Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfgfOnOd_LsiLte9St72eXiQmI4.roa
File: FfgfOnOd_LsiLte9St72eXiQmI4.roa (raw, json)
Hash identifier: TRwKFwwtbA8C+mgrY7G9sz5JHGmpoBU/sK4y3/uaGho=
Subject key identifier: 15:F8:1F:3A:73:9D:FC:BB:22:2E:D7:BD:4A:DE:F6:79:78:90:98:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AF8A82CAE6113E28A6EC6968E072C6CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfgfOnOd_LsiLte9St72eXiQmI4.roa
Signing time: Sat 14 Jan 2023 09:09:28 +0000
ROA not before: Sat 14 Jan 2023 09:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:8a:82:ca:e6:11:3e:28:a6:ec:69:68:e0:72:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 09:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f81f3a739dfcbb222ed7bd4adef6797890988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:0b:80:c8:c6:e9:b5:b4:a3:5d:ff:48:4e:
dd:04:6c:e2:82:c8:95:3d:43:d8:6e:cc:0a:13:3b:
19:ba:c8:66:bc:d6:d9:53:33:62:7d:30:aa:b7:63:
f2:40:35:e6:a0:e2:e8:06:82:60:dd:a9:89:81:92:
94:1d:e6:3c:3d:bc:0f:3f:63:82:ea:5a:4a:57:f9:
5a:85:fb:42:9e:24:29:54:58:62:20:26:c5:e9:ce:
3b:3c:55:a1:9d:b0:f4:95:20:eb:79:f1:cf:cd:b4:
c3:20:e6:10:d9:f4:71:65:b2:cb:cd:9c:c8:06:b1:
f2:7c:b9:40:f0:c9:c7:e7:99:5e:94:3d:5a:4b:8a:
54:56:e6:66:11:4a:82:c1:fe:ae:8e:fe:09:45:89:
84:74:08:47:cc:63:ff:4a:e4:15:b9:11:d9:5f:3d:
1c:9c:e6:86:26:25:53:de:ee:49:02:6e:5c:b4:7b:
be:28:ea:ac:27:8e:df:4f:a8:d7:9f:53:e5:2a:58:
79:55:c5:59:88:d9:2a:bb:45:52:84:d7:e2:54:e0:
80:99:5d:4a:81:56:71:af:8a:44:ee:22:53:89:99:
b2:a3:44:b1:31:92:56:b8:7e:05:9a:7b:99:b8:2e:
81:09:c6:0b:3e:31:72:d7:34:ac:20:44:8f:58:74:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:1F:3A:73:9D:FC:BB:22:2E:D7:BD:4A:DE:F6:79:78:90:98:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FfgfOnOd_LsiLte9St72eXiQmI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:4c:ab:09:86:3b:be:f4:6f:fa:3a:87:74:d3:70:10:f2:33:
90:25:93:af:33:f4:d5:b9:54:62:17:bd:a1:ae:6f:b1:f4:6a:
eb:f1:8e:e9:c2:41:01:1e:6d:d6:06:1d:99:b3:55:c9:af:4f:
54:46:2d:53:64:ef:0e:1d:ed:12:e2:20:10:65:53:45:62:4e:
31:41:52:42:3b:0b:5a:9e:40:cc:4e:b5:37:6c:46:29:0c:dc:
fa:82:a3:91:49:89:ac:a6:de:57:45:48:5e:b9:b6:9a:40:e6:
88:ae:03:8e:eb:7a:d8:da:42:5b:40:b2:41:96:61:ad:64:ca:
71:bc:14:98:6b:5f:52:ae:01:86:27:2e:58:20:fe:c0:6e:32:
ca:8f:7f:39:76:44:ca:67:06:0d:9b:e9:99:c7:53:84:2d:40:
d4:c5:b0:7f:0a:1b:4a:5c:bb:0c:5d:c3:ac:7f:fe:3f:49:9f:
da:79:bd:b0:ec:5b:a8:73:0e:1c:72:6d:38:a3:c4:c7:22:6f:
87:3f:f9:e6:46:d8:41:68:14:a2:e0:46:4c:c0:8d:dd:eb:4d:
6c:74:c5:17:27:d6:e8:84:b4:36:9f:92:24:d7:50:80:5f:04:
05:8b:91:00:fc:75:54:41:22:cf:13:29:1e:7f:a8:93:5c:0a:
64:45:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:35 2025 by rpki-client