Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQvj4eJ-ZRjV_Go6A1K-gMOWDd8.roa
File: fQvj4eJ-ZRjV_Go6A1K-gMOWDd8.roa (raw, json)
Hash identifier: sXpqL+hKapyw7ud6gOX0A2voMXnfbWODCdN/ljp3cCQ=
Subject key identifier: 7D:0B:E3:E1:E2:7E:65:18:D5:FC:6A:3A:03:52:BE:80:C3:96:0D:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F727CEFE1E68EA632DA224A20BBB5363
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQvj4eJ-ZRjV_Go6A1K-gMOWDd8.roa
Signing time: Tue 15 Aug 2023 03:05:28 +0000
ROA not before: Tue 15 Aug 2023 03:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:f727:9dda/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:27:ce:fe:1e:68:ea:63:2d:a2:24:a2:0b:bb:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 03:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d0be3e1e27e6518d5fc6a3a0352be80c3960ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:7a:2a:e8:0b:06:15:f9:4e:90:58:b7:fb:
d3:1b:2a:38:63:da:e7:a4:1c:80:7a:d5:47:ac:97:
dc:ab:75:9a:6a:e6:58:bb:b5:a7:3c:53:71:ca:94:
00:12:c9:54:49:cc:65:2d:22:b0:c9:50:a6:a7:ec:
48:9e:df:32:76:45:b8:bd:67:98:28:21:44:6c:b8:
ea:f2:bb:9a:ff:ea:57:0e:d2:b8:a3:78:3d:c6:63:
f5:f0:87:14:11:e7:9a:4a:35:37:b2:7b:ec:94:30:
2d:39:6b:df:91:c7:ae:9e:28:c6:1e:9f:56:55:a8:
8b:72:57:3f:e4:bd:58:d0:b8:0e:f2:7b:93:76:0d:
ac:79:74:0b:7a:e0:a1:15:85:fa:15:7b:e4:81:15:
58:19:6f:ab:41:f8:3f:9d:44:9e:5b:a1:0a:90:cd:
fa:be:46:99:bd:1a:ef:0b:20:29:fc:ce:6f:ac:00:
45:23:15:90:c3:b2:ac:85:e0:e4:b2:28:82:2e:7d:
97:74:2e:3d:25:89:5c:4c:e9:59:05:df:99:e1:6f:
ed:73:51:14:2c:27:a3:92:ed:d1:69:6f:07:1c:fa:
f5:1f:8a:4f:93:7d:5b:cb:20:07:27:3b:ed:b1:29:
01:4f:f0:e4:22:ae:2e:c7:52:8b:a3:ec:2a:c7:7e:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:E3:E1:E2:7E:65:18:D5:FC:6A:3A:03:52:BE:80:C3:96:0D:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fQvj4eJ-ZRjV_Go6A1K-gMOWDd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:7e:ab:1e:e3:c6:25:3c:74:a1:19:01:b7:51:64:12:f0:e9:
2f:34:2c:78:b1:5e:ad:18:6e:b6:ca:ec:30:42:d2:68:73:d5:
b1:37:3f:e4:bb:05:21:c8:bb:03:fd:89:bb:d6:81:9f:45:ba:
83:95:ae:16:c2:40:80:25:f9:72:fc:b6:43:c1:74:7a:4f:82:
2c:ed:84:fc:7d:10:64:f3:98:bc:1e:a4:c3:5b:a2:2a:c7:e0:
8f:1b:4b:05:91:bd:5d:6c:6d:59:07:80:fb:8f:64:63:5d:49:
e9:04:66:99:92:05:99:8c:5f:6c:d6:6d:c7:b2:bd:c4:85:21:
ec:0e:3c:cf:12:53:25:d2:64:16:87:53:2c:68:e5:32:9f:ec:
a3:a6:ca:e7:4a:71:a3:ed:e3:68:6a:b1:31:f1:e4:5e:de:01:
fe:09:2f:ef:a4:b3:33:88:8a:17:79:c1:fb:b1:62:5f:8a:d5:
08:3b:0c:3b:95:e7:41:fe:5f:1f:19:57:94:be:d3:72:e0:8e:
32:a8:5f:bb:84:7f:95:80:f7:fe:4f:5e:fb:c0:58:c2:8e:a6:
db:67:cf:0c:1a:cf:08:f3:56:b2:58:28:94:e2:d9:d1:5b:b9:
28:c1:59:09:e9:a8:06:08:0d:9a:9d:63:5f:c9:a4:ca:68:3c:
7e:8f:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:42 2025 by rpki-client