Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd1R-Vrem4AcQV6qOGlwq6qA0Wg.roa
File: fd1R-Vrem4AcQV6qOGlwq6qA0Wg.roa (raw, json)
Hash identifier: 08IanHMRnczw1SOQvaKIR+C3XZrfjMLK9pWHlnUZSX0=
Subject key identifier: 7D:DD:51:F9:5A:DE:9B:80:1C:41:5E:AA:38:69:70:AB:AA:80:D1:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018792FAC96C42790E7EF010ACB265DD74F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd1R-Vrem4AcQV6qOGlwq6qA0Wg.roa
Signing time: Tue 18 Apr 2023 06:08:41 +0000
ROA not before: Tue 18 Apr 2023 06:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:fa:c9:6c:42:79:0e:7e:f0:10:ac:b2:65:dd:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 18 06:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ddd51f95ade9b801c415eaa386970abaa80d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:1e:ba:d7:a1:2e:59:d8:34:d2:cf:6e:18:
26:da:3d:29:e5:2d:b4:bd:d7:69:15:52:56:0d:13:
dc:6e:52:63:d3:32:1e:db:9b:2b:01:6b:4f:04:00:
62:b0:70:92:50:de:d3:07:32:c3:5d:8b:5b:68:f3:
4e:9b:f4:88:22:75:01:1b:0c:44:85:7e:6f:6f:e0:
34:66:cd:e4:0e:df:1b:97:b9:5c:ef:c6:69:77:fa:
de:75:d8:a8:e6:2e:78:e8:00:76:8a:75:24:1a:15:
03:a7:fe:b1:7a:4c:2d:8f:71:39:9f:d4:ec:12:4d:
e2:ac:70:24:24:b0:e8:32:ab:1c:34:e6:69:61:d8:
32:10:c1:ff:86:94:aa:b3:1f:16:a8:7f:f1:e7:70:
c2:aa:04:58:f0:9a:97:2f:d5:82:30:25:31:98:49:
1b:33:62:7c:c3:2e:c4:77:5e:85:ec:02:a2:6f:33:
b8:d0:ce:20:65:25:af:de:39:55:4a:c1:04:e0:de:
b2:1f:55:01:f0:be:41:47:53:73:8e:ff:79:4b:3d:
fc:92:e8:d2:f9:b4:9f:12:8a:4b:63:cb:9e:8a:f2:
e4:96:5e:44:d7:f3:53:eb:33:33:c5:78:95:89:84:
84:4c:84:7b:de:a9:aa:4c:64:61:54:98:1b:b0:b9:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:51:F9:5A:DE:9B:80:1C:41:5E:AA:38:69:70:AB:AA:80:D1:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fd1R-Vrem4AcQV6qOGlwq6qA0Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:2e:12:57:0a:e0:fa:10:9c:72:6e:26:be:b3:36:ea:16:39:
a0:f3:32:d2:ce:b7:d3:05:63:54:f9:a0:ce:7c:b2:b0:39:ce:
74:cd:62:8a:e4:3f:7b:81:5e:8b:46:e3:11:a0:c2:25:2a:5f:
56:86:7c:35:a7:c8:5d:91:80:6e:21:3b:2c:9c:2f:f2:5d:96:
a2:7d:82:b1:05:16:e9:41:c7:f7:b5:01:75:f0:8d:89:6f:1e:
2c:b9:55:39:7e:08:55:4d:77:fe:7f:2e:75:52:d2:ea:5c:65:
64:96:1a:42:75:70:c7:b3:bd:c0:79:08:f3:14:bb:99:45:7e:
02:32:ba:02:03:03:35:9b:c4:55:dc:12:c7:b1:ec:1b:ff:62:
41:7b:ee:09:a8:4d:3c:74:4e:38:94:0d:cf:6f:58:09:f4:86:
69:3f:f8:f6:56:b3:f0:e2:7d:29:1f:df:17:8f:56:1b:62:47:
1a:1c:19:35:84:66:db:2b:12:4c:38:40:5c:c8:5c:3c:bf:ea:
24:cd:88:36:99:5e:24:31:a6:0e:ee:04:dc:c8:cb:59:54:9b:
29:16:27:e3:d8:77:ce:8f:a7:ce:ce:2d:77:fc:bd:2b:1d:9f:
83:38:5c:fb:da:be:a1:16:72:e1:25:aa:05:0b:d6:42:87:b1:
0d:c5:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:39 2025 by rpki-client