Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_b0Y73DzFEd8-nDa6wyiRf-ihIQ.roa
File: _b0Y73DzFEd8-nDa6wyiRf-ihIQ.roa (raw, json)
Hash identifier: 33xLRUhpGVvgmWfoVZ50UlHHSppu1Zew/xdQlfiHMhg=
Subject key identifier: FD:BD:18:EF:70:F3:14:47:7C:FA:70:DA:EB:0C:A2:45:FF:A2:84:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BAF0FCF98941F7C41FBD3CE9ECEB0B46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_b0Y73DzFEd8-nDa6wyiRf-ihIQ.roa
Signing time: Tue 07 Mar 2023 07:20:00 +0000
ROA not before: Tue 07 Mar 2023 07:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:f0:fc:f9:89:41:f7:c4:1f:bd:3c:e9:ec:eb:0b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 07:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdbd18ef70f314477cfa70daeb0ca245ffa28484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:3f:66:25:d6:02:18:67:ac:4f:15:40:38:
2a:d9:c8:ef:d4:c3:20:29:94:c3:b6:d2:13:ed:fe:
67:ee:23:2a:e9:9b:7a:81:eb:e2:48:8f:b5:1a:2b:
26:1e:e3:5c:23:c4:2e:82:cb:c6:f7:58:42:98:84:
3f:58:c3:f1:2c:4c:d8:f1:b5:d5:ae:5a:60:6e:4e:
e4:1f:1b:e9:42:10:20:a1:3d:4d:62:30:dc:c2:45:
f8:c6:69:85:18:f6:ae:4a:25:65:f6:61:43:30:99:
26:46:9b:e8:1c:5b:70:bd:bf:b7:4a:f7:5b:7a:47:
fd:e2:82:18:1d:c8:96:2b:32:79:23:3d:19:d1:88:
74:62:65:e1:bb:4e:1f:db:aa:45:95:f0:ba:61:6e:
85:72:b7:6a:c1:18:f9:66:ff:80:07:1b:dc:e1:07:
f2:ec:47:0f:cf:6f:54:66:cf:a5:7a:a2:59:75:30:
8f:d2:89:42:b0:af:52:42:02:06:a9:03:8e:9d:96:
d8:d3:bb:99:9b:6d:81:3f:67:15:06:3d:1a:b4:90:
74:bd:01:d7:7e:ab:c6:79:d5:74:9b:30:48:be:4d:
89:90:db:ed:29:f9:a3:26:d1:b2:6a:0d:d0:86:70:
f1:83:f8:37:38:0a:62:3d:c6:d9:09:9c:4f:b9:bb:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:18:EF:70:F3:14:47:7C:FA:70:DA:EB:0C:A2:45:FF:A2:84:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_b0Y73DzFEd8-nDa6wyiRf-ihIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:7c:73:31:49:10:38:69:0a:0e:99:6d:c0:8d:76:87:45:e5:
05:82:19:5e:bf:b0:91:f5:0e:a2:0a:3d:10:91:1f:27:3c:8d:
2a:56:89:e8:d9:d4:41:6b:47:cc:81:ef:20:1b:ae:c1:91:0d:
6a:cd:59:05:dc:e1:43:9d:9b:fa:33:72:ad:08:c1:03:23:98:
57:16:dd:2c:24:2b:ea:e3:55:ae:2b:a5:38:bf:c9:ca:8a:df:
76:1b:83:07:ed:42:e1:d1:90:23:e4:ab:35:78:c3:4d:a2:80:
3b:f9:54:db:ac:e7:ba:89:86:de:48:d9:f9:07:dd:29:14:32:
49:5e:81:19:65:15:78:13:24:bd:c7:37:98:92:4a:5f:2a:81:
9f:04:27:0a:f6:82:c9:48:a7:7e:b6:6c:12:54:e3:57:29:26:
ed:ab:10:81:1a:e7:3a:98:5e:85:1e:17:5c:e3:a8:d5:fd:0b:
3b:4e:a1:44:fa:9a:16:a4:25:b3:d8:8a:47:4a:56:89:c5:a2:
cf:80:1d:56:5d:94:f6:11:7f:89:24:62:92:5f:b1:9a:be:58:
e2:e7:78:1e:7d:82:3d:33:8b:3c:dd:85:6b:e7:63:bc:bf:8b:
0e:96:9a:60:89:bf:7c:68:03:9a:ed:92:82:51:fe:f7:bd:9c:
76:e6:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:52:33 2025 by rpki-client