Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fj0SLf5tL-u1R-3l4O2_ztrvk0.roa
File: _fj0SLf5tL-u1R-3l4O2_ztrvk0.roa (raw, json)
Hash identifier: WJbhe3oZDNuJVVEFCFMN2GSg1o9i4Pb6bQR91B/s4kM=
Subject key identifier: FD:F8:F4:48:B7:F9:B4:BF:AE:D5:1F:B7:97:83:B6:FF:3B:6B:BE:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188277AC621E0756166851E7C7445D06EC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fj0SLf5tL-u1R-3l4O2_ztrvk0.roa
Signing time: Wed 17 May 2023 02:12:17 +0000
ROA not before: Wed 17 May 2023 02:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:27:7a:c6:21:e0:75:61:66:85:1e:7c:74:45:d0:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 02:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf8f448b7f9b4bfaed51fb79783b6ff3b6bbe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:ee:dc:4e:bc:79:cd:a6:0b:7c:63:78:0e:
29:bd:8f:85:21:9d:fe:42:2c:3f:ab:5f:c4:ae:a1:
f8:19:c6:7a:bf:f9:77:49:4d:4b:98:b0:d9:90:97:
6c:6c:e9:1c:c9:7c:ab:b9:84:2b:84:db:68:51:3b:
d6:ff:33:14:9b:aa:7b:2d:79:4a:00:fc:17:f3:ee:
43:6f:65:66:2a:e4:37:4c:b6:18:e9:9c:6f:e1:ff:
e9:a9:2e:77:e6:8f:50:0c:ef:b6:e3:04:c6:c4:62:
01:5f:e0:86:90:52:ae:1b:39:72:8d:0f:20:2f:7e:
c0:d0:ab:cd:fa:b4:c9:e1:11:4d:da:f2:d5:97:89:
5d:6f:f8:0e:06:da:6f:14:82:46:79:10:4d:79:4a:
24:63:ff:f0:2e:70:a2:b6:41:79:30:2c:b8:e5:59:
82:31:3e:99:ba:a2:a1:40:4c:30:7e:dd:a7:bd:0c:
7b:bf:fe:0c:81:81:da:68:17:32:8e:99:49:de:bf:
ab:78:c7:40:c4:a4:56:91:42:2f:16:a3:0a:9d:36:
3d:12:e5:61:ec:d2:30:d0:5f:4d:fd:5a:40:25:53:
45:a8:1e:c2:a1:c9:a8:a0:d8:2f:e0:fe:c6:25:be:
69:11:6c:17:8f:c8:a5:3d:26:dc:0a:53:26:2c:ec:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:F4:48:B7:F9:B4:BF:AE:D5:1F:B7:97:83:B6:FF:3B:6B:BE:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fj0SLf5tL-u1R-3l4O2_ztrvk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:5e:95:f1:83:fe:2a:a1:64:d2:f6:d1:f5:4a:6f:c6:89:a5:
a9:72:8a:3f:c0:d3:fc:fc:17:7d:7a:6d:6a:64:c3:97:23:da:
f1:bb:ae:83:7b:44:00:f4:0e:81:54:c5:77:0a:2a:32:92:0f:
89:09:70:61:eb:03:bd:57:d5:a8:6d:c6:8f:e7:af:6b:05:ed:
be:0a:4c:60:13:57:da:07:bb:29:e3:47:69:fd:e0:36:a1:04:
82:36:4f:e0:46:32:43:e0:97:16:e5:4b:62:c8:db:19:4f:1a:
75:4f:0f:9e:40:23:16:84:bd:d0:db:3a:f6:4f:43:f2:7a:4c:
7b:28:ac:6c:4f:eb:b6:86:77:41:6b:40:34:d1:e8:97:61:15:
2b:65:ed:c7:91:38:96:fc:60:77:2c:ed:26:d9:c2:d4:8f:cc:
0e:25:78:18:92:a6:4f:73:dc:60:f6:35:41:9f:8a:00:d3:24:
ba:d9:36:29:7b:39:b2:58:ee:2a:71:80:43:1f:fe:72:24:7e:
75:e2:22:2c:19:33:7c:22:1f:54:2f:29:45:bb:13:a0:77:43:
19:ad:cd:fd:99:38:fa:49:dd:fd:d9:4a:7f:54:76:8c:d0:43:
de:13:b6:4d:b2:7c:ba:1c:5b:a4:33:6e:11:2f:3d:0c:ec:47:
5c:5d:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:19:47 2025 by rpki-client