Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMrFav4OHaLn2-8dV4O7oUucJ-Y.roa
File: fMrFav4OHaLn2-8dV4O7oUucJ-Y.roa (raw, json)
Hash identifier: t5DKE2uim9tubDKYKI4t++ntL4I7lcdNpUJJZgnXBBc=
Subject key identifier: 7C:CA:C5:6A:FE:0E:1D:A2:E7:DB:EF:1D:57:83:BB:A1:4B:9C:27:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189932F22C6A1FBF37F0EA3137209915105
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMrFav4OHaLn2-8dV4O7oUucJ-Y.roa
Signing time: Wed 26 Jul 2023 17:11:27 +0000
ROA not before: Wed 26 Jul 2023 17:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:2f:22:c6:a1:fb:f3:7f:0e:a3:13:72:09:91:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 17:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ccac56afe0e1da2e7dbef1d5783bba14b9c27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:19:87:b5:51:51:d1:33:ee:e4:37:cc:f3:
c6:69:0a:38:28:e9:df:7c:9b:0a:71:78:9d:c4:26:
71:a3:76:8f:7e:70:76:ff:c5:60:42:1e:f9:f1:1e:
41:e0:20:ce:5c:33:54:1f:22:57:3f:44:e6:e3:27:
1f:da:8f:db:d9:76:dc:e5:c6:32:fe:60:81:2f:b2:
09:de:7f:92:95:da:63:27:43:1a:0a:e5:a2:bb:92:
f9:1a:75:a3:41:50:82:dd:7b:f3:18:ed:21:92:74:
f4:31:1f:99:ac:f3:1d:80:03:24:89:d3:af:e9:74:
de:47:e2:7b:4e:f0:b5:e6:1e:48:5f:ad:1e:75:55:
2d:9d:8f:98:8c:d1:fb:ee:7f:77:c3:3f:c9:c1:bf:
7a:bb:8b:30:0e:a5:5b:36:43:5b:d7:86:f5:34:7a:
ff:bf:31:a9:10:36:13:9c:d4:a3:c8:d6:93:f7:80:
59:a2:59:eb:28:68:9c:93:c1:c1:52:27:66:a8:d5:
75:a2:bd:d0:70:7a:d9:10:9e:a6:5d:42:f5:1a:2f:
c3:1b:4d:11:0a:ee:b3:6f:f6:72:a9:34:e4:03:4f:
8c:20:08:34:2a:1e:50:96:78:2b:bf:54:ab:a0:59:
62:66:1a:58:8a:20:c4:b2:2d:be:65:60:51:dc:2c:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:C5:6A:FE:0E:1D:A2:E7:DB:EF:1D:57:83:BB:A1:4B:9C:27:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMrFav4OHaLn2-8dV4O7oUucJ-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:d3:e3:f6:cc:db:ad:9b:dd:ce:b6:d8:79:99:a4:6f:27:40:
cf:99:39:38:35:b8:ef:60:b3:3c:d5:30:92:76:90:10:19:1a:
2c:2d:e7:31:83:84:8b:00:24:6e:1b:dc:d6:e7:a1:25:0f:c3:
13:96:63:23:14:e9:e7:b3:04:6b:e0:27:e4:8b:cd:bd:eb:98:
bb:58:9a:06:de:50:df:f3:7e:7e:f0:71:1a:12:f1:24:78:c3:
bb:7f:cd:05:3d:b5:12:c6:1f:f7:30:11:af:f7:27:96:90:48:
25:10:fc:08:e3:28:02:fd:8f:14:a4:e4:d4:20:ec:27:96:a0:
61:ad:37:6b:76:2f:ed:53:11:41:0f:36:ac:e7:b3:63:e4:5b:
5f:1e:df:43:5a:81:46:75:f5:c4:74:a2:43:8e:1a:07:64:b6:
b6:b0:8b:30:95:a2:bd:55:5e:34:ad:40:c5:72:1e:90:97:49:
b4:ac:ef:60:aa:20:dc:90:48:ca:2b:ac:eb:a9:c5:ab:87:b3:
3c:e6:2a:2c:3b:cf:a2:08:91:ce:5c:20:4e:4b:5a:3c:83:3e:
3b:8b:27:ba:6d:96:95:15:99:80:e7:99:7f:c7:4d:bc:05:dc:
6d:00:1f:b3:5a:5b:e7:37:49:44:75:3e:53:59:ec:21:c6:a7:
b4:fd:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:00:11 2025 by rpki-client