Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feld0xaztaZdKv28k_33hfSXfV4.roa
File: feld0xaztaZdKv28k_33hfSXfV4.roa (raw, json)
Hash identifier: M0kdhLL4baVeIH+kxhFmHrKn0FwUHhkxMF08krFfwWA=
Subject key identifier: 7D:E9:5D:D3:16:B3:B5:A6:5D:2A:FD:BC:93:FD:F7:85:F4:97:7D:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70E12F36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feld0xaztaZdKv28k_33hfSXfV4.roa
Signing time: Tue 08 Mar 2022 22:09:34 +0000
ROA not before: Tue 08 Mar 2022 22:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893805878 (0x70e12f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 22:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7de95dd316b3b5a65d2afdbc93fdf785f4977d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:25:28:64:7f:e9:ef:a2:43:a9:23:ef:97:
9c:1f:1d:b8:41:1a:e3:16:31:3d:9c:7e:f4:c9:f0:
73:e8:46:48:73:61:53:a1:00:7a:d9:fe:80:bf:93:
b3:a4:56:ad:1f:17:c7:36:c9:55:ba:66:43:87:d9:
f8:a9:a7:1e:25:16:8a:9c:31:38:d3:44:2f:88:fa:
43:a0:08:68:45:86:8c:35:ae:87:99:91:3e:b1:66:
72:34:a1:83:b3:fc:cf:7b:0e:0a:2b:e6:46:74:43:
8a:dc:2b:f5:14:ca:be:81:a3:f6:77:73:79:c3:a4:
19:c3:7d:c0:4a:ed:de:d6:66:6b:72:dc:ed:b3:ad:
5d:54:06:c7:ab:64:07:4d:da:eb:df:1d:70:61:23:
58:27:64:56:63:35:1e:64:55:3a:bd:68:5f:0a:16:
e5:ce:fc:13:d7:45:e2:1a:9c:cb:24:f4:cf:d4:da:
2a:8c:e9:67:cd:84:30:47:62:14:0e:9d:42:ff:84:
45:b1:15:13:ed:da:9b:07:43:45:ea:95:1b:be:38:
9e:a2:4a:44:04:52:e1:75:70:63:aa:19:01:7f:b7:
d9:0f:eb:f7:a1:e8:70:19:48:a2:07:7c:7a:39:db:
ff:9b:c8:65:c8:f1:4e:47:cc:ba:de:68:fe:37:2b:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:5D:D3:16:B3:B5:A6:5D:2A:FD:BC:93:FD:F7:85:F4:97:7D:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/feld0xaztaZdKv28k_33hfSXfV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:b5:c6:2a:8b:d1:80:40:92:c7:c7:eb:ac:ab:31:09:30:1d:
f9:5f:b4:c7:bf:85:f9:98:2c:f7:de:0a:a8:ec:35:73:da:d3:
ac:0f:70:ec:2e:33:17:07:88:d9:62:74:f6:f7:1e:be:6d:49:
83:37:d1:79:94:90:cd:5d:a1:3b:37:18:97:da:17:1f:15:bc:
bb:72:f4:83:43:88:75:3c:9e:7d:b5:c1:44:60:7a:2a:e5:c4:
36:39:00:12:ce:ae:4f:ce:69:8c:1d:a4:65:3c:15:98:f1:f2:
63:3f:75:3c:29:ba:08:3d:87:58:57:e0:0f:2d:f1:07:1d:b1:
44:15:df:44:dd:ad:e5:50:01:e7:a7:b1:d5:9e:57:a3:4c:14:
3f:ae:ac:9f:ad:a2:40:93:58:69:ee:b5:f5:3d:5c:ec:e5:5f:
55:d3:a1:a0:cf:a2:e2:67:a4:c9:35:d9:33:73:a0:bc:16:4d:
2b:45:4c:e4:80:2a:0e:68:a3:98:42:7f:4a:23:3e:c2:8c:6f:
8f:48:f8:84:7d:20:ab:27:c1:3d:4c:7f:10:9b:78:4d:6e:a6:
49:6e:f2:85:98:1a:c7:64:3f:8d:a2:b0:83:4a:2f:93:23:2a:
44:7d:2a:58:db:b3:30:79:c7:82:2d:f0:7e:dd:cc:8d:b7:ef:
c5:3b:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:14:10 2025 by rpki-client