Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FKlGP13poJmsw7Qe3dWeqEPqo8.roa
File: 4FKlGP13poJmsw7Qe3dWeqEPqo8.roa (raw, json)
Hash identifier: 2dD28b+gyxqTL+WoR+OPGsm/gZXVbsCdTigT1vCOXio=
Subject key identifier: E0:52:A5:18:FD:77:A6:82:66:B3:0E:D0:7B:77:56:7A:A1:0F:AA:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018852D05466D788194077011762083663F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FKlGP13poJmsw7Qe3dWeqEPqo8.roa
Signing time: Thu 25 May 2023 12:09:24 +0000
ROA not before: Thu 25 May 2023 12:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:d0:54:66:d7:88:19:40:77:01:17:62:08:36:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 12:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e052a518fd77a68266b30ed07b77567aa10faa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:28:49:15:5f:02:79:dc:f4:38:23:f8:7b:
78:2f:18:6f:37:06:ed:f4:72:91:31:81:6c:22:b1:
26:9d:61:4a:f8:94:dc:0d:7b:0d:2b:45:62:21:a8:
8c:a8:d0:41:c0:b5:e2:62:bc:41:6c:c6:03:b3:93:
ba:8a:25:e6:65:84:12:d7:40:f0:f1:40:f4:c1:16:
63:6d:d0:6d:5b:f2:fa:08:98:21:16:d5:76:9b:3e:
95:75:3d:a9:9e:5b:61:16:1a:39:ba:9f:49:54:b1:
98:3a:24:18:54:07:d0:03:c6:56:34:3f:ed:24:9d:
8c:6c:d4:74:ae:88:77:6e:ac:76:ea:31:8e:e0:9e:
60:ed:c1:cb:57:9c:24:ae:d9:31:72:05:1f:e9:34:
22:74:48:52:27:e5:83:b7:af:8d:c4:d4:04:04:e8:
9e:a8:29:66:94:f5:95:ba:15:26:48:92:bb:34:e3:
6b:56:58:43:a0:28:fd:51:58:4f:96:05:e5:46:3c:
da:eb:c9:d2:d4:8c:d5:cf:5a:fc:f5:19:8e:c3:11:
63:20:7f:7a:3a:ea:46:0e:36:d7:d7:72:9f:eb:f7:
1c:98:05:b7:f3:13:6b:08:37:12:9d:8d:22:55:73:
2a:0e:23:b8:8c:09:f6:dd:0a:a2:f7:ed:37:3a:1d:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:A5:18:FD:77:A6:82:66:B3:0E:D0:7B:77:56:7A:A1:0F:AA:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FKlGP13poJmsw7Qe3dWeqEPqo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:11:7d:1f:61:9b:ec:9c:06:20:eb:5a:38:c7:86:d6:15:a4:
8d:94:ba:5d:a8:1c:6d:94:f2:52:05:1d:9c:9a:76:62:97:76:
69:b6:b8:07:46:3f:bb:79:a7:77:51:ff:c7:7d:b2:d3:88:d9:
21:d9:72:db:71:a0:b4:00:e4:16:6d:d6:e0:67:47:1f:53:b8:
f4:b5:11:5d:69:f3:45:68:12:b1:a5:c2:74:cb:61:12:c8:2a:
da:72:54:b7:cf:17:d6:d4:08:19:47:6c:25:69:f9:50:8e:25:
8c:5a:e4:42:89:42:05:45:39:4a:9e:8d:75:76:49:6d:f7:5e:
ea:9f:3d:83:88:a5:94:fd:ba:14:82:89:ab:16:e2:3a:29:6d:
af:ad:5a:72:aa:98:71:0c:24:6d:80:2d:aa:be:2a:b3:ee:e5:
f7:3b:9d:da:41:2d:e9:51:f5:1d:94:32:0f:2e:72:46:fe:58:
b4:c7:7c:b2:6f:52:b6:4c:28:67:25:e6:c4:90:b8:f4:9c:b6:
49:2e:38:29:bf:7c:f5:5c:a8:65:bd:7b:8e:e1:2b:7e:63:34:
c3:07:00:e4:58:46:dd:13:9d:6e:53:3e:0f:73:9c:97:c2:2c:
20:6f:07:3a:e1:10:c9:db:f8:62:b1:2d:e5:44:35:df:4a:2a:
cb:59:1e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:26:01 2025 by rpki-client