Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfG6wmKzrrKmLWnxcdQ4I7BE3qc.roa
File: FfG6wmKzrrKmLWnxcdQ4I7BE3qc.roa (raw, json)
Hash identifier: /pEr5DewF34XkPZtinz5sPHdWQxDJo7XJ6s2Hi7iswE=
Subject key identifier: 15:F1:BA:C2:62:B3:AE:B2:A6:2D:69:F1:71:D4:38:23:B0:44:DE:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185485005AC490B560D19913FF312019018
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfG6wmKzrrKmLWnxcdQ4I7BE3qc.roa
Signing time: Sun 25 Dec 2022 08:04:41 +0000
ROA not before: Sun 25 Dec 2022 08:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
2001:67c:64:ffff:0:185:484f:7e2b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:50:05:ac:49:0b:56:0d:19:91:3f:f3:12:01:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 08:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f1bac262b3aeb2a62d69f171d43823b044dea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:dd:f6:46:35:e5:ea:58:ba:6b:2b:0b:c8:
f7:67:0c:d1:a7:76:44:1f:1d:34:e3:54:9b:e8:bd:
7d:78:ae:9d:b1:dc:13:00:47:7a:2e:d7:51:1d:19:
26:c5:0f:3e:80:dd:80:50:04:cb:a6:b0:9f:da:11:
0e:c1:e8:45:ee:6c:0f:22:d1:a4:3b:39:84:0e:80:
53:8a:bb:99:bb:c9:50:11:1e:f5:77:92:97:7e:ee:
7f:75:35:c1:21:f0:95:42:30:72:bf:aa:7e:9a:4b:
2b:07:09:90:38:6b:54:00:21:eb:0c:0b:4f:c4:2e:
c5:33:47:66:a7:30:71:1f:cd:54:54:57:86:77:65:
a2:7b:e3:3e:95:e9:28:16:39:7e:98:7e:76:75:e4:
37:3b:b2:52:12:ba:17:27:27:0e:71:00:0e:7c:d4:
3d:6e:0e:cd:81:5b:0f:49:56:2a:93:dc:a1:d3:dd:
bc:8d:5a:a8:90:71:98:aa:a1:fd:95:c1:76:b0:67:
2b:d4:ae:a1:02:2c:72:72:de:04:79:24:c0:92:dd:
d3:5d:7d:70:f4:f3:3e:86:13:1e:72:b9:47:1f:a7:
73:67:44:bd:31:1c:9c:79:4c:53:8b:ce:15:c3:4f:
13:2c:31:7b:cf:e8:99:31:c8:f1:16:2d:d3:88:c9:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:BA:C2:62:B3:AE:B2:A6:2D:69:F1:71:D4:38:23:B0:44:DE:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfG6wmKzrrKmLWnxcdQ4I7BE3qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:4f:b9:0f:ee:0e:e8:ac:94:09:90:cc:cc:30:54:0f:61:5d:
7e:23:4f:4b:f1:bf:33:66:1b:31:0c:5d:22:57:8d:a3:4c:b5:
8c:e4:51:78:38:f8:07:36:89:f4:18:c4:6a:b4:a4:0d:41:c4:
95:0a:35:44:16:f0:3f:82:5c:17:44:bc:ba:98:6e:fa:d2:1d:
93:6e:42:54:a2:81:18:36:49:8b:15:f0:8c:f9:ac:b6:f7:1e:
e7:52:02:d1:91:4f:5f:46:d6:6d:3d:35:60:37:80:c7:b6:49:
0d:d7:81:7b:2f:fd:df:6d:bc:29:d6:c9:62:a3:b6:49:20:52:
cd:76:35:81:e4:39:33:54:0b:af:85:a3:5f:42:3e:90:6c:e8:
b1:ae:04:11:1b:2a:8e:be:77:fd:57:d2:85:5c:2f:0b:0b:38:
bd:7c:60:5b:1f:5c:6e:e2:7b:63:88:f6:b8:2b:14:93:29:15:
a9:fc:23:f0:5d:e5:a2:40:a3:cd:6c:68:55:66:83:d9:36:9f:
6b:99:b4:c2:cc:93:3a:d8:ab:16:7c:6e:06:7a:9a:13:76:e9:
d4:8d:9b:77:0c:50:88:98:d2:34:f1:b1:e2:1e:e2:f0:57:8e:
26:d6:55:7f:31:80:b7:81:25:a4:a1:b7:95:9a:4e:6e:2f:22:
4d:42:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:24 2025 by rpki-client