Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_NndOsDTC3KQonUazNq_y0b0hg.roa
File: F_NndOsDTC3KQonUazNq_y0b0hg.roa (raw, json)
Hash identifier: xZ0D+cd+AK6mpx2lIOmM/Axa6XfIHW9KifNi0UL5j84=
Subject key identifier: 17:F3:67:74:EB:03:4C:2D:CA:42:89:D4:6B:33:6A:FF:2D:1B:D2:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859F3CC96EEACDC9D39AEC9E2D991345CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_NndOsDTC3KQonUazNq_y0b0hg.roa
Signing time: Wed 11 Jan 2023 05:10:39 +0000
ROA not before: Wed 11 Jan 2023 05:10:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:3c:c9:6e:ea:cd:c9:d3:9a:ec:9e:2d:99:13:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 05:10:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f36774eb034c2dca4289d46b336aff2d1bd218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:f2:55:6d:40:2c:52:68:78:75:ca:d5:7b:
45:68:c9:90:3a:80:ce:94:d7:f0:a6:ea:87:45:83:
bd:0a:99:1b:55:c6:4b:05:95:35:c6:30:ee:a7:99:
b9:8f:ea:a8:b4:0e:fd:4a:a2:7e:bf:1c:5b:50:bb:
c7:7a:5b:41:68:64:65:67:d0:e1:0a:36:9c:be:e9:
b7:05:bd:7b:b6:66:e3:c5:9d:ac:2b:49:0f:73:df:
de:58:3e:33:ae:cf:25:15:ab:12:a6:ea:95:f2:91:
0d:71:13:7d:3e:11:b0:7c:70:32:b8:83:64:c2:46:
1c:18:97:0c:92:9a:aa:d3:26:17:71:9a:89:cc:2a:
3d:47:48:d5:0a:2a:2f:1b:ca:59:db:0b:05:7c:67:
6d:1f:77:04:8f:77:69:b4:e5:e2:4c:98:b5:42:20:
bd:8c:30:00:a7:c0:66:bc:f4:94:38:1a:8b:bd:0c:
85:a4:0a:f3:12:57:e1:64:19:b4:2b:33:11:72:f5:
08:a9:4a:bb:2b:85:77:1d:30:29:d6:f3:0d:68:91:
d6:b3:a5:01:c8:6a:ca:b8:a5:d2:ba:29:88:6d:08:
32:92:57:38:5d:5f:5d:11:77:0e:e5:65:bd:30:72:
8d:ef:fd:47:dc:53:ad:3e:fa:3c:ae:cf:58:16:ef:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:67:74:EB:03:4C:2D:CA:42:89:D4:6B:33:6A:FF:2D:1B:D2:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_NndOsDTC3KQonUazNq_y0b0hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:0f:55:e1:28:3f:6a:f3:64:99:bd:ae:d7:b1:d3:86:35:e5:
05:68:94:28:1f:eb:96:07:1c:8b:7a:29:c8:17:d4:1c:ed:3a:
95:12:b6:88:f8:ef:05:21:fa:ae:b8:cc:b3:60:9d:0e:a9:8e:
43:21:aa:54:ab:34:4b:aa:3e:e5:3b:86:d3:79:82:35:77:18:
a3:85:ce:61:c2:e6:55:7c:e1:38:12:06:1a:5d:93:d8:9a:a6:
3a:24:40:b2:a4:a5:4c:79:b0:ec:a4:32:84:c7:a0:17:46:7e:
06:73:3b:c5:8f:6f:dc:f9:bf:44:4d:a6:1d:e2:49:23:11:6d:
cf:10:44:cb:47:eb:5f:b4:a2:fa:87:19:b4:98:89:69:59:17:
8e:2a:a4:1b:84:f4:10:7c:1c:7f:d3:71:aa:44:f2:d1:53:04:
d5:5d:95:22:00:46:c5:57:67:a1:f7:22:ae:1e:bf:20:ad:b0:
6e:db:c1:ac:89:0e:bf:a9:e7:29:96:69:03:18:13:bd:21:60:
38:5a:59:c4:99:86:c1:9e:da:31:8c:61:20:7e:20:57:cc:fa:
16:e0:3a:98:93:de:df:99:a9:77:95:1b:6b:cf:f4:72:b1:f3:
ea:57:a3:f9:cd:64:8b:bb:bb:07:4d:e4:fa:10:5f:91:69:a2:
48:56:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:02:40 2025 by rpki-client