Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHwNxCE0Z95f2IGzFWezk7j0qcY.roa
File: FHwNxCE0Z95f2IGzFWezk7j0qcY.roa (raw, json)
Hash identifier: zFXMF5W8npq/lg7k2/BzCcdVQLSFY9bCyTZ9NYRly50=
Subject key identifier: 14:7C:0D:C4:21:34:67:DE:5F:D8:81:B3:15:67:B3:93:B8:F4:A9:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189492BC061F05E0A27B5899A038D5317E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHwNxCE0Z95f2IGzFWezk7j0qcY.roa
Signing time: Wed 12 Jul 2023 08:15:51 +0000
ROA not before: Wed 12 Jul 2023 08:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:2b:c0:61:f0:5e:0a:27:b5:89:9a:03:8d:53:17:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 08:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147c0dc4213467de5fd881b31567b393b8f4a9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:84:ad:4b:71:9e:1a:67:27:5d:d7:5a:41:
fa:70:43:e8:8b:17:c2:50:7e:f6:bd:f2:40:bc:1a:
25:b3:d7:c0:1c:22:d7:ed:d1:7c:51:f2:ef:22:ca:
a2:8b:fb:78:1d:53:1a:f7:37:de:f0:33:f6:8c:59:
a9:05:3f:4a:e3:3a:7e:8b:ba:82:be:57:5a:48:a3:
0d:bb:a3:65:24:4b:b5:42:b9:13:5e:e4:ec:c0:c1:
51:27:29:19:58:1b:60:56:a8:58:db:38:94:b0:8c:
ef:19:a3:b4:f1:6b:65:49:a6:e0:a5:4f:68:b0:ac:
c4:8c:9d:75:19:7d:12:e3:12:9e:ac:ca:73:ea:c5:
c6:cb:c0:5e:8c:88:e0:e7:f5:35:98:99:09:17:d9:
b1:bc:ea:5e:db:4c:3b:84:81:b9:fc:63:1e:f1:4f:
57:da:8f:0d:4d:e5:30:e5:c8:93:6c:19:d9:bf:38:
c1:5d:cc:66:73:92:c1:d1:d5:f1:b9:49:02:42:af:
65:87:0f:5a:48:7c:8e:6d:aa:99:13:09:82:71:9e:
36:e9:83:1d:b1:9a:09:6d:b9:f7:1a:82:78:4d:e8:
8a:65:44:1d:7b:9d:3a:28:24:3a:11:6f:7e:69:b7:
90:c5:87:0e:09:2c:99:f3:bc:df:3f:f2:99:44:bb:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:0D:C4:21:34:67:DE:5F:D8:81:B3:15:67:B3:93:B8:F4:A9:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FHwNxCE0Z95f2IGzFWezk7j0qcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:3e:a2:3f:d7:64:a1:11:87:c0:a6:a4:5e:61:03:59:7f:61:
4a:11:bd:33:90:70:2d:33:c5:a6:05:98:01:4c:c2:6e:7e:fd:
d3:31:92:47:48:42:b6:f1:a2:0b:a2:1c:00:82:c3:de:77:bf:
e9:66:20:20:15:b8:84:8d:82:fd:09:19:ca:14:c7:bc:15:d1:
35:e7:c2:94:3d:2f:a1:3e:50:96:af:c2:1d:7f:c3:bb:29:e9:
9e:a8:33:af:56:24:26:56:02:12:13:5a:fd:28:e7:f2:f6:11:
79:6c:e9:70:3d:c7:ef:85:ad:6a:e6:90:a4:9f:fa:99:ed:0d:
27:65:5c:8e:85:ab:ac:dc:65:80:b5:bf:bb:dc:eb:b1:33:5c:
61:ba:a6:39:75:b0:93:ea:45:41:4c:02:86:b9:cb:60:40:33:
b8:12:2d:d4:6e:ab:ce:ea:8a:be:ee:9a:44:3b:8d:fd:48:87:
b4:1a:50:30:b0:66:e3:c9:f7:42:ce:ce:e1:92:3b:2b:3a:47:
ff:95:9b:8b:96:5c:d9:8d:cf:9e:84:3f:12:e2:c7:07:97:2c:
2f:d8:c7:f9:20:9e:fc:32:7f:5e:a1:d8:ff:79:c4:27:58:78:
87:8f:08:a8:29:39:fb:0b:8b:12:83:e6:87:ea:3a:42:3f:90:
b6:49:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:41:58 2025 by rpki-client