Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0t_fbjx_VI1iU4eWszw70l4t_s8.roa
File: 0t_fbjx_VI1iU4eWszw70l4t_s8.roa (raw, json)
Hash identifier: wGFOVnoBVkQmDmi7EkKkgt73riC4IBiEcarsPoBghQE=
Subject key identifier: D2:DF:DF:6E:3C:7F:54:8D:62:53:87:96:B3:3C:3B:D2:5E:2D:FE:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AC57CD1157ECFCAA6BC40AE3D72AD022
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0t_fbjx_VI1iU4eWszw70l4t_s8.roa
Signing time: Sat 04 Mar 2023 11:18:00 +0000
ROA not before: Sat 04 Mar 2023 11:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:57:cd:11:57:ec:fc:aa:6b:c4:0a:e3:d7:2a:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 11:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2dfdf6e3c7f548d62538796b33c3bd25e2dfecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:2d:79:7f:ad:97:cc:49:c6:a2:cc:d4:86:
10:92:2e:34:3f:b7:04:81:8d:3d:29:eb:d8:83:72:
90:4f:76:1d:ad:00:bd:b4:38:33:98:b5:9c:f5:3b:
a6:64:6a:e9:6a:9b:43:41:ea:c2:ef:27:53:ed:3b:
4f:07:0f:fa:2a:5a:b9:92:40:f8:a0:40:69:15:42:
48:18:0c:c1:2b:50:fa:72:99:62:a9:18:f6:af:0c:
74:94:16:e4:73:2f:39:b8:f9:54:77:43:77:dd:47:
d2:9e:b1:ba:1a:06:9c:9d:92:b6:42:17:79:d8:74:
44:3a:63:10:86:0b:24:99:58:e8:c6:80:67:1e:f8:
95:86:99:aa:6c:63:c4:c6:80:23:24:4f:32:6e:17:
87:15:e9:81:55:54:de:55:17:cb:7f:51:f0:ba:6e:
2b:8a:fa:19:85:86:ba:49:a8:ff:19:48:af:ea:22:
a9:f2:19:93:9f:78:2d:eb:ab:c0:4a:6a:88:b8:34:
f2:a9:0b:a1:2b:85:d1:b8:71:d0:67:10:2e:b4:e2:
c5:7f:01:8d:8a:a9:bb:aa:92:7b:21:25:59:38:6e:
84:bd:64:68:c2:cf:05:7b:f8:cb:49:7b:13:df:08:
e4:b8:98:e2:56:24:76:f6:8e:11:a3:72:a5:58:9a:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:DF:6E:3C:7F:54:8D:62:53:87:96:B3:3C:3B:D2:5E:2D:FE:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0t_fbjx_VI1iU4eWszw70l4t_s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:8e:5a:84:01:4a:4a:e1:18:21:9d:0d:26:ff:8f:d6:ac:03:
f7:7e:69:8e:e8:ad:7e:10:dd:5d:41:e3:26:eb:8e:67:89:f1:
0b:60:a1:86:07:80:f5:0a:94:c2:79:5d:15:2d:59:dc:67:50:
7f:da:6e:5f:d4:c7:1e:d0:d0:73:a3:65:9f:f0:67:6a:a7:2f:
49:f8:d8:de:77:30:43:ac:9f:3e:41:f7:b8:ab:1a:86:8f:ab:
cf:4b:e6:cd:18:94:05:66:24:e5:fa:8e:56:16:2c:be:85:29:
0e:e6:a9:fa:12:c4:3d:d5:cd:5b:3c:d7:3c:1c:19:1d:46:37:
87:96:bd:1d:df:97:f8:9f:a7:9d:c7:85:74:36:2e:92:36:38:
ef:99:6c:7e:34:0c:8e:f0:49:99:36:d7:b2:49:a5:cf:e0:bc:
ea:1b:21:35:f6:8c:fb:c2:9f:75:f1:30:74:bb:10:9e:35:41:
d4:ef:6f:9a:dd:6b:91:5e:5d:bc:64:f6:cd:52:5f:90:d2:53:
08:45:4e:bd:4d:aa:0d:f6:6e:9e:5d:8c:be:cb:47:6f:e7:c5:
af:16:73:34:df:0d:ce:2d:93:43:44:32:ee:2c:8e:64:a7:07:
df:df:11:1a:f8:87:b4:08:b1:df:48:43:d3:9c:e4:34:84:86:
8f:d6:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:23:17 2025 by rpki-client