Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVBgrTGNZl_p6kVTy51nbeNn9vQ.roa
File: fVBgrTGNZl_p6kVTy51nbeNn9vQ.roa (raw, json)
Hash identifier: tcHRFBZGRVymjBxEhNzHBtRRypWkDe31rd2pz9YTRCY=
Subject key identifier: 7D:50:60:AD:31:8D:66:5F:E9:EA:45:53:CB:9D:67:6D:E3:67:F6:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CF7B8EB255504FB5FBA181626C90C8CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVBgrTGNZl_p6kVTy51nbeNn9vQ.roa
Signing time: Sun 18 Jun 2023 17:09:21 +0000
ROA not before: Sun 18 Jun 2023 17:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:7b:8e:b2:55:50:4f:b5:fb:a1:81:62:6c:90:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 17:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d5060ad318d665fe9ea4553cb9d676de367f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:fb:50:3a:9d:ff:db:8b:a2:c3:13:cb:ca:
5f:f2:d5:9e:28:be:48:c2:08:59:dd:2c:b8:2c:4c:
0a:a2:59:fb:bb:06:db:e2:7f:c3:91:62:d9:3b:b5:
ef:12:58:60:a4:95:e4:4c:83:1a:ac:62:eb:e6:f1:
cd:7f:46:9e:d6:fe:83:8c:61:81:43:26:77:1f:13:
e5:e8:6d:db:80:18:45:6a:4c:64:2e:dc:c4:4e:2d:
c3:a0:aa:f9:e4:f0:f8:f0:68:23:32:cc:2d:06:42:
06:21:d0:44:fd:db:5b:7e:45:16:3c:99:42:0d:61:
44:e1:a6:59:d5:86:5c:c8:5b:a7:75:1c:51:c1:e2:
fd:17:95:c7:20:45:5f:38:2e:a9:a0:15:23:fe:ac:
76:0f:e9:c8:55:49:82:35:a1:cf:b1:f9:c7:f2:f0:
2a:98:f7:91:1b:63:24:70:cb:a5:3a:52:6b:57:9a:
db:9d:eb:09:e1:2e:5a:da:07:0d:cd:f3:6a:9f:11:
5f:41:05:89:59:7a:af:d2:28:2a:8a:e9:f8:81:5c:
45:1a:03:80:e8:0a:e8:71:3a:21:83:fc:6f:86:c4:
1b:dd:52:36:e5:01:86:0d:6a:76:eb:e0:e9:1b:10:
78:6b:74:5a:d9:56:ac:f0:61:d9:4a:9b:76:71:33:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:60:AD:31:8D:66:5F:E9:EA:45:53:CB:9D:67:6D:E3:67:F6:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVBgrTGNZl_p6kVTy51nbeNn9vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fa:88:7d:0f:f8:e3:f5:c7:f1:f4:fc:80:30:f9:15:94:b7:
ea:7a:d8:f4:7c:ec:b3:55:6b:e2:a4:ec:0d:1a:25:5a:17:f0:
d6:16:fb:09:1a:fa:aa:ea:67:8e:14:4f:8c:d4:cf:61:95:35:
74:6e:a2:8e:7f:bb:bc:29:15:ae:7c:39:13:78:58:d0:cb:26:
1e:8a:e2:17:d9:6c:33:27:5b:d4:1c:c0:cd:fc:16:35:22:05:
6e:3a:16:98:05:06:5b:35:22:65:44:0d:d1:4b:d1:f0:6b:36:
bc:d9:1e:97:54:a8:ac:f4:3c:04:7c:2f:ef:11:44:87:4a:92:
2c:1d:54:5a:22:77:57:94:0f:6b:5e:3f:50:b4:31:4b:67:8b:
fc:50:f4:38:9d:2c:d1:36:ba:ea:58:71:36:5b:76:2b:4c:97:
5d:a2:50:ba:a6:23:a0:83:6e:79:ae:27:73:af:da:9a:4c:40:
5c:a1:d5:65:39:d3:42:c1:8b:83:bb:7c:bd:0b:cd:30:ea:ac:
c5:a2:5a:05:26:f2:a7:36:9b:de:56:d0:c4:6f:ca:1c:f5:4d:
9d:c8:32:dc:b8:dc:00:35:42:54:3f:d8:78:dc:0c:87:02:5a:
0b:1f:cc:6b:30:fb:fe:05:4d:5d:07:96:46:12:9c:ac:00:73:
70:b1:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:31:00 2025 by rpki-client