Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-FzFut4Sm6NrACFzfXnqQTlFHzg.roa
File: 1-FzFut4Sm6NrACFzfXnqQTlFHzg.roa (raw, json)
Hash identifier: ozddw3V1dpOOua5MlDDm7JDFt8ZqdaMIZjm0atQhl9g=
Subject key identifier: F8:5C:C5:BA:DE:12:9B:A3:6B:00:21:73:7D:79:EA:41:39:45:1F:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882B91C7ABEFFA539DF38872ECD342FBAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-FzFut4Sm6NrACFzfXnqQTlFHzg.roa
Signing time: Wed 17 May 2023 21:15:54 +0000
ROA not before: Wed 17 May 2023 21:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:91:c7:ab:ef:fa:53:9d:f3:88:72:ec:d3:42:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 21:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85cc5bade129ba36b0021737d79ea4139451f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:1b:bd:fb:91:77:8a:21:6f:da:50:36:fc:
b2:8f:5c:53:06:aa:c9:b1:3b:24:1e:94:94:87:2d:
55:ce:18:67:a5:bb:94:b2:a5:3c:bc:96:76:cf:c9:
45:3e:06:4a:72:66:c2:9e:8b:3d:7b:46:3b:69:bd:
3c:79:f7:97:80:b6:f2:b1:80:66:25:07:aa:65:97:
ad:32:45:be:3b:56:6c:83:0e:57:78:de:b8:d8:7b:
54:bc:0c:8b:42:ec:6f:02:ac:3f:bc:17:91:ab:b6:
af:ab:51:df:2e:52:33:b2:3f:4e:72:13:b9:8d:a6:
48:5a:25:bd:ec:2b:b6:40:09:91:7c:47:42:1f:e3:
88:1a:ca:b0:38:4b:41:ba:f3:b8:f9:82:10:a1:66:
a4:b3:46:0b:af:ad:ff:89:70:d8:fb:f5:92:12:75:
a7:6b:6d:fd:d6:a8:16:7d:48:cd:cf:e2:9b:f7:e1:
57:d7:53:4a:96:22:c6:13:c1:2b:f4:38:32:c9:3f:
17:f4:61:e6:c7:64:44:e6:98:26:38:5c:a0:e6:aa:
86:b0:69:70:d2:19:f2:46:00:86:bd:4a:78:3c:62:
31:92:54:64:54:41:0e:47:da:3b:1e:27:5e:fb:ab:
cb:6e:7c:6f:4e:ae:3d:a3:71:a2:34:97:6b:26:5a:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:C5:BA:DE:12:9B:A3:6B:00:21:73:7D:79:EA:41:39:45:1F:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-FzFut4Sm6NrACFzfXnqQTlFHzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:a5:b9:d6:16:a6:7e:32:8d:9e:a4:2a:f0:36:9f:66:c9:55:
17:fe:bf:2f:64:7d:cf:ed:71:6e:7a:c5:51:3a:96:6b:16:6d:
dc:cc:b6:3a:82:1d:e0:04:1f:07:16:0e:6c:6d:f6:50:df:e6:
53:6d:a1:e7:97:05:f9:9a:9b:ad:79:01:1b:ae:54:3f:34:3e:
d6:c9:db:32:b7:e0:33:a0:c9:7a:e3:e9:40:30:9d:68:1c:90:
58:07:b7:2c:16:a9:20:c5:92:26:6d:7f:a7:a6:55:02:33:39:
e9:35:40:f9:ed:8b:dd:5e:e1:54:ab:2f:49:ae:8b:4c:e9:03:
58:04:99:fd:db:b6:f1:1e:c3:13:e5:f1:d7:8f:95:f8:40:84:
ec:69:8f:f4:51:60:90:c6:c8:d9:0b:93:3a:6c:4b:6f:bd:7a:
2d:73:c3:0e:8a:5b:50:29:a1:70:8b:3c:ef:03:27:4b:85:57:
76:9a:67:68:ad:29:67:a8:d8:52:c3:ce:dd:d4:e3:82:a3:d2:
5b:9f:6b:e1:91:bf:49:72:15:0d:ed:a8:6a:22:b4:97:53:72:
b4:66:b7:61:aa:28:c4:53:a1:c1:0a:19:6a:f0:83:98:af:fd:
33:be:2a:10:63:00:3e:2d:84:bf:b7:3d:87:b8:7d:42:5f:f6:
9b:cf:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:52:11 2025 by rpki-client