Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fiPDeGYAtHLkh8Waf7EOwS7a1s.roa
File: _fiPDeGYAtHLkh8Waf7EOwS7a1s.roa (raw, json)
Hash identifier: i7f+LYmgAwNW+DWtLshHjM7IC/UTfA9zyVzhmW2z8cY=
Subject key identifier: FD:F8:8F:0D:E1:98:02:D1:CB:92:1F:16:69:FE:C4:3B:04:BB:6B:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018991A920F8EE5A841F0D47723A940D7965
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fiPDeGYAtHLkh8Waf7EOwS7a1s.roa
Signing time: Wed 26 Jul 2023 10:05:27 +0000
ROA not before: Wed 26 Jul 2023 10:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:91a8:913c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:a9:20:f8:ee:5a:84:1f:0d:47:72:3a:94:0d:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 10:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf88f0de19802d1cb921f1669fec43b04bb6b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:1d:10:d4:f0:39:5a:4a:ab:7f:97:9c:73:
fc:06:b3:92:6f:d6:03:bf:45:80:0c:3a:30:a6:fe:
9c:9c:a2:ab:51:2e:c5:4b:6e:bd:42:35:27:61:49:
0e:8d:0c:22:4a:d3:af:c1:67:fc:6c:37:60:3a:59:
34:b5:b8:d3:53:23:72:05:96:44:23:8c:33:06:94:
37:4b:ee:e8:f0:06:d9:de:b8:92:c6:3b:bc:79:a4:
1c:48:12:ba:10:4d:74:1d:ea:8a:3f:34:ef:4f:e1:
8a:ca:ed:c5:0c:ff:78:82:4f:52:15:9d:4f:72:d1:
21:d3:ad:b3:d1:ba:37:c0:9e:fe:39:10:7e:16:f5:
c8:f5:9a:2b:70:38:bb:83:5a:e3:a6:38:b4:5f:9b:
b1:2f:dc:41:15:2e:5c:a3:33:01:f0:0b:01:0f:8d:
4a:ce:6e:26:5b:20:26:82:93:00:81:e9:70:e7:5b:
de:be:71:45:3b:84:c0:2d:e7:c1:1b:69:52:9b:c8:
93:7d:91:ad:59:84:ee:47:ec:34:3b:fe:0c:ca:2f:
d4:43:da:c5:7d:db:25:a2:3b:08:a5:11:03:89:3c:
1d:cf:f5:36:ee:f3:bf:0e:b8:09:cf:39:ca:23:e0:
cb:3f:29:68:52:14:6d:c7:d0:67:41:64:25:c6:8a:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:8F:0D:E1:98:02:D1:CB:92:1F:16:69:FE:C4:3B:04:BB:6B:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fiPDeGYAtHLkh8Waf7EOwS7a1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:09:24:02:6e:54:9a:b9:78:91:1b:c5:2c:ff:ea:5f:47:e9:
21:10:84:58:f2:6c:29:c5:3c:49:a6:cb:e7:4d:7a:3d:f4:dc:
79:3c:21:89:9c:c7:4c:66:1c:99:c7:e9:9a:be:99:cb:5d:56:
cb:d3:b3:64:3b:cc:36:02:75:3f:c5:eb:45:21:71:b0:35:a0:
59:43:ab:3e:47:17:0a:e6:71:e7:d2:43:8e:0e:26:ed:f8:23:
d0:81:c1:93:60:2e:71:72:cf:06:a6:c4:89:65:8a:9a:d3:e1:
d5:c6:1d:a5:f2:e0:bc:4d:5a:c7:d5:da:0b:dc:c9:6d:1a:38:
dd:77:78:38:b7:b6:c1:53:ea:47:4f:06:83:3a:b6:1b:d8:94:
1f:c0:ae:38:92:54:47:54:7c:fe:2b:6a:79:cc:58:da:a7:31:
86:f6:1c:e1:ac:a4:5c:38:00:47:20:56:f4:6c:30:c3:09:9b:
c4:cd:fd:e5:1b:27:01:59:ab:a2:71:cb:2e:14:ff:ad:80:3f:
f4:ff:dd:2d:29:50:a7:d4:63:62:22:e0:6e:9d:2d:9e:46:7d:
f3:2e:dc:8d:75:2f:f6:c9:04:8e:f4:e6:b6:79:39:36:a4:a9:
79:06:85:70:fa:8e:46:e5:11:2e:59:05:0c:17:c9:75:29:5f:
95:78:d5:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmRqSD47lqEHw1HcjqUDXllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MTAwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGY4OGYwZGUxOTgwMmQxY2I5MjFmMTY2OWZlYzQzYjA0YmI2YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCsdENTwOVpKq3+XnHP8BrOSb9YD
v0WADDowpv6cnKKrUS7FS269QjUnYUkOjQwiStOvwWf8bDdgOlk0tbjTUyNyBZZE
I4wzBpQ3S+7o8AbZ3riSxju8eaQcSBK6EE10HeqKPzTvT+GKyu3FDP94gk9SFZ1P
ctEh062z0bo3wJ7+ORB+FvXI9ZorcDi7g1rjpji0X5uxL9xBFS5cozMB8AsBD41K
zm4mWyAmgpMAgelw51vevnFFO4TALefBG2lSm8iTfZGtWYTuR+w0O/4Myi/UQ9rF
fdslojsIpREDiTwdz/U27vO/DrgJzznKI+DLPyloUhRtx9BnQWQlxoolswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP34jw3hmALRy5IfFmn+xDsEu2tbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX2ZpUERlR1lBdEhMa2g4V2FmN0VPd1M3YTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADsJJAJuVJq5eJEbxSz/
6l9H6SEQhFjybCnFPEmmy+dNej303Hk8IYmcx0xmHJnH6Zq+mctdVsvTs2Q7zDYC
dT/F60UhcbA1oFlDqz5HFwrmcefSQ44OJu34I9CBwZNgLnFyzwamxIlliprT4dXG
HaXy4LxNWsfV2gvcyW0aON13eDi3tsFT6kdPBoM6thvYlB/ArjiSVEdUfP4rannM
WNqnMYb2HOGspFw4AEcgVvRsMMMJm8TN/eUbJwFZq6Jxyy4U/62AP/T/3S0pUKfU
Y2Ii4G6dLZ5GffMu3I11L/bJBI705rZ5OTakqXkGhXD6jkblES5ZBQwXyXUpX5V4
1Xo=
-----END CERTIFICATE-----
Generated at Thu May 1 04:15:39 2025 by rpki-client