Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fa0OF2od8P48rDuS5h1_DVmLZAI.roa
File: Fa0OF2od8P48rDuS5h1_DVmLZAI.roa (raw, json)
Hash identifier: QnN6YhNbXKWXKkP2/yVVcqWDmLYkckMP3NcYzLL3Rgc=
Subject key identifier: 15:AD:0E:17:6A:1D:F0:FE:3C:AC:3B:92:E6:1D:7F:0D:59:8B:64:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A09A333ED78BE15AC2E676C5F56652403
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fa0OF2od8P48rDuS5h1_DVmLZAI.roa
Signing time: Fri 18 Aug 2023 17:13:25 +0000
ROA not before: Fri 18 Aug 2023 17:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:a3:33:ed:78:be:15:ac:2e:67:6c:5f:56:65:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 17:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ad0e176a1df0fe3cac3b92e61d7f0d598b6402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:39:48:5b:64:a5:51:73:9f:47:97:7d:bb:
bf:5f:9e:04:c6:1c:dc:c3:34:eb:dd:18:8b:7c:47:
3c:2c:11:62:48:68:25:3f:bf:63:d4:a6:38:c3:e5:
2f:55:61:6d:bb:d2:54:64:ea:e2:ce:ec:df:ae:aa:
93:8d:a8:79:2d:13:f7:56:4c:ea:e8:1d:78:2b:42:
ee:ba:0f:17:dd:5e:bc:c2:0b:59:15:cf:5e:73:4a:
70:a3:1b:eb:f2:1b:22:1d:19:cc:03:7c:28:87:db:
da:2c:50:5c:3b:d5:fe:41:fa:7d:59:e0:d0:16:fe:
9e:44:8d:77:ec:db:47:e0:6d:9a:48:f8:f4:e4:a0:
f5:b9:09:54:3e:2d:89:94:34:e9:b5:b1:8a:29:f8:
11:42:cb:21:a0:ec:8c:fc:0e:b6:e8:d8:26:66:ee:
d3:75:15:94:2e:3b:e5:2b:9f:9e:e5:d4:ef:63:c6:
2e:29:5a:6e:fb:7f:00:d3:89:06:63:a7:69:96:66:
99:6b:16:01:4d:06:93:84:f3:af:5c:57:ce:46:d1:
1e:24:a1:ea:38:9f:6a:ca:e9:e0:25:8a:04:94:52:
41:5e:9f:7f:09:a2:ef:0d:8f:29:d9:fe:5c:43:75:
1e:ec:64:71:9e:30:b6:80:22:38:09:03:65:05:97:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:0E:17:6A:1D:F0:FE:3C:AC:3B:92:E6:1D:7F:0D:59:8B:64:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fa0OF2od8P48rDuS5h1_DVmLZAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:1e:99:91:07:16:60:7a:53:3a:a0:24:64:3c:a0:ba:7f:46:
8e:64:6f:4a:9d:b8:b7:3b:89:1a:10:2c:d0:cf:5f:0f:30:57:
45:c8:b1:14:a7:9b:c6:8c:a2:d7:41:b4:7e:b7:17:4d:d1:06:
42:bc:e5:4b:2a:d9:b9:ff:a3:7c:05:b1:0e:02:d0:56:6c:1d:
06:77:3c:f8:54:a3:85:a9:7b:c2:11:87:01:ec:2a:67:7d:35:
13:2b:20:f2:96:ce:a5:82:b5:e3:3a:38:93:da:df:d1:5e:7a:
92:cc:a9:2c:cd:e2:87:33:aa:1f:b2:9f:24:a7:a6:81:1d:9e:
eb:46:fc:1b:0e:c3:ee:65:7e:50:2b:d2:c7:a2:aa:d0:a8:ed:
91:82:5b:54:96:f8:9e:07:5a:5d:b6:bb:fe:a3:c7:0f:fd:75:
ab:66:3d:0a:8b:a8:3e:a8:9e:28:10:c3:be:66:05:33:bb:a8:
50:3b:87:1d:a8:31:47:e2:74:a2:a4:20:1e:6c:dd:e0:f4:32:
2f:cd:1e:e5:a6:d7:7f:7e:50:93:4c:69:96:32:fb:b2:0b:04:
1a:12:3b:ab:96:47:ff:c5:0f:1b:ca:9a:d4:2e:c0:d2:38:9d:
cc:1c:ab:30:7b:48:8a:f1:a3:a9:af:29:e4:5b:6a:35:66:9c:
60:75:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:48:23 2025 by rpki-client