Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyhQmyv7YTpvn_sm1UtAzqNNLF4.roa
File: FyhQmyv7YTpvn_sm1UtAzqNNLF4.roa (raw, json)
Hash identifier: wDfjkHJGpHxf+PRnx60LvxXyREtgnRgvAu1MmMgyNfc=
Subject key identifier: 17:28:50:9B:2B:FB:61:3A:6F:9F:FB:26:D5:4B:40:CE:A3:4D:2C:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82A0CD39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyhQmyv7YTpvn_sm1UtAzqNNLF4.roa
Signing time: Mon 09 May 2022 23:10:49 +0000
ROA not before: Mon 09 May 2022 23:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191576377 (0x82a0cd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 23:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1728509b2bfb613a6f9ffb26d54b40cea34d2c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:19:81:3b:a7:db:96:3d:8d:76:26:7b:50:
a2:58:8a:45:2b:a8:94:ac:70:a4:ad:1d:af:62:a1:
9a:84:f1:1d:ee:b3:db:f2:19:18:8a:43:f7:85:07:
99:b9:8b:7b:60:66:0e:a0:be:82:b7:1a:8e:5e:71:
83:53:db:4f:3f:bd:42:e9:3e:c8:c6:fe:74:78:d8:
81:a8:27:b5:e2:fd:be:68:58:32:fe:89:66:5b:72:
71:ec:64:4d:b7:74:b6:81:43:d7:fe:5a:34:a1:09:
68:84:c1:af:ab:6b:52:57:ce:80:ae:63:32:82:56:
66:86:b8:11:a4:49:1b:f7:f9:c6:0b:01:c3:c0:6a:
ea:82:f0:1e:1e:ad:20:0d:04:2f:40:ef:52:b9:25:
b2:e8:d9:79:ee:42:cc:3c:7b:a0:e7:bc:82:38:bb:
e3:df:7a:ad:f2:43:8d:63:20:8e:98:d0:da:8d:18:
fc:68:22:cc:85:7f:1c:bf:a9:84:83:da:fc:ee:32:
51:fa:0a:bc:19:76:1d:2c:1d:89:88:47:2b:53:e4:
36:94:93:68:fa:0a:e1:84:3e:ff:80:bf:69:38:ad:
70:79:88:b6:09:5b:06:06:c6:38:6e:3b:a5:65:b5:
ea:f4:56:97:8d:91:58:9f:be:0e:d6:56:dd:5e:86:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:50:9B:2B:FB:61:3A:6F:9F:FB:26:D5:4B:40:CE:A3:4D:2C:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyhQmyv7YTpvn_sm1UtAzqNNLF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a2:b1:5b:a0:0a:db:dc:e9:da:86:52:95:7d:28:37:30:56:
21:e3:d3:21:11:4d:98:e0:0e:1c:cf:0c:13:6e:d0:e7:bc:0b:
50:60:1a:73:06:5f:cb:70:31:ae:b2:ef:14:64:1a:50:b6:e3:
92:f1:0a:ee:7b:70:ad:5a:4c:31:82:e2:94:42:13:4d:82:58:
7a:d2:ca:18:9d:e8:0d:00:53:43:81:bc:c7:20:39:a2:38:c6:
a2:a3:23:66:be:04:eb:af:04:56:c2:b3:a4:fc:b8:14:2c:5d:
99:b0:63:db:dc:56:79:47:f2:5c:3c:94:85:e8:7f:ac:10:b3:
6c:ae:4c:e6:c7:6a:af:fa:0e:d2:f1:9b:36:18:0d:74:6a:7e:
91:89:71:10:5b:f5:fe:b0:a2:77:d7:aa:ce:90:cd:ad:d4:09:
a3:75:8a:6c:a1:3c:6d:07:18:16:4d:99:d9:e1:4c:5e:9e:ff:
31:66:a3:11:3f:92:22:fd:8f:68:f1:e8:57:3b:a2:d1:7a:73:
b4:90:32:ac:64:1e:45:0d:1a:ad:f9:60:a0:93:94:4e:8c:b1:
14:2d:4c:9d:c5:51:7f:2e:81:11:03:73:49:77:fd:3b:10:7a:
a8:92:1f:e6:8a:99:55:ef:e9:f8:88:29:37:e3:bf:d5:bb:b4:
6f:4c:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:22:05 2025 by rpki-client