Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X-FfiBscWuNGs1NgS91d_PIcCuA.roa
File: X-FfiBscWuNGs1NgS91d_PIcCuA.roa (raw, json)
Hash identifier: ONxLO/6es6UeY8uVyuD7vZLAHTm4pvbh9nYJ3yJSsUk=
Subject key identifier: 5F:E1:5F:88:1B:1C:5A:E3:46:B3:53:60:4B:DD:5D:FC:F2:1C:0A:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F57899214E083493C97AD2F940FF4FB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X-FfiBscWuNGs1NgS91d_PIcCuA.roa
Signing time: Mon 14 Aug 2023 19:14:28 +0000
ROA not before: Mon 14 Aug 2023 19:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:78:99:21:4e:08:34:93:c9:7a:d2:f9:40:ff:4f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 19:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fe15f881b1c5ae346b353604bdd5dfcf21c0ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:ab:58:24:4f:2e:4c:70:cb:03:e7:d6:30:
34:78:3f:bc:40:46:09:c2:d8:1b:76:52:40:ee:ca:
d3:a2:b7:17:69:41:c1:cc:56:9d:20:09:cd:a9:11:
3e:3f:9a:88:7e:3f:09:38:b8:e4:43:d5:66:9f:20:
d0:3c:25:9e:36:08:01:55:c4:aa:60:54:06:00:e9:
46:fa:2c:f9:7f:64:40:7e:d3:5c:0a:5a:ae:39:de:
4d:13:5c:65:f7:31:ed:f6:2e:a2:18:6c:2a:b4:bd:
5d:ef:95:92:c4:fb:1d:d4:e1:ef:10:55:05:a2:ff:
32:85:46:91:60:eb:5a:29:de:fa:09:b0:08:dd:b6:
48:71:fb:d8:3a:22:b9:70:ca:89:0b:ce:7e:68:63:
e4:d6:64:83:14:0a:15:48:3f:d3:28:f2:0a:3b:bb:
3d:70:09:87:e7:c6:fc:9e:15:dd:4e:8c:39:1c:6f:
7c:6b:da:25:bc:5c:db:5c:5d:b8:80:ab:e8:57:46:
4d:63:95:11:a1:8b:fb:2c:d4:fc:b7:60:53:98:14:
ad:4d:cd:76:15:4f:60:9a:0a:d2:73:ed:84:97:17:
1e:e4:fa:8c:5a:c4:9c:8b:0d:51:8e:68:f8:c8:e1:
a0:34:4a:fe:0d:5b:7d:1c:ec:6c:5e:f4:97:ed:1f:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:5F:88:1B:1C:5A:E3:46:B3:53:60:4B:DD:5D:FC:F2:1C:0A:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X-FfiBscWuNGs1NgS91d_PIcCuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:21:e0:00:4b:2f:0d:0d:e9:95:2f:f7:c7:af:d8:de:3d:84:
c9:5d:62:c8:3c:2c:cc:15:17:04:ca:51:45:04:b2:7d:a1:a7:
46:14:51:b4:6b:74:48:77:e5:2b:4a:c1:2c:52:bb:3a:29:90:
71:80:ff:d0:10:7f:85:89:2f:00:04:5b:4c:dc:7d:9e:f3:88:
d2:dc:c9:da:11:73:c0:84:89:d1:cf:43:2b:3d:85:e6:4a:e1:
99:8d:b1:1b:04:cd:3f:a6:3b:9c:8f:ae:8e:b7:79:57:e0:63:
5b:0f:9b:85:af:d6:2c:1e:d7:d7:b2:df:14:47:69:52:1e:b2:
8e:f2:37:d1:3c:d5:9e:7f:58:96:7e:dc:20:46:e8:1b:91:dc:
d2:82:bd:be:ba:6e:fd:35:8b:0e:29:11:8a:84:4b:08:a5:82:
66:5a:7b:ee:29:4f:dc:da:c0:2e:ce:7d:50:7c:3c:f3:fe:77:
a1:f7:f8:1f:ff:7b:69:aa:d4:12:b8:2a:8b:4c:c2:2a:8c:d9:
c4:2e:22:8a:c2:ac:da:9c:0b:75:97:eb:ba:35:af:75:7f:65:
5b:17:14:f7:33:4a:04:44:28:2c:bd:77:d6:56:31:b0:7c:6f:
bc:8a:0d:cb:6a:44:f6:ce:c1:5b:68:f7:77:72:3d:d9:4d:a7:
c7:a0:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:58 2025 by rpki-client