Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv2AL-QqtE6B-1s5ywAmijsbxfs.roa
File: fv2AL-QqtE6B-1s5ywAmijsbxfs.roa (raw, json)
Hash identifier: 0vKETDBWETrk6XslFSkb9zOj50VTsGccOxwCLxXdoF8=
Subject key identifier: 7E:FD:80:2F:E4:2A:B4:4E:81:FB:5B:39:CB:00:26:8A:3B:1B:C5:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74AE6117
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv2AL-QqtE6B-1s5ywAmijsbxfs.roa
Signing time: Tue 22 Mar 2022 07:11:33 +0000
ROA not before: Tue 22 Mar 2022 07:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957585175 (0x74ae6117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 07:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7efd802fe42ab44e81fb5b39cb00268a3b1bc5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:36:a1:67:6a:e1:e9:dc:74:eb:66:6d:1c:
b9:ba:e7:3a:1f:d4:e2:71:1a:66:ab:24:5b:8a:c8:
26:c0:64:38:bd:fb:03:a5:e6:b3:f5:94:81:c6:ad:
5f:fe:0c:71:64:26:2f:e9:1b:fc:d7:26:2d:1a:38:
ce:04:ee:e4:a1:25:b0:ba:a9:e8:1c:a7:51:8c:cf:
52:7b:d7:2e:48:38:1a:fe:44:be:43:4f:f6:43:ad:
a1:aa:2b:0b:99:af:7a:2d:4e:b7:22:1a:b9:ee:99:
fa:00:26:76:88:a0:45:3b:7e:4e:af:dc:b6:19:09:
70:a4:10:b8:63:4f:8b:1d:d0:54:a5:4a:16:45:6c:
a7:6f:0f:c5:10:c9:0d:f8:fd:20:04:b9:17:8f:db:
d6:64:a4:e8:35:d3:90:3f:f8:10:51:c4:f1:87:58:
5a:45:e6:25:5c:96:f0:d0:3b:45:57:6f:e5:f9:4a:
29:2f:ed:e4:94:cc:cc:58:da:99:16:3e:45:df:0e:
6f:66:3d:9e:5e:f6:19:46:92:72:c3:b0:ab:0d:46:
ce:12:ec:81:c7:fa:9f:a8:18:03:fb:88:d4:11:7c:
0d:a6:21:a8:bf:0b:10:5d:f7:fc:6a:d5:c4:39:2c:
35:50:57:d6:04:4f:44:b1:2d:66:6f:4c:88:d6:c0:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:80:2F:E4:2A:B4:4E:81:FB:5B:39:CB:00:26:8A:3B:1B:C5:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv2AL-QqtE6B-1s5ywAmijsbxfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:18:ae:3f:79:63:b3:a7:ff:9f:e5:72:82:07:02:35:7a:0e:
93:5b:a8:25:16:2f:b6:e3:5e:ea:11:3c:c8:3d:17:4d:e4:e6:
c2:96:7d:37:39:d1:7b:cc:cc:ee:e5:0f:e3:0d:c7:f1:f0:72:
cf:d9:69:a0:73:ed:59:76:97:af:77:a8:dc:a6:60:ff:67:50:
dc:50:7a:69:ed:07:69:2a:92:50:29:12:4f:a5:b5:e6:d2:8d:
0c:d7:55:1a:05:5b:b4:e4:fa:fc:9e:57:54:cb:3e:91:2c:32:
05:65:76:98:e3:83:47:c1:d0:d3:43:a5:43:a8:99:0a:26:42:
28:8b:93:87:56:88:d8:5d:5f:87:d6:4a:f8:59:a4:a8:69:bf:
75:e4:40:45:64:88:d9:4e:7f:80:62:7a:21:c8:66:c1:db:40:
eb:31:3e:4d:3d:52:b4:f9:62:81:61:a0:35:a4:7d:b8:76:2d:
b3:f6:1e:55:10:68:7f:ac:1c:4e:e1:d3:93:52:b8:54:28:6f:
48:34:cb:7d:ee:03:47:f2:0b:02:9a:f9:75:18:48:e8:04:f5:
12:dd:cb:14:09:87:60:d1:30:66:75:8a:69:cd:6d:0a:9f:9e:
de:4b:62:39:05:10:26:ea:14:1c:7a:55:0e:77:06:bb:c1:8b:
87:dd:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:35 2025 by rpki-client