Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fz9TkzsI5cJw9Nt83AfL0dQdbgc.roa
File: Fz9TkzsI5cJw9Nt83AfL0dQdbgc.roa (raw, json)
Hash identifier: fGorqf6sAx8Fm5agKD9Uh6Suf9tAsqI89yBfuKKQ8DY=
Subject key identifier: 17:3F:53:93:3B:08:E5:C2:70:F4:DB:7C:DC:07:CB:D1:D4:1D:6E:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A846B6254308885CF69981048D5BD0D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fz9TkzsI5cJw9Nt83AfL0dQdbgc.roa
Signing time: Thu 24 Nov 2022 06:15:17 +0000
ROA not before: Thu 24 Nov 2022 06:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:46:b6:25:43:08:88:5c:f6:99:81:04:8d:5b:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 06:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=173f53933b08e5c270f4db7cdc07cbd1d41d6e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:5f:48:41:04:92:d4:7a:4b:af:3d:f7:6d:
20:19:2d:d8:18:60:2c:b6:61:ba:8a:7c:45:3d:fe:
d6:00:26:e5:1d:96:b7:c1:75:61:88:e2:eb:c4:4d:
e3:08:ff:1d:e5:46:d2:24:6c:53:fe:b7:11:e1:4e:
10:d8:71:e6:7b:79:03:61:0d:cd:d2:e4:6a:5f:c0:
b8:83:4c:4c:bb:fe:de:48:21:c2:80:99:2e:5f:06:
14:be:ee:6d:a5:7b:44:1c:51:d4:16:2c:ef:bc:62:
69:a0:0d:dd:14:19:ca:1d:51:2c:1b:c9:d8:4c:fa:
ec:aa:81:55:cd:39:29:67:4f:0c:fb:f1:12:44:ff:
cd:c8:57:b8:8c:54:0d:cb:bf:3e:ff:d4:7b:36:73:
32:2d:fc:61:33:70:9e:74:10:36:fb:e3:87:92:4a:
32:06:38:3c:c0:e6:a3:e4:bb:44:9c:a7:66:d6:64:
16:06:b2:89:ff:6a:64:da:f6:ef:39:dc:3b:78:92:
e7:25:04:bc:13:03:fe:90:b6:7f:7d:7c:a7:8b:c5:
7e:f8:eb:72:9b:98:76:58:3a:f8:d2:0d:76:62:dd:
93:ce:51:33:a7:d1:de:ea:41:b5:69:1f:01:ce:4c:
38:23:e8:d9:0c:2d:d4:21:75:f2:3e:56:f2:e9:62:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:53:93:3B:08:E5:C2:70:F4:DB:7C:DC:07:CB:D1:D4:1D:6E:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fz9TkzsI5cJw9Nt83AfL0dQdbgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:7a:00:60:8e:74:0b:9f:51:1f:a0:4d:5b:50:31:fd:9d:75:
2e:a0:6c:99:2a:46:04:13:5e:5d:7a:9a:26:47:09:80:5d:d5:
14:de:a2:40:19:0a:bf:27:2c:6b:d5:f6:e2:ca:08:05:40:31:
d7:c0:db:be:ff:94:b1:5f:5b:40:e1:24:ee:87:30:f1:6c:e2:
47:fd:5f:17:56:f4:d2:d1:05:00:3a:c4:c1:7e:02:3c:9c:4c:
04:6a:6e:f1:27:8f:f6:08:9d:1e:52:7c:86:58:8c:d2:3f:fe:
fa:3b:46:2c:b3:0e:a0:44:d9:dd:06:f3:2c:b7:34:d6:77:a6:
e1:f5:00:5a:54:47:da:68:2f:aa:c3:db:d0:47:1a:78:bb:e2:
a3:86:9f:28:ae:0a:c4:a3:7f:f5:ea:f0:7e:e6:25:0d:b8:4c:
7b:2d:35:aa:d7:a5:92:b7:a1:94:32:4c:08:9b:0c:3c:85:17:
b9:ed:42:50:f1:ce:0b:54:ba:d0:37:e8:53:c3:1f:ed:d2:4b:
7f:69:d5:88:f2:83:8e:90:e5:d2:75:ef:31:e2:20:2a:f4:5d:
9b:d2:4b:8b:66:bd:85:3b:0d:47:84:92:da:03:e0:3f:6d:f2:
26:d3:16:49:05:9f:07:7c:6a:ec:5d:3f:9a:48:e6:9e:89:0e:
4a:d3:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:53:35 2025 by rpki-client