Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fM1FEJYX_cUSSRahdl8HGPmHQU.roa
File: 1fM1FEJYX_cUSSRahdl8HGPmHQU.roa (raw, json)
Hash identifier: g0HVGdvCJTGUOZfkLvgD3TNvaX1snfE2K/qDVjk3sFo=
Subject key identifier: D5:F3:35:14:42:58:5F:F7:14:49:24:5A:85:D9:7C:1C:63:E6:1D:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018963186C55CFF5AE63464E061341CA81DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fM1FEJYX_cUSSRahdl8HGPmHQU.roa
Signing time: Mon 17 Jul 2023 09:04:52 +0000
ROA not before: Mon 17 Jul 2023 09:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:6317:d348/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:18:6c:55:cf:f5:ae:63:46:4e:06:13:41:ca:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 09:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5f3351442585ff71449245a85d97c1c63e61d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:d4:c9:b5:8c:a7:41:2e:d9:d4:25:0a:68:
74:2a:cc:78:5f:a9:df:a0:93:1e:c1:70:df:43:79:
22:ea:59:6d:02:b6:e4:33:ce:89:27:9a:98:2d:57:
58:49:04:c1:0f:13:10:ac:9f:0c:f9:59:84:98:7d:
70:bb:2a:c0:f6:27:c7:bc:f7:84:72:ae:b5:20:3b:
7d:c6:ad:a3:54:52:61:60:f6:65:dd:33:91:ef:54:
2c:ac:6a:d4:a7:06:4b:5f:a1:32:46:2e:15:25:83:
a2:99:d4:39:dc:41:8e:bc:82:a3:c6:3d:e3:7d:2f:
04:52:61:90:01:d4:a8:0f:52:65:63:09:f5:cf:ad:
79:f8:4f:e3:1e:15:ff:96:e7:9f:47:eb:8c:67:09:
10:ee:b8:18:95:23:56:c8:28:ea:f3:4f:47:a5:8e:
2e:4c:82:bb:bc:2e:5d:2d:60:ef:11:a6:28:6b:0a:
66:46:1f:8b:10:01:f6:60:72:d2:ea:8d:b9:5e:2e:
64:9a:f7:15:6b:62:d9:9f:d7:9c:29:04:fb:96:5f:
39:55:80:00:1f:91:87:b4:8b:e3:0d:77:a1:b3:76:
22:93:8f:bd:ea:e3:f1:a7:69:c5:cb:8a:24:f6:5a:
b6:5d:df:ab:60:34:46:b3:2d:e9:70:38:a6:82:e1:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:35:14:42:58:5F:F7:14:49:24:5A:85:D9:7C:1C:63:E6:1D:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fM1FEJYX_cUSSRahdl8HGPmHQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:39:ed:6b:4c:88:35:50:ba:86:91:2b:7a:17:1b:83:a3:da:
24:a3:91:94:69:95:bc:b8:45:41:b1:f5:25:eb:3b:7d:ca:90:
19:e0:6c:6c:64:6d:21:24:84:fe:21:b5:e7:41:88:63:7f:a2:
1e:0f:39:b0:ff:07:4f:4e:b1:74:0d:cc:86:ef:f1:88:7f:6d:
8e:9b:59:a7:57:f4:31:9f:3c:fb:8b:d1:18:4c:30:89:f9:a9:
b0:68:bd:69:25:b4:f6:06:85:0c:ba:cb:db:df:a1:dd:9d:a1:
73:d9:32:26:02:b7:b9:b2:eb:21:20:3c:22:cd:03:90:ff:16:
3d:e5:b6:ac:92:3f:77:32:a7:21:3d:67:10:71:21:9e:69:3b:
67:83:5c:e6:88:07:96:e0:25:24:8d:19:af:31:c0:80:e8:6a:
4e:76:f1:2e:d6:d0:7a:95:19:c1:37:8d:2d:36:dc:65:7b:22:
a1:aa:df:d9:13:a3:7c:f5:d8:39:f7:37:71:c0:15:0f:b2:9b:
b6:cb:e2:cb:fa:a6:52:63:fa:ac:94:10:cc:ee:e4:21:2b:d8:
33:87:fb:51:72:7e:60:4e:c5:2b:15:88:3f:e5:12:88:b9:e3:
ed:c3:d1:5f:0c:af:88:10:cf:1f:65:ed:ef:46:8b:e3:ab:79:
82:30:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:28 2025 by rpki-client