Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1AqSnGZORLF2huaHqrwDlZiD4c.roa
File: F1AqSnGZORLF2huaHqrwDlZiD4c.roa (raw, json)
Hash identifier: kyzkeq4MI2Gbip+dQqZvOyMWzztpSJvQBgfALVvP80U=
Subject key identifier: 17:50:2A:4A:71:99:39:12:C5:DA:1B:9A:1E:AA:F0:0E:56:62:0F:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68AD71F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1AqSnGZORLF2huaHqrwDlZiD4c.roa
Signing time: Mon 07 Feb 2022 10:09:26 +0000
ROA not before: Mon 07 Feb 2022 10:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756197369 (0x68ad71f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 10:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17502a4a71993912c5da1b9a1eaaf00e56620f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:33:f4:84:12:92:5d:ef:0d:5b:dd:99:63:
98:29:ef:fc:da:e6:ad:48:25:4f:c5:50:1f:6b:91:
8b:41:40:42:1b:d5:97:39:a5:7d:43:c6:65:65:f0:
67:47:e4:f1:98:8d:40:33:eb:91:3f:1e:99:2a:db:
9c:82:3d:ae:88:8e:e0:6d:05:ae:5c:c3:32:11:ab:
f6:51:72:c3:c1:77:45:ba:3e:68:1f:3c:f1:8c:f7:
cc:b3:17:83:26:d0:13:ed:07:c3:09:93:91:79:e3:
67:ad:50:7d:d1:3b:ab:ae:fa:c7:fd:eb:72:d8:45:
85:91:6b:94:15:41:d8:7a:34:3f:3f:f0:af:94:36:
1c:66:07:c2:5a:85:c4:42:07:f3:77:ae:86:8b:78:
0d:72:38:d9:0d:e0:33:c0:b6:a8:ba:d7:f8:e9:d7:
a6:a0:dd:86:73:2c:11:2a:af:8c:e3:a6:0e:57:8e:
66:e4:07:04:9d:c5:05:cd:f1:82:64:1c:4f:cd:4c:
8a:c0:3b:87:87:c7:b4:38:39:63:b4:53:48:7b:07:
23:57:81:a5:00:d2:e7:60:3f:6d:8f:6c:f0:ff:c8:
d0:cf:69:7e:d0:96:b0:11:eb:b7:5a:71:34:40:cd:
16:5a:52:45:f1:de:10:d4:ab:14:b4:73:7c:bd:ef:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:2A:4A:71:99:39:12:C5:DA:1B:9A:1E:AA:F0:0E:56:62:0F:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1AqSnGZORLF2huaHqrwDlZiD4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:77:66:66:ea:8c:ef:23:fb:d4:d4:16:2f:ec:f8:a9:18:02:
8d:df:6e:62:1f:70:57:fa:3e:9c:02:cd:ec:09:72:c8:cd:9b:
64:0e:0c:08:20:69:65:7e:ca:1d:d9:64:88:f4:c5:e4:ca:b9:
5e:35:44:d9:5f:37:76:aa:bc:cc:2b:c8:22:27:9c:ae:0d:4e:
d7:88:2b:fa:54:bc:58:8f:43:5b:c9:cb:74:a9:52:e9:e8:c7:
34:35:0b:46:d6:1e:61:90:80:c1:1f:61:c0:18:35:48:15:32:
9f:bf:e4:96:94:f5:dd:24:ed:a4:68:8b:7a:20:06:82:be:36:
82:d6:6a:39:1f:d5:cd:87:39:6c:b5:d2:65:d7:3f:16:bb:17:
97:54:0f:4d:0a:44:8a:68:14:32:ec:7f:b9:3b:9c:82:df:6e:
9d:9e:73:4e:b4:43:bf:fd:02:30:a8:ee:88:f6:8d:34:71:e8:
03:4d:76:73:5d:43:aa:51:48:96:89:45:3f:64:2b:27:80:95:
ab:80:d5:3a:4f:af:f5:f8:b6:03:bb:12:22:c1:1e:8d:9e:62:
56:09:05:2b:77:ae:93:3a:b7:b4:c3:2a:57:9f:b1:c8:17:4e:
8d:21:df:64:79:0c:3a:8a:07:76:2f:f4:4e:f8:3c:b3:0d:12:
f1:d2:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:47:55 2025 by rpki-client