Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fA7ORQ6Lhiw8_SOeROD-TbEdV0.roa
File: _fA7ORQ6Lhiw8_SOeROD-TbEdV0.roa (raw, json)
Hash identifier: 3klA1oeuEtK7U3aNq6p6iPqEzXVeXKk+/AlPZc/NwG4=
Subject key identifier: FD:F0:3B:39:14:3A:2E:18:B0:F3:F4:8E:79:13:83:F9:36:C4:75:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874CCCAD733B8F7E88E0819995EB483526
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fA7ORQ6Lhiw8_SOeROD-TbEdV0.roa
Signing time: Tue 04 Apr 2023 15:04:54 +0000
ROA not before: Tue 04 Apr 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:4ccc:59bc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:cc:ad:73:3b:8f:7e:88:e0:81:99:95:eb:48:35:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf03b39143a2e18b0f3f48e791383f936c4755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:03:7a:3e:27:a7:6c:a6:1c:5f:e7:6b:9d:
b8:cf:23:d9:ec:05:8e:16:c5:01:be:93:c3:d2:3b:
e7:45:4c:36:5c:a7:86:48:f8:73:eb:70:83:39:50:
54:89:a8:41:a9:13:12:04:7f:03:0c:65:c4:61:14:
3c:96:c1:6c:87:73:ce:83:b8:1c:41:f1:80:19:0d:
b9:cc:7b:5a:3c:0b:2b:2d:34:4b:43:d0:04:fd:1c:
0a:12:1f:f3:a5:91:41:c8:74:f7:8d:fd:75:68:5c:
7c:2b:9e:ed:7d:74:1f:bc:15:0d:eb:5c:1a:3d:92:
fc:c3:dc:79:7d:1b:42:b4:d3:56:eb:60:4a:e5:2d:
3e:40:28:3b:26:ff:68:45:e4:8c:71:d3:7a:7f:cd:
4e:2c:66:7b:6e:1f:74:98:33:1b:80:bf:67:c6:54:
4b:9e:fb:02:ab:e4:7c:3e:13:18:a1:a7:e6:ce:ad:
03:04:e8:1b:72:4b:6a:57:18:8e:f5:f3:3c:08:b9:
01:60:81:e8:b4:90:f3:34:bf:fc:29:20:93:a3:96:
af:a1:83:4b:2d:ff:ed:9e:81:84:3f:3b:7b:63:a5:
01:9d:43:5a:20:4f:80:09:d2:7b:90:42:46:eb:66:
20:e5:0a:68:22:74:bf:ad:dd:2f:63:c3:e5:42:ee:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:3B:39:14:3A:2E:18:B0:F3:F4:8E:79:13:83:F9:36:C4:75:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fA7ORQ6Lhiw8_SOeROD-TbEdV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:0d:2a:1a:6f:31:6f:09:5c:b7:05:b8:3d:47:f5:b8:25:d4:
1e:78:e3:26:f5:27:93:c9:52:34:83:f3:d4:97:8a:74:70:b1:
4d:8b:53:c2:c7:b9:50:5a:b5:ce:40:9a:b1:82:7f:12:c7:07:
39:f2:06:c4:73:73:50:35:0c:49:29:e7:be:8e:a9:ab:d0:91:
5a:35:19:a8:f9:02:be:33:26:26:83:28:8e:63:16:45:23:96:
e8:99:16:59:89:d3:70:9c:71:8b:f8:24:25:91:a2:d7:6d:d8:
87:83:76:e7:22:04:37:d1:24:d8:4b:0d:bc:b0:02:f9:90:eb:
15:41:8b:cd:5a:48:d5:44:d0:e3:8b:53:53:79:e3:64:fc:ed:
95:0b:4d:32:f7:80:87:20:fd:db:23:99:b5:00:19:7f:66:43:
c9:44:ef:41:75:5c:ab:63:e6:8d:8f:52:56:13:c7:ee:4c:db:
e8:5d:61:7c:18:e8:af:81:d5:1d:7d:c4:bc:56:92:a4:56:2c:
8d:3c:21:64:42:0e:19:a6:5e:b0:8f:44:1b:fa:ec:21:40:66:
e5:36:56:45:3b:55:58:fa:8f:40:1b:68:51:93:09:37:73:66:
7a:5d:91:f6:e4:ba:2f:12:18:21:1f:54:98:cc:df:69:d5:b9:
79:25:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:55:49 2025 by rpki-client