Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQMaRsN7okJ05z_wRiJpqQWhQd8.roa
File: fQMaRsN7okJ05z_wRiJpqQWhQd8.roa (raw, json)
Hash identifier: IyTpTmaAqIXkykyQLXW+ep169gwszn+NgBnGLUNitwM=
Subject key identifier: 7D:03:1A:46:C3:7B:A2:42:74:E7:3F:F0:46:22:69:A9:05:A1:41:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B215A74251E7680162F9ADB8F85C406C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQMaRsN7okJ05z_wRiJpqQWhQd8.roa
Signing time: Tue 13 Jun 2023 00:09:03 +0000
ROA not before: Tue 13 Jun 2023 00:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:15:a7:42:51:e7:68:01:62:f9:ad:b8:f8:5c:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 00:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d031a46c37ba24274e73ff0462269a905a141df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:fc:1e:99:2c:7c:28:82:d9:f6:48:0c:fc:
82:7c:db:e7:28:71:75:d3:26:42:28:72:a6:4c:c5:
7f:0b:9e:90:e9:f4:d0:b0:cb:78:0f:42:34:6d:c0:
47:51:02:3e:ea:90:13:ef:74:56:b5:6b:33:ae:e0:
dd:8d:a6:bc:b4:d4:97:cd:f2:05:09:39:a6:5f:2d:
cd:10:4d:62:4d:30:5b:05:df:b3:94:72:08:c1:67:
e2:25:f2:a3:c1:9d:78:3e:77:01:4e:51:42:ce:16:
7e:be:88:d0:d5:86:86:70:53:6e:6f:fe:94:56:1a:
71:7e:33:5e:78:4c:c2:84:d4:17:bf:13:5b:95:c1:
41:08:9b:fc:64:c3:97:8e:aa:65:c8:31:ee:f9:ea:
b2:67:b7:34:e2:2f:0e:69:1d:de:f7:27:fb:44:ee:
57:5a:c3:0d:dc:92:3f:6c:37:23:df:e2:e5:01:d2:
43:18:77:65:9e:6f:e8:cb:59:9b:6e:7d:3f:1a:d4:
1a:1c:e7:9e:c8:80:20:ab:36:72:c6:a6:bd:b7:ec:
13:bd:9f:8d:e1:2f:56:83:ca:f4:e4:4a:3d:c1:55:
68:84:52:7a:ad:2c:e7:14:ae:f3:00:5d:11:0b:ed:
80:00:0e:c1:f8:a5:79:95:80:84:94:43:f4:65:33:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:1A:46:C3:7B:A2:42:74:E7:3F:F0:46:22:69:A9:05:A1:41:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQMaRsN7okJ05z_wRiJpqQWhQd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:a1:e0:9c:9a:da:96:44:7b:ca:0a:4a:44:ba:63:a3:dd:6b:
30:8c:2d:7a:d3:c1:d1:76:fd:9a:34:b5:ef:5e:27:81:be:3b:
81:92:bd:c3:ee:48:92:a4:43:5c:c7:1f:2e:1e:43:9d:78:ea:
63:64:96:e8:13:ea:25:e7:52:d4:f2:19:93:29:5f:70:3e:16:
1b:c9:0b:1b:4f:23:49:33:a3:1b:4a:1d:e0:4e:7e:a4:c1:d7:
e8:a6:2c:fa:89:b3:c0:3f:cc:2a:5f:fd:bd:0c:7e:52:18:32:
8d:ec:89:07:17:13:94:62:a0:11:16:93:7b:c6:3d:db:c8:44:
51:3e:c1:5e:af:97:3e:1c:84:18:35:c6:e7:8e:19:5a:63:61:
7f:bd:12:37:2f:fb:f7:3d:36:65:b6:3a:5e:ab:20:7d:0a:a7:
15:95:fb:1a:22:40:37:42:df:3a:03:d8:2f:d3:3b:3d:81:16:
60:94:46:51:4d:e0:fb:fe:17:bb:0c:4c:ff:37:56:a3:f1:85:
e9:ce:b9:86:55:d8:83:9a:e0:66:a3:09:9e:70:c4:25:b4:ef:
39:4a:f0:d3:99:9e:01:e1:1d:fb:5f:ec:61:3f:69:be:99:f3:
08:05:c3:fb:d3:5e:ab:f3:ab:d3:61:13:e4:94:41:5b:82:60:
0d:10:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:34 2025 by rpki-client