Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwntsG5Lm3aTPY8klCzp9vPpQkU.roa
File: fwntsG5Lm3aTPY8klCzp9vPpQkU.roa (raw, json)
Hash identifier: 8Jp9eeg3DLUycT3DkOH0TOPIWPDenub5uX4dg4CBqmo=
Subject key identifier: 7F:09:ED:B0:6E:4B:9B:76:93:3D:8F:24:94:2C:E9:F6:F3:E9:42:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FEC4F6A56456A978E0C4C53472959C51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwntsG5Lm3aTPY8klCzp9vPpQkU.roa
Signing time: Thu 14 Jul 2022 22:12:09 +0000
ROA not before: Thu 14 Jul 2022 22:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fe:c4:f6:a5:64:56:a9:78:e0:c4:c5:34:72:95:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 22:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f09edb06e4b9b76933d8f24942ce9f6f3e94245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:13:83:b2:96:59:8b:9d:da:16:0f:50:ab:
09:0a:97:18:26:88:2c:35:aa:6d:79:cc:94:05:3e:
9b:4b:85:ee:37:a8:fc:ba:83:7e:ef:2e:c3:05:8b:
1a:ca:a4:a7:42:91:b3:f7:25:e5:85:79:f8:2d:58:
e9:fd:44:9b:8f:e7:c2:03:5b:44:21:40:96:b9:5e:
01:2b:07:ea:be:60:11:84:a7:66:be:f5:ec:18:cd:
d0:68:1d:30:f5:48:d7:08:3e:24:70:78:23:9c:75:
ee:8a:90:21:d1:b6:b9:1d:1b:73:1e:d3:42:39:02:
1a:e3:bf:05:ce:b9:1e:0a:2c:42:46:84:7b:1c:ed:
86:04:2a:fc:e8:55:14:18:7d:b2:6c:18:91:83:80:
96:8b:d8:12:46:96:a8:6d:72:8a:0d:76:52:d0:ab:
aa:84:de:a9:ef:85:31:b2:ce:cf:1e:e9:b7:76:aa:
aa:a1:b8:8b:ec:d3:9c:1b:77:af:9c:ae:94:bc:23:
45:fe:49:b0:92:20:11:00:73:fd:46:5e:b6:38:4f:
cf:b4:16:9b:9c:c1:3c:a3:f3:18:dd:e4:43:70:a8:
c3:9e:ad:e7:5b:aa:0b:73:d3:7f:53:38:66:f6:4a:
6d:bd:fa:4c:e6:b3:8a:08:dc:60:f1:26:30:f4:67:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:ED:B0:6E:4B:9B:76:93:3D:8F:24:94:2C:E9:F6:F3:E9:42:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwntsG5Lm3aTPY8klCzp9vPpQkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:e4:19:75:b2:bf:3c:8d:fd:f8:de:55:d4:b3:24:e4:4a:57:
79:e4:c6:3e:5e:4c:d6:56:25:aa:b4:21:00:98:d0:36:e3:4a:
c2:f0:4c:2f:85:28:49:b2:0f:ef:dd:1a:9c:42:9e:ce:ba:60:
3c:1e:fb:3b:68:07:f3:ab:33:06:b5:89:3c:e1:5b:3f:15:7f:
49:25:84:af:72:f7:9f:7f:ff:da:05:e6:77:be:e9:c5:81:1d:
63:ec:b1:c0:b4:36:85:2e:b8:16:51:c3:47:cc:59:78:f6:ff:
0b:3a:fe:ef:93:92:83:f7:ae:a5:74:4c:f6:0c:fd:35:ed:28:
fb:81:1b:27:c8:9a:35:d0:84:eb:62:8d:1f:3b:21:21:9c:65:
1b:73:a0:a2:8c:bf:a8:51:9a:be:47:f3:11:97:59:28:22:1c:
5f:6b:5a:51:17:e7:0a:e4:9e:d3:89:c1:6a:5b:d2:50:97:8a:
53:5c:43:32:41:18:b9:58:c8:f4:2f:5e:b6:15:02:11:91:03:
ec:90:3b:7c:0f:9a:11:6f:68:65:a4:3d:07:75:59:5e:81:e5:
d6:21:30:57:c0:b5:3e:8c:93:a4:37:f4:f7:fb:e7:61:30:79:
f6:2d:a3:a1:cb:4b:f0:9c:52:ed:c1:6d:09:34:43:d9:30:32:
10:0e:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:51:38 2025 by rpki-client