Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fnmx18OtxivT5c6zzCZWPp6_iVs.roa
File: Fnmx18OtxivT5c6zzCZWPp6_iVs.roa (raw, json)
Hash identifier: xmNExEZEesZJhdI72iHEziOIK8TZYyk14xtg2GrMt+o=
Subject key identifier: 16:79:B1:D7:C3:AD:C6:2B:D3:E5:CE:B3:CC:26:56:3E:9E:BF:89:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B40815DA348F8D46AE0154529CC69AF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fnmx18OtxivT5c6zzCZWPp6_iVs.roa
Signing time: Mon 24 Apr 2023 16:10:41 +0000
ROA not before: Mon 24 Apr 2023 16:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:08:15:da:34:8f:8d:46:ae:01:54:52:9c:c6:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 16:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1679b1d7c3adc62bd3e5ceb3cc26563e9ebf895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c8:c1:3a:82:56:a6:f1:f7:bf:e4:58:fe:12:
01:bd:6b:40:4d:87:a0:14:69:88:47:ba:e6:3e:1b:
ff:2c:bc:96:47:d6:d3:04:19:6e:a3:3b:81:27:44:
74:e4:98:29:68:d1:83:a6:77:f7:3e:9d:b5:ec:d3:
97:a6:a7:84:1d:90:a7:e6:69:05:a8:f7:ef:0a:16:
85:7d:ec:d2:be:61:a4:86:1f:8e:45:4c:c3:fb:f8:
c5:8a:fe:dd:98:19:9c:b4:7e:ea:03:42:50:c7:43:
ac:ec:eb:e2:c7:64:f4:b5:b4:b8:1a:c4:bf:8b:e2:
2f:50:2f:12:51:2f:92:ee:53:1a:f5:3e:a9:6d:54:
e1:f8:16:ee:b5:ce:69:85:1a:6b:7f:55:ac:e3:b4:
12:e6:2d:de:02:4a:f4:a3:da:cd:64:aa:b2:d4:6c:
e3:79:78:5c:22:d5:41:a8:a8:9a:22:11:2b:cd:d1:
44:b6:6c:13:84:58:e7:45:7e:7f:5c:01:40:dc:22:
35:db:47:5a:3b:e2:61:3b:d4:a1:c7:15:9a:6c:58:
cc:2d:01:1e:b9:6f:a9:4d:a7:31:27:54:a4:92:8d:
72:c1:60:70:50:30:a8:8e:89:b5:09:7f:21:63:23:
ee:5d:2e:7f:23:d3:0b:95:17:49:a2:dd:b1:95:88:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:B1:D7:C3:AD:C6:2B:D3:E5:CE:B3:CC:26:56:3E:9E:BF:89:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fnmx18OtxivT5c6zzCZWPp6_iVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3f:87:b1:87:ba:2e:94:0e:e3:77:a0:1a:2f:3d:b5:36:5a:
d2:cf:37:52:94:7a:57:d0:29:0b:2d:88:ea:9a:3e:b4:42:c1:
98:83:e7:e4:1c:bc:f5:bc:81:98:a5:38:c4:4e:0d:dc:a8:e3:
4c:2f:60:f9:ab:ba:a9:10:bd:cf:04:5d:85:13:e8:9b:5c:ab:
f6:67:84:5d:85:75:cb:9e:6e:13:39:49:2f:60:b8:39:8d:88:
86:86:65:35:74:21:01:20:74:c4:dc:ae:f3:cd:0c:18:a2:f2:
73:7d:56:41:2c:aa:21:9a:30:72:b6:d0:87:80:13:d3:fb:be:
84:84:2b:c2:61:ec:72:27:ae:d6:1f:1a:4c:74:6c:f3:e5:c1:
30:90:9d:f8:d8:f7:3c:db:4c:56:55:e8:fe:36:44:d7:ca:5a:
17:14:c6:94:d9:da:a7:19:95:09:ee:b6:6c:2e:7f:32:43:9f:
32:6c:c1:5c:75:00:47:a0:52:23:d1:72:19:59:cb:16:90:d9:
1d:17:8a:3b:df:a6:ab:62:9f:9a:e5:87:4a:78:34:a2:a4:d9:
9c:d6:8a:2f:11:48:3e:75:f4:1e:f2:27:34:6b:54:47:ed:ae:
22:af:e5:4c:f7:55:03:c4:02:45:3d:26:9d:d1:11:1d:20:28:
00:5a:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:36 2025 by rpki-client