Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhBhghdI3hjYf4Wr-Cu70Dz_KXY.roa
File: FhBhghdI3hjYf4Wr-Cu70Dz_KXY.roa (raw, json)
Hash identifier: +muF2K3mGILQRiveB4cLU8BlbWfhGBhvGaS4cx5sWq0=
Subject key identifier: 16:10:61:82:17:48:DE:18:D8:7F:85:AB:F8:2B:BB:D0:3C:FF:29:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E6784703050DFB1C0DCBD383866B639E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhBhghdI3hjYf4Wr-Cu70Dz_KXY.roa
Signing time: Wed 15 Mar 2023 18:11:27 +0000
ROA not before: Wed 15 Mar 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:78:47:03:05:0d:fb:1c:0d:cb:d3:83:86:6b:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=161061821748de18d87f85abf82bbbd03cff2976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:59:7e:49:b1:41:44:20:23:8d:37:41:8a:
93:84:42:d2:22:4e:8b:d1:d7:ce:80:ad:cc:a6:90:
26:19:48:6a:20:8d:90:3f:d2:9c:82:7a:b6:71:50:
a6:bb:14:90:82:02:15:3e:4e:d4:44:9a:4b:f5:95:
e7:df:9d:59:e9:86:a6:42:7a:01:2f:2a:76:a2:19:
60:91:7b:2d:9b:82:a8:5d:02:f3:bf:57:d1:0d:b8:
47:40:d9:42:ad:90:36:ed:08:93:73:9c:64:c0:4c:
02:3e:17:09:ed:8f:2d:4d:00:ff:bb:29:40:77:3d:
55:f3:82:27:e1:31:40:81:c9:62:99:45:64:73:97:
5e:e5:a9:2d:14:40:1e:42:39:f1:75:a2:91:a0:a9:
db:54:07:21:24:e4:42:01:15:f6:db:03:cc:f2:df:
26:69:62:21:53:1e:38:6b:89:fb:37:93:fa:50:0e:
a7:e6:67:b3:27:3f:70:8f:4e:e6:37:42:be:b3:84:
87:5d:24:a9:b0:f3:b5:e3:0b:86:9c:8f:77:fb:e2:
51:79:fb:15:c3:05:63:cc:a4:cc:d1:5c:a5:79:b2:
5b:b3:5a:a3:fb:73:b7:75:7f:c5:5b:9f:b2:23:59:
c4:86:11:b7:25:a6:aa:25:eb:25:3e:25:76:4d:0d:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:61:82:17:48:DE:18:D8:7F:85:AB:F8:2B:BB:D0:3C:FF:29:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FhBhghdI3hjYf4Wr-Cu70Dz_KXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:2f:20:46:a2:74:8c:ae:9b:61:cf:c0:c1:12:56:b8:63:dc:
a4:c0:2d:47:ee:6b:0c:73:1e:38:24:9c:12:08:3b:94:6b:e8:
81:a4:ee:1b:d3:67:f7:da:1a:a7:cb:d8:2c:9f:ba:0f:92:6d:
e1:dc:52:79:01:c7:0c:ab:98:54:ec:ad:1b:26:80:f8:5b:0c:
0a:70:7f:2e:78:84:12:00:da:83:67:06:6a:a9:61:86:be:87:
c3:7e:01:c9:13:6e:85:6c:b1:bf:5a:c3:72:48:29:2f:c0:9f:
50:f0:dc:7a:de:43:b6:ec:e8:53:e3:f5:23:ba:f0:10:d0:b7:
8e:3f:55:09:8e:9f:95:b3:48:61:02:e1:b8:46:2f:18:18:84:
a1:c0:b0:bb:08:00:e6:42:84:8e:bb:aa:b0:d4:f7:09:35:a1:
55:9a:ed:83:7e:ef:28:85:0e:07:e0:b2:57:10:28:0d:5e:21:
c5:29:32:7d:bd:22:7a:61:a6:7f:df:43:6c:f9:03:b1:e6:da:
70:ab:4f:54:7b:f3:03:42:5c:d9:af:bd:ec:78:4f:ce:52:3e:
9e:e1:9f:dd:18:e9:64:72:8d:42:a1:03:6e:4a:e2:8d:86:cb:
92:b6:ce:3a:51:d5:a8:a6:3f:7e:e0:99:ea:7e:9e:c4:75:5e:
9d:04:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:52 2025 by rpki-client