Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7CFVZ29BKu7dp-_k9pJRuaeihg.roa
File: f7CFVZ29BKu7dp-_k9pJRuaeihg.roa (raw, json)
Hash identifier: OV9Y4lnEd4BcxaVi1UyyFk2Mfs3x4O1Hy5o0IN2qTXY=
Subject key identifier: 7F:B0:85:55:9D:BD:04:AB:BB:76:9F:BF:93:DA:49:46:E6:9E:8A:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FC5668E19E5ECAD9B73E5559A28FE8E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7CFVZ29BKu7dp-_k9pJRuaeihg.roa
Signing time: Wed 16 Aug 2023 03:14:28 +0000
ROA not before: Wed 16 Aug 2023 03:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:56:68:e1:9e:5e:ca:d9:b7:3e:55:59:a2:8f:e8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 03:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fb085559dbd04abbb769fbf93da4946e69e8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:f0:35:63:1b:13:00:0e:39:11:5f:bb:b6:
64:78:2f:22:c8:b5:b7:80:11:8f:e5:69:c5:3f:37:
68:23:4a:15:6a:80:29:5f:a0:dd:1e:bd:b5:02:26:
6e:d7:11:85:28:be:19:40:e3:ce:04:ee:d9:41:50:
bf:54:c8:6a:7e:ef:c6:96:24:cf:97:fa:79:9e:53:
5e:6d:4d:ac:47:04:14:0f:31:e4:bb:9e:78:77:ee:
13:cb:d0:8d:53:3c:26:ad:26:58:8e:c2:49:35:56:
5b:29:60:47:bd:28:b4:2a:6b:ee:4d:60:bd:b9:c5:
c1:01:cf:50:41:6c:66:7d:7d:42:66:77:5d:06:91:
f4:6c:ec:6b:13:f4:57:be:50:89:34:29:8a:1b:d4:
a0:3b:2e:31:af:28:b1:ae:26:3e:c3:47:9a:11:8d:
a4:1a:1e:9c:ed:51:78:45:6c:02:2c:1c:43:31:95:
00:79:be:18:6a:7d:ca:34:82:b4:81:ec:ab:d8:de:
63:37:66:ba:f0:e6:82:56:58:49:39:38:5f:7d:b8:
6a:ee:35:78:e2:da:b4:e8:83:bd:5c:0e:ab:1c:17:
a0:60:4b:d6:7d:12:c0:67:e9:e3:81:1e:48:b8:21:
2e:ec:cd:9a:3b:dd:1e:5e:89:95:9b:ea:bd:a9:b4:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:85:55:9D:BD:04:AB:BB:76:9F:BF:93:DA:49:46:E6:9E:8A:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7CFVZ29BKu7dp-_k9pJRuaeihg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:19:2c:be:a5:55:b6:8d:76:da:34:83:66:f9:eb:44:4b:05:
a2:3a:55:13:36:aa:c7:b8:bc:a4:a3:4e:ab:c3:e2:61:5b:89:
6e:c8:95:a6:e2:69:73:16:05:5f:ff:cd:eb:a8:09:41:81:f1:
23:8a:91:b1:fd:80:3b:c0:01:a4:09:8c:00:50:c5:65:8d:88:
18:05:57:ec:33:8f:42:0b:16:8c:a1:53:9c:be:45:d4:66:41:
ac:37:22:f8:45:8f:9f:a6:c2:a7:f3:d0:ee:f9:c2:50:de:9d:
bb:40:5d:3d:20:89:dc:c6:e8:c4:4f:0d:0a:4f:d5:4c:49:1a:
3c:61:cc:c3:0f:d3:a3:fd:00:87:ff:c3:d9:b7:c8:95:33:a7:
f9:b8:5d:0f:63:77:86:48:c9:94:e4:c9:55:83:fb:55:98:72:
9d:7b:69:39:13:b2:e7:c8:0f:b5:37:66:d9:70:0b:9e:3a:89:
e2:5f:a5:c7:38:b1:16:09:86:3e:eb:2f:e5:a4:a8:18:f8:8a:
f7:d5:97:1d:3f:06:09:a7:96:cf:43:f3:7d:89:cf:78:7d:4e:
d6:c3:1f:20:28:77:1e:4c:78:03:a9:d3:19:6b:5b:f1:39:74:
b0:c3:70:9f:35:cc:fc:78:21:52:59:65:03:79:43:a5:24:f7:
63:17:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:12:24 2025 by rpki-client