Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fk_1V7_4rFaQwO-bwd8kgy_zzlI.roa
File: Fk_1V7_4rFaQwO-bwd8kgy_zzlI.roa (raw, json)
Hash identifier: EXptXL7qvwhWjG3VMqihQx3hXLLY9i4TpXNT6jXIS6Q=
Subject key identifier: 16:4F:F5:57:BF:F8:AC:56:90:C0:EF:9B:C1:DF:24:83:2F:F3:CE:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CA57CA42246B1C24E36B209E382F249E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fk_1V7_4rFaQwO-bwd8kgy_zzlI.roa
Signing time: Sun 06 Aug 2023 10:14:58 +0000
ROA not before: Sun 06 Aug 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:57:ca:42:24:6b:1c:24:e3:6b:20:9e:38:2f:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164ff557bff8ac5690c0ef9bc1df24832ff3ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:44:65:70:f8:20:08:da:6c:73:a0:bf:3f:
d0:34:c3:e4:58:94:4a:35:26:4b:98:31:15:63:9c:
60:7a:ad:cc:1b:d1:fd:d2:6d:49:9b:a1:fa:12:b2:
93:85:87:2b:c3:46:09:2c:57:30:8d:75:8e:b9:2f:
6e:11:ed:d7:7c:77:bc:11:d7:1c:eb:bc:50:26:c7:
d8:20:95:75:e2:2d:52:04:a0:5f:97:33:38:cc:2e:
85:9a:01:1f:7e:da:f7:9d:12:f8:9c:af:d4:56:f5:
66:ca:52:6a:d4:0c:a2:ca:b3:1c:a2:ce:1a:4c:fb:
68:fd:4d:9c:0f:e2:d4:8f:cc:ff:39:6b:e8:e4:7e:
99:ea:43:f4:df:92:8d:94:3b:f3:a7:c8:1d:0e:ef:
09:c4:f5:9b:9f:81:8a:3e:1c:71:13:28:1f:a0:54:
aa:1c:50:19:ec:09:ba:8c:4c:df:d6:15:77:27:7d:
12:26:59:6a:21:56:4d:69:86:b6:f4:f7:be:d9:c9:
cd:16:8e:0f:4a:69:9b:a7:25:c7:f9:38:bb:61:eb:
dc:c0:2e:c3:cc:07:84:6d:e8:b2:9b:13:87:ad:dd:
21:9d:2c:e7:cc:84:81:4f:64:8c:4d:92:2b:c1:9d:
03:bd:69:3b:df:d6:21:63:f6:b6:61:93:e0:36:3c:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:F5:57:BF:F8:AC:56:90:C0:EF:9B:C1:DF:24:83:2F:F3:CE:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fk_1V7_4rFaQwO-bwd8kgy_zzlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:92:15:4f:92:93:34:5e:25:35:c0:02:32:ee:cc:21:f3:4d:
03:69:80:fe:fb:bb:94:f0:8d:73:54:df:42:35:be:ba:92:58:
56:2e:cb:62:08:5b:67:56:0b:e9:37:c3:73:66:3a:13:07:56:
f6:88:6e:f3:20:a6:34:bd:91:9b:da:ad:b1:88:5b:8e:c8:b1:
80:d7:65:cf:1d:82:ca:63:21:1c:e6:67:12:39:89:2f:1d:73:
40:e8:70:8a:0a:e7:e9:20:6b:e7:14:41:76:69:b9:bf:da:c6:
4e:2c:75:63:cd:3d:f9:a9:ef:a9:b1:6a:07:7c:dd:73:b9:46:
ad:44:b3:3d:40:63:df:58:43:8e:77:a0:b9:42:fa:72:b4:4d:
80:40:4f:87:30:d4:25:71:3b:5b:36:3b:1d:8b:e8:14:44:50:
9f:18:e7:cd:78:c9:c9:9e:31:af:a4:5b:ff:76:fe:3a:24:61:
bc:d1:bf:8f:70:83:50:b2:15:73:e0:22:82:65:49:a5:2f:9b:
f5:e5:e6:4e:ec:8e:9f:ea:0c:6a:42:fb:31:0e:f2:4a:a7:c9:
23:3a:52:76:e5:7a:64:6e:99:b7:c2:cf:41:49:e6:51:ac:5f:
62:bd:26:57:c3:59:b5:b1:92:44:48:43:39:86:03:41:87:a8:
2a:33:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:52:50 2025 by rpki-client