Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fu6AbDRJHV8dOYOFdQ2CfaecMc0.roa
File: Fu6AbDRJHV8dOYOFdQ2CfaecMc0.roa (raw, json)
Hash identifier: z+yGRIgzB0zlvEbQrEXq11qeR/e16rMjd62TVX9Ca6w=
Subject key identifier: 16:EE:80:6C:34:49:1D:5F:1D:39:83:85:75:0D:82:7D:A7:9C:31:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AACA57CF6FA0AF23DBE791B27A486519
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fu6AbDRJHV8dOYOFdQ2CfaecMc0.roa
Signing time: Sun 11 Jun 2023 14:09:27 +0000
ROA not before: Sun 11 Jun 2023 14:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:ca:57:cf:6f:a0:af:23:db:e7:91:b2:7a:48:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 14:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ee806c34491d5f1d398385750d827da79c31cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:25:8a:60:4e:3a:7d:6b:1d:07:d8:90:6b:
27:fe:9c:ab:1b:b6:a2:46:e4:bf:57:0e:a8:78:51:
6a:1f:c2:5d:ff:8c:54:db:1a:53:8c:33:4b:fe:66:
c0:15:2e:24:5a:48:09:8a:8d:66:fe:97:a5:33:47:
c9:27:a2:20:fc:30:37:3f:34:ad:ca:59:c5:1e:e3:
b2:f5:14:0a:99:8a:2f:6f:b3:8a:d6:b1:a2:bd:9c:
8b:3f:a7:cf:6f:c9:e2:6c:d2:4f:02:06:36:8f:76:
e9:d8:ad:5d:32:a4:0a:10:6f:d3:a1:7d:3e:80:8b:
b3:d9:39:0c:66:37:ae:c6:9d:40:8c:f1:0c:fb:57:
3d:06:ee:9b:62:35:8c:d9:df:d9:d0:fd:0d:cb:83:
52:33:36:9a:f8:d4:ed:7c:e0:f4:ad:fb:0a:28:23:
27:f7:50:db:4c:ae:2d:24:43:9b:e1:44:9f:95:e4:
35:3f:a2:0e:a3:78:3d:ed:a1:46:36:d3:8d:24:c3:
e3:c1:49:74:f3:93:66:27:26:24:c9:f2:e6:c9:e4:
e9:59:d9:15:6f:d1:53:e3:69:b7:1f:10:27:49:5d:
72:44:a9:6e:3a:41:2a:0d:8c:ec:38:f5:61:a9:e3:
f9:8d:93:5f:03:24:98:14:a1:2d:f8:4e:8c:94:d4:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:80:6C:34:49:1D:5F:1D:39:83:85:75:0D:82:7D:A7:9C:31:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Fu6AbDRJHV8dOYOFdQ2CfaecMc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:a9:9f:fe:92:9d:45:ae:19:7a:45:1b:a7:e1:9d:9a:55:2a:
60:62:e7:07:b8:0f:6f:a5:af:7f:4f:c5:7f:dc:f1:ff:a3:cc:
ac:5c:50:53:ec:b9:78:95:79:57:f0:53:5c:48:14:6e:69:b4:
ab:08:97:8e:e3:61:67:b8:f5:d6:de:99:87:94:6d:4b:2e:84:
a9:f1:1b:36:a2:7e:c3:fb:78:b1:a9:15:46:50:10:98:12:26:
aa:0a:6e:33:ad:d1:1e:c8:70:38:70:f0:52:f7:ad:d4:b8:94:
c3:38:6c:ca:cf:04:7a:27:be:ab:db:22:a4:99:ac:27:a8:a7:
d0:17:78:54:52:44:8f:87:df:c6:4c:67:5c:dc:bd:b3:ac:78:
bb:81:93:49:16:01:a6:02:3b:49:f9:ab:9f:09:d6:2a:61:f3:
c2:e6:c5:78:7b:08:35:d2:89:75:7b:56:ca:a6:a6:bb:ce:0f:
85:0e:f1:cc:9a:51:99:a7:94:d1:b3:fe:fb:ba:7d:fa:14:3f:
d9:67:a5:c2:19:5d:c5:2c:91:46:fb:14:09:06:dd:5d:aa:5e:
60:ca:b8:47:e6:b5:ef:2e:04:ba:67:b2:0f:8a:c5:2f:e2:0b:
7e:9a:92:d5:e9:d5:10:33:72:0f:b8:9b:38:8c:c9:bf:08:62:
d5:a8:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:54 2025 by rpki-client