Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYD9u3ERLYfO5Qs2AYwDRbw0maE.roa
File: fYD9u3ERLYfO5Qs2AYwDRbw0maE.roa (raw, json)
Hash identifier: hpoA02m0WsxAvLbpROI4QN6rwif5XpTjcYBkXiHFiUs=
Subject key identifier: 7D:80:FD:BB:71:11:2D:87:CE:E5:0B:36:01:8C:03:45:BC:34:99:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188668975D647F41CF96F5BB6C46F4ACBA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYD9u3ERLYfO5Qs2AYwDRbw0maE.roa
Signing time: Mon 29 May 2023 08:04:24 +0000
ROA not before: Mon 29 May 2023 08:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:6689:4ff3/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:89:75:d6:47:f4:1c:f9:6f:5b:b6:c4:6f:4a:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 08:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d80fdbb71112d87cee50b36018c0345bc3499a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:d4:78:ec:68:8f:fc:f0:bb:46:40:8e:13:
24:ca:27:5f:ab:a8:55:64:0f:9a:21:9c:32:ae:26:
4a:f8:41:74:b2:04:33:00:74:40:d6:9a:88:a2:00:
39:d2:f9:24:f6:77:58:ec:cf:b7:9c:b2:49:c3:66:
8f:aa:8d:1e:25:79:24:5c:e5:27:a2:62:4a:6a:ed:
37:11:a8:71:b2:8b:93:f4:1a:f8:ab:d5:f5:a5:30:
b8:25:75:7e:d4:83:f3:90:e7:ee:3a:95:11:05:49:
a9:2b:4b:e4:aa:e7:f0:6f:45:8c:f5:0f:c4:00:ab:
ef:b0:7a:1d:e7:98:99:45:b2:0f:c6:86:de:64:51:
d6:46:25:04:5a:5c:d7:a7:55:a7:37:57:6f:8f:e3:
38:45:6b:7d:c0:de:0e:c9:d4:d8:d8:49:d1:58:cf:
de:bb:a9:75:74:39:36:9c:e0:a0:9e:c5:c2:35:89:
ae:0e:30:13:76:2e:40:54:e8:b4:c3:a2:f4:2d:33:
bd:95:93:74:a2:a0:5c:59:55:d1:5e:ef:c0:98:2f:
fc:9b:c5:d3:43:b1:34:a5:01:f2:1e:23:c7:87:12:
20:02:5b:eb:7d:4d:de:49:09:be:7a:02:64:ce:50:
2e:5c:77:2c:14:7c:2d:1f:aa:72:8f:bb:0b:29:2c:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:80:FD:BB:71:11:2D:87:CE:E5:0B:36:01:8C:03:45:BC:34:99:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYD9u3ERLYfO5Qs2AYwDRbw0maE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:3b:3e:5b:6f:4d:80:bf:64:da:76:80:47:c7:c5:23:80:89:
37:e6:37:a9:15:da:08:76:fe:90:52:ec:7f:9f:83:20:d8:b5:
26:f0:61:81:88:64:71:3b:0a:e8:d6:ea:f7:cb:45:14:b4:06:
83:86:68:ab:4f:6a:97:14:87:80:6b:61:ae:c6:4e:cd:4a:2f:
93:76:17:2c:11:fd:b9:7a:27:ad:b0:60:9a:a4:dd:f2:b6:26:
f0:9e:17:97:c4:1a:26:47:5f:11:a8:e4:70:ee:95:47:dc:84:
ed:33:66:b1:e7:b2:ec:11:42:e5:8c:d9:7b:fa:af:59:d4:ba:
ee:63:86:51:f3:dc:be:58:3a:c7:06:0d:c1:1d:cf:28:3d:2d:
01:59:36:14:1b:45:20:3e:a9:6b:0f:a1:db:c2:36:73:f8:17:
5c:0a:b2:48:07:b6:06:6a:1c:b2:b1:01:27:ed:f8:83:27:0e:
77:7d:71:74:93:2c:15:2d:9a:ab:18:b9:61:7c:8a:b8:16:87:
11:91:4e:8d:cb:01:b8:91:23:4f:c1:8e:1e:02:b7:42:13:e4:
18:33:c5:11:e2:f6:41:b3:97:79:fe:d4:6c:6b:8c:be:15:21:
71:3c:b2:e9:ca:25:5e:4c:15:50:15:07:2d:7f:2b:b7:f6:3e:
22:13:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:56:21 2025 by rpki-client