Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBoUTx9K2D8L3C6TlIk3k2ESKgI.roa
File: fBoUTx9K2D8L3C6TlIk3k2ESKgI.roa (raw, json)
Hash identifier: GSKhER0lHm3A8rFQ38+3KZZIIq6yYEZmAvnRM3uGzPY=
Subject key identifier: 7C:1A:14:4F:1F:4A:D8:3F:0B:DC:2E:93:94:89:37:93:61:12:2A:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FE4C6FD43AFA328563ACF9F44ADDA3E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBoUTx9K2D8L3C6TlIk3k2ESKgI.roa
Signing time: Mon 20 Mar 2023 09:14:27 +0000
ROA not before: Mon 20 Mar 2023 09:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:4c:6f:d4:3a:fa:32:85:63:ac:f9:f4:4a:dd:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 09:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c1a144f1f4ad83f0bdc2e939489379361122a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:10:cd:11:5f:d0:32:fa:a1:db:2c:04:5c:
6d:b0:95:2f:b4:49:46:26:b7:fb:cf:9d:55:9f:ea:
cc:8e:64:2d:ce:2e:09:14:c1:af:78:a8:c8:c2:ee:
3d:40:98:cc:6b:52:62:e4:77:6a:52:ff:fd:b5:6a:
75:17:f3:35:fd:49:5f:a9:ab:80:b0:f2:c4:73:14:
b4:3d:4c:6f:e4:c4:70:25:a8:33:1f:bb:cc:37:d4:
4d:32:e2:76:0d:22:1b:b5:e4:bc:c0:a7:b5:dc:1e:
a4:0e:32:28:dd:c4:b0:77:c6:3e:fe:94:16:88:2f:
92:dd:69:97:a1:0e:59:eb:2d:54:aa:a6:43:19:38:
be:30:f7:33:d9:9e:28:b7:4e:ea:93:c7:f5:8b:c5:
9e:5a:ce:34:91:bd:19:3c:f8:40:72:0d:03:7e:46:
83:8f:cb:bc:f1:28:c7:80:44:59:d2:69:4a:a2:2c:
5e:4f:5f:8e:37:02:e2:6e:18:ab:f9:28:d6:b3:72:
1d:3f:93:97:1c:38:56:73:1c:d8:b1:a2:b2:7e:49:
ff:77:b6:4d:8c:fd:52:16:ab:5d:16:b3:37:87:da:
d6:08:11:e6:61:75:0c:1e:13:eb:2f:fb:15:cb:31:
11:13:6e:35:3e:43:cf:b1:56:17:69:c9:01:dc:6b:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:14:4F:1F:4A:D8:3F:0B:DC:2E:93:94:89:37:93:61:12:2A:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBoUTx9K2D8L3C6TlIk3k2ESKgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:fd:96:60:2c:00:74:31:b7:42:01:2a:4f:22:cf:b0:06:a3:
57:3d:d8:84:ad:00:a2:ee:e2:a1:20:c4:5d:e1:49:2e:81:d7:
bb:33:d1:35:42:fc:35:83:3b:a9:b1:57:a4:a7:f8:b1:4d:e1:
2e:84:45:0e:44:62:b5:5e:1f:5a:4c:e1:f8:ef:86:79:a2:6b:
99:e0:a5:56:be:fb:d2:5e:db:60:3c:90:7d:7c:e6:89:33:c5:
6b:97:e2:79:f9:78:a3:f0:b9:fc:d4:28:c8:b2:d8:b3:a8:ee:
94:f8:84:59:a2:dc:de:06:10:8f:92:93:5d:07:e2:38:e2:cb:
b1:24:25:53:68:08:bf:cf:29:ce:96:bf:9d:64:7f:66:94:59:
c4:d9:2b:f3:04:45:ae:0c:13:d1:1f:25:08:0e:fb:d7:7f:6f:
25:d2:af:f9:d9:5b:05:f0:b8:94:af:65:18:f7:66:25:1c:ad:
94:d3:02:c4:d2:a6:ed:2f:9d:f3:0a:33:0e:84:b4:36:e6:ec:
5b:a0:10:bd:42:39:50:da:51:38:8c:a2:b9:b4:64:89:90:e4:
d9:af:5d:db:c4:96:6a:3e:2f:a4:63:f9:ae:6c:ac:38:c7:4f:
72:48:da:3c:6e:9e:0f:e2:8e:db:53:b2:aa:28:26:8f:5b:98:
8c:58:13:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:41 2025 by rpki-client