Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1FfY0e-Kr795er5wjqXZ8gGJuns.roa
File: 1FfY0e-Kr795er5wjqXZ8gGJuns.roa (raw, json)
Hash identifier: QPyp6DhRh/zOEFeIBRiUUuSuhrw/yokU9ZxaI4ujmnI=
Subject key identifier: D4:57:D8:D1:EF:8A:AF:BF:79:7A:BE:70:8E:A5:D9:F2:01:89:BA:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AD5E8FA535B59B2AA0AF3B34EE9CA6F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1FfY0e-Kr795er5wjqXZ8gGJuns.roa
Signing time: Sat 04 Mar 2023 16:05:00 +0000
ROA not before: Sat 04 Mar 2023 16:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:ad5d:f556/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ad:5e:8f:a5:35:b5:9b:2a:a0:af:3b:34:ee:9c:a6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 16:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d457d8d1ef8aafbf797abe708ea5d9f20189ba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:50:9d:b2:03:c6:75:d5:c2:ff:52:a0:5d:
1a:c6:3e:50:e7:68:15:71:6f:7b:03:a5:51:75:6c:
db:73:ec:9e:36:e5:b1:38:65:30:91:9a:bc:36:7c:
38:62:a3:41:58:90:35:a8:4c:a8:ac:a6:ba:3a:86:
fe:b5:88:0f:43:fa:04:e3:1a:b1:b9:88:63:2b:a0:
5c:ec:c9:51:16:31:21:39:7c:9f:0e:d9:27:15:1e:
f0:69:70:be:6f:78:6d:d1:8a:b6:0d:d8:b5:fa:be:
9a:fe:c9:0d:94:d5:26:22:6a:9f:f2:71:ba:f2:8b:
8d:cb:de:d3:68:34:c4:32:2a:94:80:1d:b9:e9:f7:
34:41:52:ca:ca:bb:e0:df:9d:f4:32:c8:d4:3b:8c:
33:61:6f:43:79:53:0d:db:e4:46:ec:1f:90:93:46:
48:1b:ac:f6:8b:c1:f5:90:fc:b9:f0:64:37:d4:2d:
5a:7e:ec:4a:c3:54:d8:9f:2b:af:f6:4e:d7:9c:1c:
8e:51:7f:a9:1b:1d:95:d9:b3:7a:24:60:c4:66:d6:
f2:98:0f:c4:45:97:a2:4f:52:6b:e8:41:eb:14:5c:
2f:9e:5a:0b:2c:a2:07:48:23:d9:db:c6:8e:08:1a:
ad:09:0b:71:d5:5a:1c:cd:1f:7b:92:cd:c7:ff:ae:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:D8:D1:EF:8A:AF:BF:79:7A:BE:70:8E:A5:D9:F2:01:89:BA:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1FfY0e-Kr795er5wjqXZ8gGJuns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:f3:d1:d3:4c:d7:92:f8:41:54:60:4a:46:03:e8:b8:35:24:
f3:66:cc:f3:ec:e2:4c:10:bf:52:f1:7d:d9:62:45:1d:a1:a1:
dd:c9:8f:c0:e3:fc:dc:ba:8d:67:98:4b:bc:5b:b1:af:35:cf:
a3:5c:ed:ca:3f:d2:e9:85:b0:ef:7f:06:17:25:74:c8:27:45:
bf:25:fc:64:a8:fe:9b:a1:6c:b3:c6:04:63:93:b6:c4:9a:07:
b8:c8:6b:19:a5:0f:c3:6f:19:8d:fd:e4:0f:27:7e:98:11:16:
dd:6c:86:e8:2c:ba:7b:82:25:a4:e3:08:43:54:c1:e2:e7:c6:
00:55:f1:e9:5c:73:eb:62:3f:4a:fa:9a:79:27:ac:9e:06:9e:
ba:a9:0c:b7:64:79:c8:70:22:76:51:78:19:26:ce:06:8d:46:
a3:2c:1d:82:17:2d:79:91:ca:10:8e:b2:5f:06:ce:b4:9e:d0:
df:72:e1:69:4e:4c:a5:f9:d6:2d:ff:67:bb:04:b0:a3:b3:df:
22:52:c1:2a:a6:c4:52:50:ec:2c:e0:0b:ec:f2:dd:bf:70:19:
53:3e:75:dc:5f:cb:64:46:02:de:cc:00:e9:ea:51:98:0b:53:
68:49:c0:82:95:62:47:eb:3d:66:ce:49:fe:6f:18:11:fc:5c:
35:51:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:36 2025 by rpki-client