Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fdqnefF3JCMB86iT6zc9Vlk5KIw.roa
File: fdqnefF3JCMB86iT6zc9Vlk5KIw.roa (raw, json)
Hash identifier: gjfuztmn0wDOPznqyEBGnE1pzKQLj+gxngGU0wsvY7w=
Subject key identifier: 7D:DA:A7:79:F1:77:24:23:01:F3:A8:93:EB:37:3D:56:59:39:28:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 762B4B51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fdqnefF3JCMB86iT6zc9Vlk5KIw.roa
Signing time: Sun 27 Mar 2022 14:09:36 +0000
ROA not before: Sun 27 Mar 2022 14:09:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982548817 (0x762b4b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 14:09:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ddaa779f177242301f3a893eb373d565939288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:5c:c3:a1:96:05:40:2d:37:d9:74:35:e1:
0e:c9:80:ca:27:7d:2f:3e:cc:cc:22:aa:59:5b:1d:
7b:c0:be:4d:e5:6e:04:60:88:dc:83:90:67:d8:97:
8a:22:de:12:7c:1e:9c:db:42:8f:f4:6e:37:8f:3a:
25:9a:0c:b3:2f:ee:d6:00:88:d3:9e:38:df:50:2d:
b1:b6:6e:a6:ec:02:66:21:fb:1a:82:9c:68:df:ac:
d6:3b:55:e2:4f:93:45:95:23:6f:4b:65:ce:62:53:
fd:a1:e7:11:25:a0:0c:ae:8b:f5:2b:3c:f7:2e:04:
d9:14:59:96:e1:b4:e1:2e:c6:38:c6:e0:71:63:2e:
d4:ba:ce:0f:96:61:fc:3b:42:a3:8b:e2:bb:95:f8:
58:1e:3c:a2:4c:26:e3:da:60:24:0b:fe:4e:18:8d:
a8:60:fc:5b:68:63:1a:66:0f:c1:21:60:ba:38:b1:
c2:11:e7:47:5f:67:29:92:31:2c:4e:11:eb:3b:41:
a4:ec:e5:53:61:c3:bb:99:aa:43:31:29:48:13:26:
55:2f:a6:4f:e9:57:bb:00:42:94:cc:3e:27:b5:5a:
81:a3:e8:5a:6d:39:1e:51:86:26:88:32:90:c7:5f:
36:41:b3:de:35:56:f6:ce:a1:b2:03:ff:db:7e:d9:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:A7:79:F1:77:24:23:01:F3:A8:93:EB:37:3D:56:59:39:28:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fdqnefF3JCMB86iT6zc9Vlk5KIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:c0:ed:71:9d:10:4a:60:da:3f:a8:d5:2f:62:7f:39:fc:b6:
87:2c:b0:9d:ab:1d:8f:6f:b0:1d:d3:95:53:e4:5b:79:40:7c:
e4:9b:45:33:81:e2:ea:3d:03:f5:f6:2b:8a:a7:20:e3:48:49:
ee:5a:a5:0d:2f:c9:29:b4:8d:8a:94:19:24:09:1f:bf:f6:30:
97:ec:6e:f9:b5:4a:46:75:37:eb:1e:bb:2e:2b:fa:7c:54:00:
b4:5d:6b:5f:66:cb:72:4d:de:7b:cb:3f:1c:48:b4:c0:c7:60:
af:64:2f:d5:d6:46:68:93:85:e1:15:ca:b5:ab:f3:d5:36:fc:
2d:38:7d:f3:3f:80:ac:1e:2e:c7:7e:37:f3:8a:76:32:ed:2f:
dc:5b:04:1f:21:e9:a3:c7:d7:f5:e5:51:c4:05:5f:e0:0d:63:
f0:cd:6a:1e:36:fd:8b:e8:ec:80:22:6f:56:73:3c:ac:89:78:
c9:47:aa:e4:47:4f:cd:80:69:95:76:f7:66:ca:fe:aa:fe:18:
d3:8a:88:cb:ba:4f:3e:4a:d9:cc:52:13:a6:d5:90:7e:5a:9e:
4a:b4:f1:09:ad:be:0e:b2:db:dc:a5:96:14:f7:ea:07:e7:2d:
c0:df:50:ef:a2:87:0b:9c:0f:2c:51:e7:0a:b4:bd:df:3c:23:
7c:89:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:52:55 2025 by rpki-client