Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1S7gTdSgiIsX7vVPlBwe7nGVcE.roa
File: 1-1S7gTdSgiIsX7vVPlBwe7nGVcE.roa (raw, json)
Hash identifier: up7tyb11FZfLHx2Uvig4RiJY5yNdR5KMGi0ImSttkxY=
Subject key identifier: FB:54:BB:81:37:52:82:22:2C:5F:BB:D5:3E:50:70:7B:B9:C6:55:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B7401060F680EB31744AE988E0854685
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1S7gTdSgiIsX7vVPlBwe7nGVcE.roa
Signing time: Tue 25 Apr 2023 07:10:41 +0000
ROA not before: Tue 25 Apr 2023 07:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:40:10:60:f6:80:eb:31:74:4a:e9:88:e0:85:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 07:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb54bb81375282222c5fbbd53e50707bb9c655c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:e3:72:7d:0b:cb:85:67:9d:9a:1a:e3:66:
22:13:a1:02:9c:44:dc:e4:37:0f:71:36:3e:ac:06:
8d:2d:ce:9f:c4:e4:3c:c6:cf:75:95:78:47:5d:99:
0b:09:e9:ee:bb:05:2f:a4:15:73:27:e1:f2:de:04:
d6:03:3e:37:2e:87:e4:62:2b:e6:4e:36:41:f2:fb:
37:44:77:57:b5:6a:94:c5:2d:03:04:36:88:bb:2a:
04:a4:0b:b0:f8:ac:66:97:19:64:61:bc:2c:f2:ee:
1f:ff:6a:d8:90:ce:96:2d:43:83:c6:24:1d:5e:cc:
b5:d7:ee:2b:21:5c:d0:c2:19:02:28:79:f9:25:22:
4e:91:07:13:58:0f:0b:f9:f1:86:c8:2a:e1:a8:3a:
5a:b7:49:02:e6:56:9c:c7:9e:15:cf:1c:94:a0:10:
0b:0f:3f:81:37:0f:eb:82:94:37:94:cb:8d:cb:30:
6e:1a:11:4a:af:f2:84:25:ae:e6:a5:c3:24:93:5f:
21:48:51:e6:82:76:93:f5:24:8b:66:b7:f1:a0:e3:
de:2c:f0:79:ce:c5:d4:f5:ed:88:3e:97:3a:23:6d:
c5:c7:f0:d4:d7:68:ea:a2:cb:8f:78:23:4f:42:30:
fa:61:21:64:f3:73:53:38:8e:b0:0c:1c:a0:ff:b5:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:BB:81:37:52:82:22:2C:5F:BB:D5:3E:50:70:7B:B9:C6:55:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1S7gTdSgiIsX7vVPlBwe7nGVcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:6a:cb:00:78:2a:7f:15:86:29:56:c4:82:60:6e:c0:ec:42:
80:fc:02:04:dd:23:dd:98:3d:e8:d4:05:c9:b2:5f:9e:b2:d9:
e9:7e:ca:94:22:d7:7e:f3:6f:40:85:7b:8b:b6:9b:71:a1:f8:
a8:04:63:ab:02:d3:11:4a:53:f0:83:d4:ea:4a:41:e3:c6:14:
f6:70:e5:f0:04:c2:6c:82:03:90:96:74:e4:6c:01:8c:81:32:
0d:15:79:64:63:84:92:84:4a:60:2b:60:8d:bd:0c:1b:92:5a:
47:b8:66:4b:20:ef:99:d4:5f:da:ff:49:57:a8:2a:a0:2e:a3:
ea:4c:33:29:ab:04:b7:aa:ed:36:db:e5:38:7d:60:ef:8c:31:
2e:ae:63:bf:bc:13:5e:67:fe:18:f2:70:6b:26:9c:a6:66:4f:
4f:9a:02:42:1a:6e:58:9a:5b:a5:63:0c:59:0f:d4:7b:76:1e:
f9:8c:36:89:fb:da:3a:51:35:f0:25:0e:ad:38:46:f7:e2:3c:
fd:17:ed:c3:30:49:76:22:43:a8:18:e5:22:32:1a:af:ad:c7:
1b:52:1e:4a:15:0a:0a:d4:ef:b1:68:63:d6:b3:cf:78:d0:6e:
44:ff:d5:dc:43:64:da:f9:28:30:42:78:b1:9c:11:df:11:b4:
3f:7e:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:31 2025 by rpki-client