Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNe0bg2g4gM2hIObFudZpOXzSW8.roa
File: fNe0bg2g4gM2hIObFudZpOXzSW8.roa (raw, json)
Hash identifier: 0GuXU7hXvovM0kVQi/RuUYLdT8PV74YCikKNN5dXA+k=
Subject key identifier: 7C:D7:B4:6E:0D:A0:E2:03:36:84:83:9B:16:E7:59:A4:E5:F3:49:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873720937BFF31B5C0EF212E123A4D09CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNe0bg2g4gM2hIObFudZpOXzSW8.roa
Signing time: Fri 31 Mar 2023 10:04:54 +0000
ROA not before: Fri 31 Mar 2023 10:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:3720:7e08/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:20:93:7b:ff:31:b5:c0:ef:21:2e:12:3a:4d:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 10:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd7b46e0da0e2033684839b16e759a4e5f3496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:2e:cb:7a:9a:85:1b:0e:76:92:7f:b7:2b:
4e:91:55:d0:2d:39:89:8b:44:f6:d4:df:7c:d1:82:
29:6f:2a:d5:d0:58:6f:e9:91:b3:75:42:66:3b:5c:
99:7e:a3:ca:f3:9b:e4:96:93:16:e0:07:eb:e6:58:
36:9a:38:3a:04:af:2a:f9:93:fd:af:22:32:7b:27:
72:e6:3c:d6:12:f8:9b:74:c4:da:03:1c:da:6c:68:
95:25:8d:7d:57:ce:5b:ce:bf:f2:cc:72:06:d4:06:
5c:bc:15:3d:0e:7c:f3:6f:bc:a3:73:7d:d3:96:6e:
15:3c:04:e0:e7:20:ed:50:4d:30:23:b0:ad:8a:e0:
2b:57:9c:1b:2c:cd:ee:ff:57:15:88:5e:e0:c3:f5:
bb:76:1e:e8:9b:f5:be:d5:ef:a2:76:ec:6b:74:04:
2a:88:7e:e7:3d:0d:d6:a6:25:4f:fc:c8:6c:06:55:
4d:33:ca:8c:2b:65:73:93:a3:70:0b:c3:90:98:85:
bf:d1:02:79:49:55:a2:df:63:a5:65:8c:a2:71:2e:
13:ae:47:07:a6:5e:b5:55:72:db:86:46:49:26:c3:
4b:e7:5c:20:ec:18:45:a0:35:4a:82:2c:ef:59:a8:
45:f6:4b:a2:d6:e4:49:b2:9b:71:48:5b:cb:b4:23:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:B4:6E:0D:A0:E2:03:36:84:83:9B:16:E7:59:A4:E5:F3:49:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNe0bg2g4gM2hIObFudZpOXzSW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:32:fe:ad:c3:32:22:6d:49:11:7d:06:0c:b4:e8:50:74:66:
15:e3:38:1a:9b:23:64:82:ed:50:ca:bd:3d:bd:db:9f:ef:99:
c8:b4:4d:1f:3b:3d:97:a9:95:60:cf:b1:b8:f9:04:d2:ea:4f:
0c:5d:21:b2:00:b4:f6:44:35:59:0e:a7:bc:7d:95:57:ee:cc:
6b:70:ac:f8:3e:72:a7:a4:94:7f:ee:2a:5c:ab:1c:97:52:04:
d0:e3:7d:07:20:b2:af:73:b9:f5:e5:72:2e:1a:f6:a2:f4:fb:
42:b4:1a:f3:cf:01:d3:ff:62:0c:59:3b:fa:a4:3d:f1:c5:04:
10:17:3d:2e:46:a9:e7:ba:73:ab:56:e7:13:f1:f1:a3:a0:62:
6e:c1:cb:bb:6a:4c:39:56:50:b1:e3:81:45:74:b5:27:9b:d9:
fd:f3:36:c3:9e:34:ee:43:15:41:87:99:96:df:85:9c:69:01:
c7:b2:c5:e5:23:66:e6:8e:36:2f:2e:81:a8:11:ed:9f:fb:46:
87:9f:43:85:3f:cc:12:42:36:b9:50:05:90:b4:44:20:a1:20:
47:25:a9:85:b9:1a:ff:25:b3:a6:74:27:c9:5a:83:49:6d:09:
0f:e4:4d:6b:2b:62:66:22:d3:48:36:60:b1:f9:0e:02:91:fa:
5d:64:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:15:40 2025 by rpki-client