Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fLxgm6NCR9Gh4rnUsG9jKY0KN0.roa
File: _fLxgm6NCR9Gh4rnUsG9jKY0KN0.roa (raw, json)
Hash identifier: nuWklPvIgnqPYlXOpSfXeyyX1NNzOynpBvOCNlrja/k=
Subject key identifier: FD:F2:F1:82:6E:8D:09:1F:46:87:8A:E7:52:C1:BD:8C:A6:34:28:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E041185C4DD4F9C727925F0B7D38C40E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fLxgm6NCR9Gh4rnUsG9jKY0KN0.roa
Signing time: Tue 14 Mar 2023 13:13:27 +0000
ROA not before: Tue 14 Mar 2023 13:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:41:18:5c:4d:d4:f9:c7:27:92:5f:0b:7d:38:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 13:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf2f1826e8d091f46878ae752c1bd8ca63428dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:f8:e2:c1:b2:f0:a7:94:8f:4b:04:70:f1:
16:2b:86:2a:b1:b2:5f:e5:cb:c2:45:02:55:c1:55:
21:1d:50:00:ec:c6:04:34:ac:84:d9:d8:a2:08:01:
e1:0c:fa:3b:0f:09:ef:7f:30:8f:cc:1a:b9:5e:de:
5d:38:0c:d8:51:88:f5:ca:fa:1d:c3:16:03:06:48:
1c:ad:b5:73:bb:94:a1:b3:01:7c:f3:b4:cc:11:64:
a5:2b:58:48:61:2c:13:8b:d9:b6:5c:ca:c0:43:b1:
3a:50:1a:39:6b:43:e7:a5:e7:96:29:77:01:e8:ac:
4f:07:26:47:16:94:69:5f:cc:15:a2:d1:0a:19:a5:
a2:6f:89:02:00:3b:4c:fa:a9:b2:06:71:51:58:df:
37:dc:42:08:b5:67:b6:ce:70:2e:96:bf:b7:a1:52:
fa:0c:1a:56:96:91:51:69:8e:ea:89:dd:de:c6:99:
c7:6d:9f:35:34:de:2b:2a:67:26:7c:8a:94:2a:2f:
8d:f9:12:dd:56:90:ee:06:b8:dd:32:b6:fb:43:70:
82:6c:74:5d:d7:f7:e5:28:a8:f0:7b:e6:6d:82:6b:
3c:c6:a7:2e:6b:13:e6:7c:14:2a:4e:e9:9f:4c:68:
d5:37:5f:64:6b:03:4a:a2:63:6e:16:12:af:fd:a0:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F2:F1:82:6E:8D:09:1F:46:87:8A:E7:52:C1:BD:8C:A6:34:28:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fLxgm6NCR9Gh4rnUsG9jKY0KN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:e3:35:ba:8c:5a:29:42:e4:6f:b6:37:5d:a9:04:cc:2c:a5:
e9:3e:a8:ff:0e:52:e3:61:a6:2c:2c:ce:5b:b0:de:d0:71:22:
4d:3b:53:ae:ee:88:4a:b9:01:42:51:a7:76:ab:50:cb:96:26:
14:98:e1:c3:d2:94:86:b6:9e:0d:35:3c:6e:22:c2:48:18:16:
18:59:3f:e6:39:8a:39:0c:e2:b3:9a:9f:63:20:28:f5:56:7e:
2a:9a:a2:12:7e:12:3b:46:5e:5b:3f:a7:e3:69:46:b3:de:b3:
f8:f7:90:83:10:b7:3a:0a:03:0c:f1:c1:bd:4d:bd:d8:59:a6:
04:80:f6:2e:ae:56:bd:ee:20:69:8c:b7:e0:01:24:a1:a4:4d:
15:1b:c1:b5:96:ce:2d:5a:28:6f:a8:71:73:4c:52:99:ca:71:
e3:e1:35:1c:91:74:51:cb:15:31:3b:78:b9:cc:45:ae:e4:69:
7b:62:a7:ce:32:c9:b1:12:bb:1b:f2:08:58:7c:12:15:da:47:
61:db:24:da:32:05:88:73:9b:35:c4:a2:9d:cb:3f:ee:6c:1f:
4d:da:9d:f4:a6:08:4e:24:a8:e0:2a:18:bb:67:11:17:1e:94:
f2:d5:a3:32:31:2a:cd:f9:e8:90:57:2d:51:00:ce:d3:27:97:
61:c7:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:05:19 2025 by rpki-client