Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQr3DXYIihDKHPaD-tDwJSmcsvo.roa
File: FQr3DXYIihDKHPaD-tDwJSmcsvo.roa (raw, json)
Hash identifier: NM2LjtL95+UPoYWWX0qpH4l0R2LKO2YLQ8VfZZTq/fc=
Subject key identifier: 15:0A:F7:0D:76:08:8A:10:CA:1C:F6:83:FA:D0:F0:25:29:9C:B2:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189984F162A30E08AF1EF77F208EF5AC2AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQr3DXYIihDKHPaD-tDwJSmcsvo.roa
Signing time: Thu 27 Jul 2023 17:04:27 +0000
ROA not before: Thu 27 Jul 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:984e:fde5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:4f:16:2a:30:e0:8a:f1:ef:77:f2:08:ef:5a:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=150af70d76088a10ca1cf683fad0f025299cb2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:19:fd:75:96:73:8e:eb:5c:eb:9d:56:ab:
0e:ec:d7:bd:d8:62:e2:3f:82:1c:e8:94:51:40:3c:
48:47:34:3c:58:c1:4f:0c:1e:b1:f9:d9:26:8e:16:
39:96:b3:62:f6:59:0f:b5:98:7d:e6:d5:89:9e:00:
56:15:ca:92:85:f0:d2:a2:9d:d2:2f:0c:f8:b1:36:
b9:6d:76:18:f5:0a:2e:62:12:0a:5d:a4:62:00:5e:
df:b0:9f:df:2c:4d:00:ce:1d:89:56:3b:77:82:e0:
e9:d6:73:42:e9:c6:9c:76:f0:3c:0b:ca:d6:0e:ef:
67:0b:39:9b:16:92:2d:ef:9b:4c:15:e0:96:89:86:
98:ee:c7:ea:c5:22:74:77:c4:e1:30:bb:26:3f:0a:
f3:24:9f:e7:39:59:83:27:19:0f:49:29:c4:36:9f:
1b:5f:f3:3f:ae:ab:cf:fd:43:3d:4f:47:b6:7c:e2:
0b:14:09:7a:4e:e3:04:24:aa:54:0a:c4:1c:34:ff:
fe:a4:09:56:e4:e6:59:db:43:fa:ee:d3:47:81:1c:
c0:8d:44:c7:3e:5d:9e:29:86:6a:49:83:58:ed:5f:
79:0e:43:25:01:90:b0:09:e5:0b:02:97:44:77:ff:
32:5f:61:42:89:d1:a3:9a:21:59:1a:68:a0:7b:4f:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:F7:0D:76:08:8A:10:CA:1C:F6:83:FA:D0:F0:25:29:9C:B2:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQr3DXYIihDKHPaD-tDwJSmcsvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ae:5b:56:c2:1f:f4:a3:fc:c7:ca:ef:42:ac:b6:6c:33:23:
73:56:79:a6:86:0f:aa:51:a1:f6:5e:df:29:da:61:ac:c0:7b:
ed:c6:e6:89:a8:4f:cd:4c:4f:42:a3:73:69:1a:af:62:67:2d:
05:c6:32:3d:5b:93:03:a5:fe:3d:99:96:5f:01:1f:80:fd:2b:
11:5d:84:d9:e6:77:5d:c7:73:d1:3a:8b:4e:93:9e:41:8b:03:
94:56:77:5f:7c:59:d3:b6:c8:2f:c1:36:5e:5a:c2:2c:2a:13:
0a:b2:2e:9f:39:14:28:a5:88:6f:59:9b:35:2b:4d:8b:b6:81:
50:da:c1:30:32:57:4d:f8:5a:a9:4e:fe:ea:8c:d9:5d:de:e6:
0b:4d:10:0b:35:9e:d2:b0:e1:ca:54:1c:20:d4:c9:bc:3c:8a:
b4:75:ee:5d:a6:f4:dc:59:69:0e:c5:2d:ee:ab:b5:ab:b2:40:
97:be:6c:57:30:df:4f:7a:99:eb:bf:21:73:dc:d3:c2:55:8d:
61:9f:64:e2:de:a7:4a:09:40:9d:1f:32:00:3b:4e:c6:ea:39:
4a:ac:96:bf:34:28:cd:26:05:47:a3:9b:c7:6d:a2:06:fe:60:
b4:e7:ac:2c:26:54:7e:51:b5:23:06:55:ff:6f:aa:99:09:33:
95:c7:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:57 2025 by rpki-client