Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fR8ySt1atLrLTT5Ha89Yt7nebys.roa
File: fR8ySt1atLrLTT5Ha89Yt7nebys.roa (raw, json)
Hash identifier: QBGlDc2hJr2GbtUFhPVHxFTZo8+YYBePA1kytu2BoLk=
Subject key identifier: 7D:1F:32:4A:DD:5A:B4:BA:CB:4D:3E:47:6B:CF:58:B7:B9:DE:6F:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018842149341719E6EE6EFE9DD2CEEA39A1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fR8ySt1atLrLTT5Ha89Yt7nebys.roa
Signing time: Mon 22 May 2023 06:10:24 +0000
ROA not before: Mon 22 May 2023 06:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:14:93:41:71:9e:6e:e6:ef:e9:dd:2c:ee:a3:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 06:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d1f324add5ab4bacb4d3e476bcf58b7b9de6f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:9c:71:31:8b:26:aa:9f:de:37:ab:b8:01:
35:5b:83:fc:5c:35:07:39:cf:d5:95:03:8a:9e:54:
03:28:5a:6e:31:9a:7e:70:16:b1:ae:bf:be:cf:45:
2a:bc:85:4c:61:ed:cd:0b:3c:6d:8c:8d:98:52:68:
3b:79:35:81:7f:92:ed:cf:24:23:b5:fb:79:07:9a:
6a:71:d9:eb:a8:2f:8b:79:f3:20:00:09:fe:6a:0e:
9c:50:98:31:47:5b:c1:dd:8a:51:91:53:fa:fb:c0:
09:1e:05:be:db:4f:30:b2:8b:34:aa:77:d9:9a:59:
34:ac:0b:aa:23:3d:72:05:95:8c:c9:10:1c:64:c6:
4f:32:ca:3e:fd:12:db:9b:71:fe:d8:ba:35:b0:76:
7f:3c:35:7f:01:7e:e3:52:3e:a1:2a:f1:73:2d:e5:
e3:a5:b6:7f:56:04:96:06:d8:09:fa:54:dc:43:1f:
80:b8:f8:6f:71:66:58:ba:d5:8c:54:e1:77:98:d1:
93:c5:48:1c:19:65:21:92:27:35:90:33:2d:de:df:
90:fd:a4:bb:ab:1f:45:79:e3:c5:f9:87:05:e4:5e:
42:7d:69:25:50:fe:62:a7:37:9b:cf:96:8a:eb:0d:
46:91:15:1b:63:20:aa:c7:c4:7c:23:66:eb:08:fa:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1F:32:4A:DD:5A:B4:BA:CB:4D:3E:47:6B:CF:58:B7:B9:DE:6F:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fR8ySt1atLrLTT5Ha89Yt7nebys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:42:e5:f7:3c:4f:23:4f:ec:6f:35:b2:3f:1a:e1:42:fe:db:
8c:dd:1b:c4:eb:6d:46:60:26:17:40:0b:49:ec:c4:69:c4:b9:
08:c6:a6:fc:10:cc:b3:05:c4:3b:04:8a:90:ae:6c:cb:3c:fe:
69:cc:5e:dd:52:a7:9e:46:95:31:11:40:a6:54:bb:3e:7a:c4:
1c:f1:e1:c6:94:f7:44:19:6e:23:b9:b1:ab:34:97:a0:b6:19:
7f:f8:b4:96:42:c8:aa:7b:25:c2:c4:fe:6b:eb:2d:03:d2:5a:
8c:d8:33:bd:12:7d:cc:a0:f0:b6:93:b2:b0:8f:95:72:3d:fa:
0e:6e:5c:a6:3b:72:ed:88:6a:a6:f4:ac:49:5b:41:d1:09:ef:
92:2c:69:5e:84:07:9e:e9:89:84:25:0a:3e:04:57:35:d8:4d:
e1:96:72:d5:9d:53:8f:f3:71:54:42:80:73:95:b1:4a:76:47:
7f:6f:e0:33:bc:a4:24:55:39:b5:64:98:aa:8c:ab:0e:58:52:
4b:d5:5a:8d:f3:e9:a7:c7:e3:62:d0:46:e6:f7:b2:ab:c4:28:
79:e3:4d:37:11:ef:0c:ae:ee:81:5e:5c:dd:aa:57:bb:fa:7b:
0d:64:a1:30:ce:ce:d8:88:c1:14:d7:7f:6d:c2:7c:50:7d:13:
d0:dd:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:50:57 2025 by rpki-client