Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FemPnjNLDZj8pWGRyD1cMl_kFF8.roa
File: FemPnjNLDZj8pWGRyD1cMl_kFF8.roa (raw, json)
Hash identifier: UH1igwFYEJ+uHRNyy/3exsUMy43XZQ3MlqVaDimgAXg=
Subject key identifier: 15:E9:8F:9E:33:4B:0D:98:FC:A5:61:91:C8:3D:5C:32:5F:E4:14:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018427B9B0131CD9A2E739962C06099B4AC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FemPnjNLDZj8pWGRyD1cMl_kFF8.roa
Signing time: Sun 30 Oct 2022 07:09:51 +0000
ROA not before: Sun 30 Oct 2022 07:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:b9:b0:13:1c:d9:a2:e7:39:96:2c:06:09:9b:4a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 07:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15e98f9e334b0d98fca56191c83d5c325fe4145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:47:e2:fa:11:6c:46:5b:6a:12:5b:f5:d2:
6e:a2:24:4f:b6:1f:4f:e4:6c:56:ad:4c:be:af:03:
e5:0e:e9:fe:be:60:6b:5c:85:f7:c7:a1:ca:50:61:
fb:ec:ce:7f:45:55:9a:50:ae:3c:48:f1:27:7e:68:
75:87:16:52:d9:76:d2:29:11:ee:2f:7e:bf:34:64:
41:ef:0d:27:ab:67:f6:62:e6:35:7b:8b:03:4b:ce:
0e:4e:00:d8:3f:ae:b5:e7:83:aa:e2:69:8e:57:7b:
6d:9a:63:1e:3e:4a:24:e9:61:b0:00:8a:ae:14:89:
45:12:2c:da:e1:3c:b2:fb:0a:a2:5a:35:c8:e7:41:
a3:cb:63:83:08:42:2c:34:d3:25:96:d8:02:20:a5:
2d:b4:5f:22:72:4e:23:5f:07:2f:1e:ef:92:ce:0e:
67:6b:e1:6d:40:bb:07:b7:51:8c:91:74:d3:29:c1:
df:3b:7c:cb:90:65:d9:98:63:98:f2:1e:b3:e4:47:
73:b6:55:75:6e:fb:68:ea:c8:6d:02:62:cc:bf:36:
19:ce:d9:08:92:19:69:ce:00:74:93:d0:a1:0b:de:
bf:9e:17:e3:bf:8e:4e:02:2a:18:e3:40:2c:92:35:
6b:29:4c:9f:3f:d6:26:dc:16:cb:2c:11:fe:91:b5:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:8F:9E:33:4B:0D:98:FC:A5:61:91:C8:3D:5C:32:5F:E4:14:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FemPnjNLDZj8pWGRyD1cMl_kFF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:9b:59:af:32:46:a9:bb:e8:56:7c:50:bb:6e:00:5d:d7:40:
91:ff:16:dc:fe:80:23:07:9f:45:99:25:71:2a:bb:c1:05:5b:
53:37:7e:94:99:ce:8e:86:03:f6:13:c3:cc:16:17:47:c6:f6:
48:7e:d1:ca:3e:cb:4d:03:3a:e7:66:cb:1c:c6:76:db:b0:23:
93:e2:53:c5:75:18:9f:06:8e:da:d3:84:7e:5d:5d:59:7d:24:
ce:31:30:71:88:30:d6:ee:f1:6a:a8:14:92:1d:75:2f:ab:fb:
49:31:ad:35:60:e3:01:45:f8:51:b0:e4:46:a8:c2:18:fa:7c:
74:07:8e:b6:28:69:44:b8:2e:12:f3:55:08:6e:82:1d:6a:04:
db:65:85:f8:d6:e6:fb:de:07:ff:64:34:78:af:50:83:eb:4e:
23:69:20:27:41:bc:36:ea:eb:ea:96:81:37:e8:70:70:fb:63:
bd:c0:02:27:60:2d:cd:b4:f1:98:0a:46:b9:0b:bd:50:a7:ec:
34:62:8e:78:51:75:55:e2:65:da:9c:01:4c:32:dc:a8:89:db:
81:71:ca:ff:4e:53:a9:6a:25:2b:60:71:2c:52:0b:87:68:c9:
b9:7c:05:04:db:f8:12:e9:aa:75:38:bb:31:d9:a7:50:d2:37:
b9:5b:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:55 2025 by rpki-client