Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fng7iz8z1WYcKjLbodWKMGnUONA.roa
File: Fng7iz8z1WYcKjLbodWKMGnUONA.roa (raw, json)
Hash identifier: FNQucE9gbaDDyPgyu1BgvvwC2z9cLYCCeaU6lcHJXPA=
Subject key identifier: 16:78:3B:8B:3F:33:D5:66:1C:2A:32:DB:A1:D5:8A:30:69:D4:38:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018844DCDB8602A6F5B5C9C82E4D3BF06EA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fng7iz8z1WYcKjLbodWKMGnUONA.roa
Signing time: Mon 22 May 2023 19:08:24 +0000
ROA not before: Mon 22 May 2023 19:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:dc:db:86:02:a6:f5:b5:c9:c8:2e:4d:3b:f0:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 19:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16783b8b3f33d5661c2a32dba1d58a3069d438d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:ec:c4:f5:a2:14:82:67:0b:ca:90:2d:89:
e4:fe:f1:2e:27:cf:e0:15:63:60:6a:ce:f5:ae:7a:
7e:af:27:e4:f0:bd:f4:db:2a:8b:f9:90:f1:fa:17:
96:c3:64:fb:12:9e:5f:e0:19:c6:47:e6:11:82:cc:
07:d8:11:00:f5:bf:5b:96:91:67:5f:99:f2:59:16:
2b:10:57:8d:cb:d5:c4:1a:60:70:2f:45:2a:c4:83:
f9:fc:d6:b5:2f:2d:71:48:42:4c:39:41:94:d7:97:
44:58:53:d4:de:d5:7e:14:2d:f8:f8:a6:1a:5c:1e:
73:26:91:ce:c7:3d:d3:55:c5:9c:85:3e:5f:ac:20:
36:41:1a:6a:fa:3f:f2:1a:d8:f8:d3:cd:e8:56:66:
4f:f6:93:46:83:84:07:c7:94:34:87:f6:16:9b:2d:
af:57:3b:0d:8c:c7:71:29:c7:0a:9c:8e:7f:a1:59:
65:03:75:36:04:94:a7:e6:f1:88:12:08:de:ef:df:
7c:4c:2a:8a:00:53:4e:cb:79:44:e4:b7:a2:7b:77:
20:bf:12:b2:bb:b8:8d:ad:fd:e8:c9:d3:0b:05:ea:
a2:fb:e4:3d:ce:ec:e5:52:a4:24:bb:c2:68:32:f7:
ef:c7:df:f2:4a:fb:94:86:b7:d7:5c:36:25:89:8f:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:3B:8B:3F:33:D5:66:1C:2A:32:DB:A1:D5:8A:30:69:D4:38:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fng7iz8z1WYcKjLbodWKMGnUONA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:19:e4:a2:dc:e8:fe:70:dc:91:55:4a:c6:27:ee:33:55:16:
9b:21:4f:cc:48:1b:0f:53:6c:28:61:b6:a8:68:cc:9f:d2:bb:
d3:7e:92:43:63:fa:dd:4e:ef:c8:c5:01:5f:e0:2e:c4:b9:3c:
69:e8:60:ef:23:1a:aa:77:0a:27:d4:e0:6d:77:e6:62:50:4c:
f1:17:a7:af:62:7c:6a:16:69:7b:5f:56:d4:db:08:b2:12:73:
5b:19:63:1f:0c:5b:2d:e8:20:fe:66:b0:52:28:92:c9:47:18:
8a:04:4c:4b:1b:16:c7:a8:b4:ba:e6:6e:dd:45:a9:ff:44:a2:
a2:2d:12:bc:25:3c:de:b7:5b:27:1a:02:9b:55:28:4b:b3:14:
dc:3d:3f:dc:71:fc:f4:de:50:10:3e:0c:03:b0:c2:40:2a:04:
10:20:6a:d4:fa:0e:8e:9d:6d:71:b8:79:8f:4c:fd:c8:51:a6:
33:54:e7:34:ce:ab:0f:9a:19:44:b6:f7:fd:3d:a9:2f:4b:79:
56:9a:d6:ba:c9:e4:6d:2e:f4:1f:d0:71:ee:fe:3b:d0:17:fd:
6a:f3:39:1e:18:0d:f7:49:65:65:9a:2e:5b:af:46:12:e6:7d:
cc:74:5f:22:72:cb:ca:12:2c:c0:dc:78:3c:8a:22:2f:1a:17:
bc:e4:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:39:56 2025 by rpki-client