Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_PWCmUM97I7lFQcrgv8qwb0d74U.roa
File: _PWCmUM97I7lFQcrgv8qwb0d74U.roa (raw, json)
Hash identifier: iEsnYvbFIyNRdjaie21FCD3yfS/AVWr6NsXvwsHnUEc=
Subject key identifier: FC:F5:82:99:43:3D:EC:8E:E5:15:07:2B:82:FF:2A:C1:BD:1D:EF:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883A233368ABA030E5397A24E0A3D9AB65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_PWCmUM97I7lFQcrgv8qwb0d74U.roa
Signing time: Sat 20 May 2023 17:09:25 +0000
ROA not before: Sat 20 May 2023 17:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:23:33:68:ab:a0:30:e5:39:7a:24:e0:a3:d9:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 17:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcf58299433dec8ee515072b82ff2ac1bd1def85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:7c:4b:ac:cf:54:f2:34:a8:d9:65:4e:33:
99:23:fd:0e:5e:ea:26:24:d5:ef:ce:6e:e1:99:d3:
61:49:f2:ba:ae:44:2a:e2:10:0d:f1:de:dc:27:19:
d0:87:4b:21:7b:b8:c7:b8:8f:0c:ee:31:ac:ec:da:
24:69:0d:62:c3:35:c4:f3:b5:08:eb:6b:fb:2a:23:
3d:a9:84:64:94:61:ab:8a:3e:fb:a5:b2:d3:09:bd:
37:2d:f7:0a:79:41:15:72:6e:5c:92:51:fa:29:bd:
3b:42:fa:6f:8c:ac:38:29:4d:1b:af:7e:5b:80:83:
84:62:0b:cb:54:22:b1:6d:8a:1b:25:5a:39:a1:f0:
bb:43:e6:8e:fa:98:13:88:ab:a8:f3:f7:30:df:84:
f6:d7:0d:de:e8:12:c9:b3:4a:06:54:90:7d:af:99:
ec:e3:6c:23:ea:f5:fe:41:2d:81:14:da:79:4a:7d:
95:fe:59:5d:81:a7:31:02:3d:84:60:3f:0d:0c:50:
d6:94:de:da:69:9d:d0:48:52:c2:8f:76:33:2b:6e:
de:76:19:cc:bd:c8:e7:ee:bc:d4:d5:5b:18:ea:a4:
ca:21:58:48:88:50:97:2a:dd:d7:6a:9c:b0:ee:c1:
48:68:18:53:2a:23:5a:1b:3c:34:d8:02:80:36:5d:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:82:99:43:3D:EC:8E:E5:15:07:2B:82:FF:2A:C1:BD:1D:EF:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_PWCmUM97I7lFQcrgv8qwb0d74U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:f8:e6:16:22:69:1b:f9:00:4e:f5:64:bb:24:7d:70:d0:d8:
a1:11:cc:a7:77:a7:3c:b2:c4:1b:93:6d:64:f6:1f:ad:69:31:
6d:a9:24:f9:83:75:70:3f:aa:5f:b9:02:32:11:80:e8:c8:33:
0c:e6:52:da:bf:97:41:f7:d7:9f:8e:68:31:6d:ab:1c:41:75:
7f:3d:17:61:45:3b:db:c9:c3:a9:ef:1d:97:a5:dc:cd:42:57:
6f:f3:bf:f6:0b:b8:80:8d:cd:ab:59:93:0e:fd:9f:99:2a:8b:
63:c3:25:31:87:5e:86:bc:e3:0a:d2:0a:5b:2c:12:a1:55:c9:
99:32:28:56:45:b6:29:3b:9d:0c:cf:6d:08:6b:7c:91:40:d2:
d6:65:84:88:42:76:d2:e1:06:be:6c:4c:88:e2:d7:57:7e:09:
be:25:40:13:4e:52:09:5f:7b:18:c5:8b:a2:c5:3b:43:04:97:
6a:ee:31:8d:4f:d6:fe:f5:99:f5:6b:12:47:24:9f:94:d5:21:
5b:2b:7e:27:e3:26:95:33:46:c4:85:29:52:6f:a4:15:38:db:
b8:46:6f:72:a3:97:31:83:53:cd:4d:2a:f7:44:93:11:5a:f5:
b3:2e:2d:aa:1e:c3:8f:f1:42:78:6c:ce:e5:69:66:53:46:c0:
f5:1f:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:44:11 2025 by rpki-client