Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Pz6Oekeux1yJscsNopEICrIoLk.roa
File: _Pz6Oekeux1yJscsNopEICrIoLk.roa (raw, json)
Hash identifier: 9Qhg3wbcQTfuRjLC9Kng1fI3AaaMjF7Uz9W07SiC9kU=
Subject key identifier: FC:FC:FA:39:E9:1E:BB:1D:72:26:C7:2C:36:8A:44:20:2A:C8:A0:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BBB7485C6698D2769333998EACAA4347
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Pz6Oekeux1yJscsNopEICrIoLk.roa
Signing time: Thu 03 Aug 2023 14:04:58 +0000
ROA not before: Thu 03 Aug 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:bbb6:a631/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:b7:48:5c:66:98:d2:76:93:33:99:8e:ac:aa:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcfcfa39e91ebb1d7226c72c368a44202ac8a0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:a3:c6:c7:1e:46:e2:48:13:71:fd:9f:de:
12:c1:71:a9:97:d6:9b:76:9f:ef:1d:c9:d1:58:34:
60:34:2c:12:f9:d0:c6:78:cc:8c:bb:b2:29:f4:82:
67:bf:98:67:c9:c9:ad:a9:36:a8:b0:bf:46:98:50:
26:42:5e:b3:42:f4:c8:26:19:0c:6f:4a:49:3d:96:
1c:db:21:57:52:f4:4c:b1:db:ee:c4:a9:db:4c:10:
f1:f5:f1:08:a5:9e:e0:f2:43:88:2c:5c:be:bb:3d:
ab:a6:11:11:a9:e3:b4:20:34:3b:3a:15:65:bf:dc:
3b:4f:dd:1d:37:0a:e9:52:c7:bc:13:9b:da:05:07:
63:f2:8d:b9:b8:a4:c4:87:2d:59:46:75:c7:a1:54:
40:63:67:22:52:09:25:2d:bd:9e:a1:b7:d6:a4:df:
2f:12:61:ec:03:34:2f:73:30:fa:c7:a1:40:62:35:
f0:e0:b8:32:e6:b9:49:89:96:4d:91:f2:e5:b3:19:
99:bc:f5:37:71:4c:57:71:bb:50:b9:4b:ee:af:b9:
79:42:43:42:2d:fd:ac:a8:94:c6:87:5e:ca:db:1f:
a2:19:63:5e:a9:e0:76:d9:87:d7:2e:8b:db:ea:c1:
83:c4:1f:bb:86:1a:a8:87:4e:10:59:8a:46:b7:fd:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:FA:39:E9:1E:BB:1D:72:26:C7:2C:36:8A:44:20:2A:C8:A0:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Pz6Oekeux1yJscsNopEICrIoLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:cd:ae:5a:04:cc:c4:87:11:5b:b4:c2:48:c1:50:fd:b6:50:
66:8f:87:fb:c4:6e:89:c8:2c:f2:cb:4a:f7:b1:d2:2c:8f:c7:
9f:f8:66:ae:ce:f2:96:e8:39:71:19:6a:8b:36:2c:fa:8c:13:
46:51:74:d8:03:0a:cb:cc:de:a6:ea:0f:a6:60:5c:de:80:6a:
00:ae:a0:0a:8d:2b:bc:e5:c3:2d:a6:e1:0c:78:b9:a3:4d:2d:
91:ec:9d:7e:c4:aa:a2:f1:da:4b:b5:d8:c2:12:d6:a3:f1:35:
b3:c0:6e:87:99:71:95:3d:cf:2a:0e:55:ac:c3:0e:f5:c6:1f:
a2:a0:4a:c3:40:48:56:5d:fd:00:89:35:aa:40:c8:b3:ca:3f:
64:91:1c:af:d9:af:71:f9:fb:0c:b2:68:4e:1c:47:3b:e7:15:
d6:ca:8d:59:65:bf:fe:ea:33:ae:4d:63:8f:c2:5f:1a:df:52:
c2:1c:ea:4c:06:06:01:2e:cc:bb:e6:c7:8c:3c:e8:65:f9:f9:
3d:4a:55:e5:ca:91:c4:c5:7d:45:88:aa:21:76:23:66:f6:ca:
3d:eb:f3:37:41:90:12:57:0b:d9:e1:be:c4:d0:c0:64:9f:f6:
ce:24:10:8e:e5:78:a7:bf:f8:4d:f1:57:dd:1b:44:db:fb:48:
e7:1f:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:59:20 2025 by rpki-client