Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcObDvz0W5aejg7U-vkq4pX3WmQ.roa
File: FcObDvz0W5aejg7U-vkq4pX3WmQ.roa (raw, json)
Hash identifier: O3coBV4Fgk7szAJ9wLrzaK6jpZltcvXf8tLUA5iN9uk=
Subject key identifier: 15:C3:9B:0E:FC:F4:5B:96:9E:8E:0E:D4:FA:F9:2A:E2:95:F7:5A:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187684A25F2ED6A91DA3FB04E09BCADAAF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcObDvz0W5aejg7U-vkq4pX3WmQ.roa
Signing time: Sun 09 Apr 2023 23:11:42 +0000
ROA not before: Sun 09 Apr 2023 23:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:68:4a:25:f2:ed:6a:91:da:3f:b0:4e:09:bc:ad:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 23:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c39b0efcf45b969e8e0ed4faf92ae295f75a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:21:58:4d:1d:34:2a:5b:eb:f4:62:d5:40:
d5:78:9b:12:7b:c5:57:d5:57:5f:a2:ae:e6:a5:8e:
0e:bd:10:a5:79:79:bb:03:89:c4:c7:86:6f:b5:a1:
0c:b5:3d:19:89:aa:64:78:12:f6:4e:4b:da:d0:a6:
ec:9e:4f:36:63:9e:3b:2d:b6:68:2c:a4:ca:d0:8c:
0d:66:d6:83:69:19:43:e8:6e:a1:64:1c:b8:e4:c4:
dd:e5:84:1a:73:fe:dd:84:40:1c:1a:6c:68:0f:69:
06:d4:04:35:cd:5f:ad:fa:50:59:f0:5c:ec:f1:a9:
31:77:bb:be:f6:7f:51:8f:39:fe:5c:4d:3d:7f:28:
18:94:3e:fa:65:98:f1:53:e1:35:6d:3c:be:3d:ae:
e6:52:41:d5:48:09:ce:a5:96:5d:ee:0e:f8:45:f0:
a2:d0:57:d7:75:91:3b:75:cf:b7:7d:85:bc:53:47:
4e:b6:30:2b:82:ed:60:90:7d:0d:06:c0:63:c9:58:
87:25:1a:4b:43:33:df:a9:55:e8:16:9d:89:a7:ac:
00:3b:f4:4a:6a:d7:e8:d6:12:3c:ec:2c:cd:62:5b:
93:51:3a:5a:d4:e9:23:a5:ba:a5:38:28:e8:57:8c:
fe:0e:fa:09:fd:3d:dc:2a:60:4f:c9:0f:f2:a0:5f:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:9B:0E:FC:F4:5B:96:9E:8E:0E:D4:FA:F9:2A:E2:95:F7:5A:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcObDvz0W5aejg7U-vkq4pX3WmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:bf:63:e7:a2:03:98:a1:c7:2d:6c:28:ca:37:8a:3b:c1:6f:
3f:94:5d:ee:c4:3d:06:1c:f2:de:3f:c9:bf:18:6c:04:70:c3:
f9:81:c4:c5:7e:ce:72:e3:52:55:00:00:4f:e9:44:e7:f6:75:
0a:28:d9:6c:01:79:5d:49:58:8b:d0:36:41:e2:43:b7:6a:6f:
3e:c4:72:48:ce:4f:89:d4:24:19:11:e5:61:3f:b3:86:0f:28:
c3:63:93:54:81:91:a8:c5:1b:f5:f7:5e:14:86:e7:2d:f4:97:
40:c8:b5:bc:c2:15:4f:46:1a:4d:23:7b:1b:51:85:f5:80:5f:
5f:56:5e:c1:7e:47:c0:58:5b:33:e8:be:d9:5a:5f:ad:67:3d:
f2:0b:a0:1b:ef:ff:d9:a8:a7:b7:80:6a:87:1c:3f:dc:49:9c:
18:1f:d1:a3:3d:d2:ff:0d:6b:0b:de:0c:9e:13:3b:7b:84:ab:
30:79:e4:37:90:37:75:bd:02:d7:24:1f:c4:ec:93:08:9c:9e:
39:9f:19:8f:fe:47:26:17:c7:16:d8:19:e9:3c:5c:ab:ec:d9:
0d:7d:03:2c:46:32:6b:b3:c7:05:8c:15:0d:81:4d:f2:59:7a:
f8:1a:73:ee:16:24:c7:33:83:f9:bd:b4:54:af:15:36:72:6b:
63:1c:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:34 2025 by rpki-client