8e:a6:88:46:fb:85:99:66:36:c1:49:77:53:45:fb:85:cf:64:
df:21:b6:6e:a3:ea:b7:f2:09:ff:8c:59:95:bc:ee:ef:9c:81:
6a:41:3d:da:56:0f:cf:79:ad:71:16:6d:32:0f:29:9f:51:fe:
2a:5d:66:85:ed:08:8a:c3:cf:e3:d1:fc:c6:23:e2:f8:67:9e:
29:c3:b7:95:5d:5f:be:19:71:45:69:48:bc:e5:89:c8:8e:a6:
c1:82:e2:66:c0:68:1b:63:75:f4:88:36:3b:f0:40:69:f1:34:
38:44:64:d9:cc:cc:4d:24:ce:ab:42:aa:54:f4:95:fb:ba:1f:
c1:42:78:7a:5e:e8:c3:08:26:a7:1a:25:2a:28:94:8c:40:a2:
d7:00:18:e1:88:64:6d:69:17:9d:d8:72:c3:54:99:0d:77:ac:
bc:69:c1:e9:4e:0a:66:88:4b:15:bd:6b:ea:ce:01:54:95:e2:
0e:ed:71:0d:3d:c1:22:3b:79:59:d4:35:70:f7:23:b0:b2:f5:
93:40:aa:8c:06:33:7c:5e:5b:83:b9:2c:ce:97:f1:8d:9c:ad:
79:01:97:88:5d:08:b9:d5:4d:6a:f6:9b:45:ac:84:72:be:20:
7a:a1:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:56:32 2025 by rpki-client