Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1FIHJ-Kez4iRXsUe2a85TD-lCs.roa
File: z1FIHJ-Kez4iRXsUe2a85TD-lCs.roa (raw, json)
Hash identifier: NWUyhk/D1uD02NZTgku0bAk8anRdr61Cu2JegspK9Pw=
Subject key identifier: CF:51:48:1C:9F:8A:7B:3E:22:45:7B:14:7B:66:BC:E5:30:FE:94:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2EF1E5A2A5A4F77F20837DB307C06929
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1FIHJ-Kez4iRXsUe2a85TD-lCs.roa
Signing time: Fri 25 Aug 2023 23:05:19 +0000
ROA not before: Fri 25 Aug 2023 23:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2ef1:7752/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:f1:e5:a2:a5:a4:f7:7f:20:83:7d:b3:07:c0:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 23:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf51481c9f8a7b3e22457b147b66bce530fe942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:70:f1:04:7b:6b:4d:e6:c6:b6:01:07:c3:
dc:9a:a8:e8:91:8a:a0:11:66:b2:cb:d4:17:72:9d:
9f:2d:0b:43:01:99:6b:2c:62:52:49:2b:dc:16:0c:
39:f7:52:e0:84:b2:25:22:9a:47:e6:d2:be:8e:4a:
72:ef:39:f8:5e:d2:0d:cb:37:22:b6:46:32:d0:3f:
a1:93:69:b1:aa:0a:93:c6:36:99:81:7b:cc:9a:10:
89:99:a2:42:39:46:91:d0:d4:1c:15:66:20:5a:91:
d8:a8:38:42:b5:04:cf:59:94:69:0d:dc:40:81:d4:
dc:1a:e7:66:75:7b:bc:c9:83:e1:f9:97:d6:d3:91:
5f:55:6e:a5:77:c9:5d:51:64:4c:4a:0f:fd:8a:c2:
03:6d:e1:2a:46:6d:08:94:8c:0f:9f:bf:b0:80:f1:
bd:25:f4:4f:97:ec:79:99:81:e3:94:a9:79:23:07:
a3:df:f8:d4:53:4b:75:a3:a5:51:ae:d4:e2:c3:23:
97:85:0d:24:4f:9d:59:fa:26:f8:7e:d5:13:4f:9c:
87:37:af:5b:1c:f3:32:c0:68:f2:36:09:9c:e7:85:
2e:62:50:6f:3d:87:3b:c7:40:d2:73:73:c9:65:2c:
07:e2:37:70:8a:58:a2:8b:2e:08:09:ef:04:d6:fc:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:48:1C:9F:8A:7B:3E:22:45:7B:14:7B:66:BC:E5:30:FE:94:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1FIHJ-Kez4iRXsUe2a85TD-lCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:82:ad:92:61:24:6a:b6:64:6c:c6:70:81:fe:db:af:25:27:
dc:fa:8d:56:03:85:a1:79:de:ba:7e:19:e7:a8:2e:b7:2d:7b:
d3:ba:8f:d7:d8:66:eb:d6:d8:59:bf:87:d8:4a:16:5e:62:d0:
7d:3a:33:0c:be:db:7c:4c:d7:e6:96:5f:6b:12:36:4a:21:98:
94:1e:63:80:cd:ea:d8:76:9e:f1:ee:b2:7e:9e:54:46:9d:e5:
59:80:04:54:f2:cc:1c:a7:b8:c5:91:95:05:d6:fb:a4:c2:d4:
52:50:fb:75:6f:79:29:50:fb:38:c7:86:96:03:c3:ab:38:bc:
27:72:d1:96:0a:72:49:4f:01:95:82:c8:19:ec:b3:a7:55:57:
1d:d1:a5:73:bd:10:e4:a0:1f:d7:db:b9:c0:87:a9:7c:6f:57:
d8:95:d6:ed:44:54:84:03:97:c5:20:95:a7:91:f6:ab:87:cb:
a2:ba:d4:0b:48:d7:82:e4:d7:fa:c7:69:af:e0:76:90:fe:81:
d1:34:26:08:2f:72:9b:59:75:49:7d:0b:0b:6b:f2:cd:c7:f0:
ea:78:c2:ff:bb:8e:ae:cf:1d:39:8d:50:f0:e6:74:d9:48:9c:
57:ad:23:8d:0d:4d:e5:7d:28:8c:12:dd:e9:b5:2b:f5:bc:f3:
51:9a:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:07:47 2025 by rpki-client