Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyxoV4IYJkUjH_Hf1_EaaI-Cihk.roa
File: FyxoV4IYJkUjH_Hf1_EaaI-Cihk.roa (raw, json)
Hash identifier: wqDUyKFEEQbx0sehktK+pDpqgptWwn3Rykwt57YN2Xo=
Subject key identifier: 17:2C:68:57:82:18:26:45:23:1F:F1:DF:D7:F1:1A:68:8F:82:8A:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897FD8DF4F8577836CAB6D5572E575E58B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyxoV4IYJkUjH_Hf1_EaaI-Cihk.roa
Signing time: Sat 22 Jul 2023 23:04:26 +0000
ROA not before: Sat 22 Jul 2023 23:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:189:7fd8:ad57/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:d8:df:4f:85:77:83:6c:ab:6d:55:72:e5:75:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 23:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=172c685782182645231ff1dfd7f11a688f828a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:78:1d:52:a9:f4:db:ff:cf:61:15:a3:cb:
9b:90:18:7d:f5:8e:3a:82:13:d0:67:d3:22:58:80:
27:2b:63:60:88:50:4b:76:5a:59:07:e9:f1:4d:35:
e9:65:51:fc:27:f3:b1:6a:01:00:11:80:20:91:68:
1e:e0:c8:cc:4e:30:5a:28:62:d1:0d:3c:d0:36:a2:
e1:22:4d:7c:32:52:fc:ff:b9:68:69:73:10:29:14:
e1:0c:78:1c:22:60:43:5d:61:54:a2:cc:3e:eb:fa:
c9:f6:e7:ac:13:f2:8a:45:64:30:e4:2c:d0:ce:b2:
b9:13:53:24:03:b6:12:a9:1f:18:76:6a:53:48:17:
a4:d6:5b:b7:0a:b9:55:f8:75:1e:e3:42:88:90:59:
2b:90:e8:cd:16:e8:75:c0:84:6e:bd:be:29:f8:eb:
1a:7e:8d:84:ca:e1:48:86:6f:88:2f:8b:08:26:ef:
d4:30:93:60:28:80:67:bb:0f:02:3d:bc:c5:4a:a3:
f9:b6:42:6c:13:d0:90:52:78:31:6b:03:58:18:d2:
b0:26:06:6e:09:7b:35:15:70:63:c3:d6:7e:20:fc:
24:88:5d:0d:f9:06:b9:a0:3b:61:c0:97:71:6a:a0:
ac:12:67:4c:1d:f8:d6:9e:7c:21:e1:e5:f1:bf:98:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:68:57:82:18:26:45:23:1F:F1:DF:D7:F1:1A:68:8F:82:8A:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FyxoV4IYJkUjH_Hf1_EaaI-Cihk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:4b:48:c6:76:79:49:21:89:91:88:51:44:61:4b:20:3c:e4:
07:57:73:f6:e7:26:52:5c:3b:3a:2c:bf:47:1c:e2:ed:f5:75:
ff:ae:fd:a7:80:9e:cb:07:5f:aa:f0:ab:01:7b:9a:3c:79:66:
70:0d:a7:56:ad:27:02:88:f7:b4:ce:f5:94:52:97:a1:ab:98:
b3:7a:c4:d4:cc:a8:31:93:7a:07:1b:f9:16:2b:d3:0f:b2:03:
5a:04:3d:49:e8:2f:2e:19:a2:cf:bb:13:fd:bc:26:b4:3d:af:
4e:6c:c5:b3:68:ea:3a:bf:55:35:f7:fd:67:42:c3:4a:7e:af:
e9:0e:1b:45:5e:f9:bb:19:a4:06:eb:86:b0:74:71:c6:15:ce:
75:a3:1c:7f:e8:f1:70:4d:ee:5a:27:dd:15:02:63:cc:06:39:
8e:08:62:02:a0:46:d8:2e:b4:80:6f:55:d3:9f:04:6f:71:f9:
53:86:01:8a:27:e7:0f:24:88:05:01:04:1e:69:f0:16:26:22:
40:70:5b:52:87:91:16:9a:2d:32:5f:88:d2:b0:fc:8c:3e:0b:
3d:4a:c0:82:5c:3a:48:83:3c:b9:81:73:6c:70:19:3f:7c:dd:
32:88:d4:08:15:91:e1:9c:98:02:19:83:9a:ab:d6:30:3e:d9:
1d:a1:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client