Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMkafPhEEFxFwNMmCgDufKiWeMw.roa
File: fMkafPhEEFxFwNMmCgDufKiWeMw.roa (raw, json)
Hash identifier: C/c2gCNjgQnDmitrFbtp3O4c2B1/vwVPLOT2YR4XJ2I=
Subject key identifier: 7C:C9:1A:7C:F8:44:10:5C:45:C0:D3:26:0A:00:EE:7C:A8:96:78:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018562F10B3B0FDAA7EFED3E4DEB2373CDFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMkafPhEEFxFwNMmCgDufKiWeMw.roa
Signing time: Fri 30 Dec 2022 12:10:42 +0000
ROA not before: Fri 30 Dec 2022 12:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:f1:0b:3b:0f:da:a7:ef:ed:3e:4d:eb:23:73:cd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 12:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc91a7cf844105c45c0d3260a00ee7ca89678cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:d8:37:11:18:75:59:34:9b:96:85:9e:88:
53:53:2d:6c:42:fc:f8:fe:92:f8:33:ae:a5:38:61:
ec:3b:83:83:e4:4e:66:92:98:31:a4:58:a8:7f:09:
ca:56:1b:06:86:ce:a1:34:de:90:78:77:c8:28:4c:
3c:24:13:46:89:ed:1d:4d:d9:63:be:33:f8:3b:a1:
d5:7b:cb:7b:c4:3d:7d:ec:0e:5a:fb:c0:fe:57:d3:
54:fa:03:04:5f:30:b1:79:fd:04:21:e1:72:d3:2a:
ed:6a:a3:de:e9:fc:15:e2:1b:29:5f:c5:1d:b8:28:
f2:3b:94:a5:08:15:d7:56:94:9a:c6:3f:67:df:0f:
82:d1:52:d5:60:8e:2e:fb:aa:97:37:98:b6:06:25:
6e:06:58:08:2e:cb:88:e6:5c:7f:fc:92:f3:53:27:
98:5c:62:18:18:fe:f7:59:13:b1:c4:5b:56:c5:49:
c8:f8:eb:4a:bc:b5:55:65:08:48:37:5a:b1:59:2a:
55:7a:ba:d0:89:70:38:2a:b9:30:02:a5:62:c8:d0:
c9:bc:bd:72:d5:b9:ac:06:fb:98:83:2f:9a:b1:cf:
af:d0:b5:9d:64:ed:c2:d6:23:fb:2a:09:83:db:62:
d3:f1:29:a5:5d:4c:6f:22:4d:6c:89:18:68:57:3b:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:1A:7C:F8:44:10:5C:45:C0:D3:26:0A:00:EE:7C:A8:96:78:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMkafPhEEFxFwNMmCgDufKiWeMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:b5:0d:96:99:ac:3b:85:b7:d3:48:4a:dc:66:53:38:d0:a7:
55:17:df:8c:03:c6:3e:e4:cf:67:08:34:b0:55:cb:1e:ab:1f:
50:bb:e9:27:aa:f8:b2:4a:d0:1e:85:86:3c:cd:18:86:d6:99:
e1:46:11:ce:f1:72:7d:cf:08:94:87:fa:ba:58:8c:e1:81:28:
84:ed:31:e9:a9:7a:5a:7d:d5:42:a4:8b:e8:e1:af:6b:d6:48:
b9:bd:da:7d:9a:e9:d6:10:9d:f0:56:db:3d:a9:62:7e:0e:69:
27:29:cc:48:19:75:23:8f:d9:e6:6b:1a:e0:99:1f:95:c1:2e:
10:80:2d:25:64:af:55:f4:6e:d0:36:ea:5b:3d:85:77:01:25:
ee:e4:48:1a:40:2a:95:b3:7b:76:8e:1a:d9:d0:32:fd:fe:09:
f1:d8:07:58:f0:3d:93:26:3c:f0:13:b2:93:d7:a3:b6:8b:c5:
5d:9e:eb:52:f1:00:88:8c:84:50:9e:38:a1:87:06:53:19:48:
13:7b:f9:37:55:9a:17:9d:05:67:9a:06:4c:e2:d5:93:76:76:
76:bd:97:94:ab:71:84:ea:ef:e7:5e:ed:bb:ea:d9:98:bd:c8:
d6:95:47:1a:cc:46:4d:6d:cf:59:66:b0:43:c8:b4:9d:42:73:
6e:27:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:47 2025 by rpki-client