Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fZ_3EV-_BwgLtfDvQW-jgsUaY6M.roa
File: fZ_3EV-_BwgLtfDvQW-jgsUaY6M.roa (raw, json)
Hash identifier: YLUu7rD1tLnxp5TpOUOev+FAAM2SnPGz1hiXsFXvuLY=
Subject key identifier: 7D:9F:F7:11:5F:BF:07:08:0B:B5:F0:EF:41:6F:A3:82:C5:1A:63:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E372C81490B5A1A41508B3ADF17DD9F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fZ_3EV-_BwgLtfDvQW-jgsUaY6M.roa
Signing time: Wed 03 May 2023 21:09:23 +0000
ROA not before: Wed 03 May 2023 21:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:72:c8:14:90:b5:a1:a4:15:08:b3:ad:f1:7d:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 21:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d9ff7115fbf07080bb5f0ef416fa382c51a63a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:02:8e:15:78:6d:a8:bb:4b:d0:62:86:9c:
b2:8e:d0:86:69:a1:b5:22:93:19:27:9e:d6:0e:3f:
73:d5:c2:62:c1:a6:0a:fa:0b:25:52:5a:f2:ba:c4:
7c:b8:b2:12:0e:f3:d6:0e:57:88:b4:44:40:d5:64:
3c:aa:12:7e:c0:bb:ec:0c:00:f3:ac:da:6e:8f:08:
7f:08:11:f8:ad:02:98:fc:e8:3c:aa:a6:db:53:85:
ea:09:d8:d3:f6:1d:39:fa:1c:ec:25:d0:8f:86:bd:
dc:7f:4e:bf:ce:b5:64:2a:c1:f7:16:7b:26:5c:d4:
78:2e:95:fb:fa:78:8f:b6:6b:65:92:0d:95:0d:60:
ee:2b:00:7c:92:4a:cc:e4:5e:5c:bb:53:9c:a8:33:
83:56:f6:2a:28:49:c9:6c:df:90:b6:2e:a2:87:c4:
53:d3:ba:77:f0:7d:96:ed:91:c6:a9:dc:ff:7d:ab:
0d:82:97:70:bf:e5:b3:4d:f5:54:2b:78:b2:92:99:
d0:fc:6e:30:df:97:55:2b:48:2c:d8:22:fe:6d:d2:
48:31:0b:f9:48:db:c6:6d:3c:fe:d1:66:74:db:8c:
63:11:1f:51:fd:7a:a4:0e:49:c1:df:61:4c:05:66:
14:5d:a1:39:67:c7:2d:a5:4d:90:46:31:fe:5c:30:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:F7:11:5F:BF:07:08:0B:B5:F0:EF:41:6F:A3:82:C5:1A:63:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fZ_3EV-_BwgLtfDvQW-jgsUaY6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f1:24:c2:b8:43:14:ad:f1:84:3b:7d:a6:56:3a:96:b3:9f:
af:65:de:ce:2e:36:fe:4b:14:ac:3d:77:51:44:ed:fe:ec:31:
46:22:36:56:5d:52:04:b8:c4:3c:47:33:a6:02:34:3c:e9:ac:
fe:42:7e:63:5f:4a:12:66:62:6d:89:a6:f1:53:b6:6b:0f:d3:
d1:eb:72:98:dd:cd:48:dd:1c:82:05:0a:a6:b3:89:08:0b:0f:
29:cb:4f:eb:96:fe:ec:31:8a:07:b7:c1:7d:52:2d:b0:2f:45:
16:e7:c4:fc:1b:fe:32:a2:0c:64:75:eb:53:fd:24:ae:6d:5a:
f7:3c:40:91:49:0d:79:1b:90:c3:0e:ef:53:09:4c:29:94:db:
0f:30:2a:65:3a:66:c0:58:02:7d:15:92:90:fd:32:e9:01:49:
9e:b1:b1:12:cc:f8:61:25:03:c1:d3:0f:0c:f5:52:bc:a5:b7:
cd:ef:0d:92:a9:cd:ab:78:ce:1b:ea:fc:82:8b:a2:35:d4:55:
94:0d:10:37:0f:a3:7f:87:50:4f:e7:a0:a5:eb:56:41:26:40:
5e:e0:59:5b:30:cf:43:2c:d5:42:3a:25:79:44:c8:79:bc:3d:
69:ee:11:88:a2:6b:10:b1:41:e2:8a:7e:31:3a:16:4b:01:9d:
23:39:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:22:18 2025 by rpki-client