Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fg3AxJb5VOUvPEUHkOHl_GSWTOk.roa
File: fg3AxJb5VOUvPEUHkOHl_GSWTOk.roa (raw, json)
Hash identifier: Zw692G+9oitSuCvLoJwkefGBvb8hY/KtlTMdAJ8vKXQ=
Subject key identifier: 7E:0D:C0:C4:96:F9:54:E5:2F:3C:45:07:90:E1:E5:FC:64:96:4C:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A423A417B3907BD37002F0621DF7E527
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fg3AxJb5VOUvPEUHkOHl_GSWTOk.roa
Signing time: Sun 30 Jul 2023 00:12:26 +0000
ROA not before: Sun 30 Jul 2023 00:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a4:23:a4:17:b3:90:7b:d3:70:02:f0:62:1d:f7:e5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 00:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0dc0c496f954e52f3c450790e1e5fc64964ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:80:ba:b0:5d:3b:6d:6b:60:f9:e7:47:78:
42:c2:b1:99:b9:9f:f1:7e:93:97:e6:84:28:56:b1:
89:86:f4:2c:24:9b:4a:e4:54:fc:3f:1b:bb:68:2b:
70:d3:8f:58:13:d3:de:95:0f:b6:45:78:dc:39:0f:
14:42:33:64:83:c8:9f:91:88:70:1c:5b:81:52:ad:
f5:cc:49:b5:50:1b:d1:6f:da:32:0c:c5:41:5d:db:
22:6e:f8:cb:42:ff:d4:9f:82:48:c1:80:0d:01:fd:
85:dd:96:ae:e1:1c:80:26:27:3b:fa:b1:d1:be:d8:
5d:e5:e4:7f:f2:cf:61:cd:72:5b:a6:82:88:e2:95:
6e:76:06:ff:ce:23:87:6f:59:57:b7:6c:ec:0b:85:
8c:d5:78:f6:42:7e:16:ec:f9:e4:87:76:85:1e:32:
64:aa:aa:e1:e3:d3:d1:78:e7:ab:0f:35:c1:54:66:
a7:94:8f:51:d6:4d:bd:3d:0a:0d:7b:63:a0:f6:4c:
14:99:fa:ad:ba:04:78:cf:3a:6b:0c:aa:f0:e1:a5:
88:9f:a5:03:93:d7:79:52:86:8f:d8:b4:31:a7:71:
23:7d:a7:68:2e:c9:97:b5:17:e4:d9:6e:c9:1a:05:
fc:6d:e8:7b:09:0d:08:01:f7:c2:e4:d6:41:62:79:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:C0:C4:96:F9:54:E5:2F:3C:45:07:90:E1:E5:FC:64:96:4C:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fg3AxJb5VOUvPEUHkOHl_GSWTOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:de:68:7c:17:f5:e8:72:00:fd:06:09:2e:aa:fa:ff:28:6b:
78:90:b7:4b:0e:4d:8a:5b:4d:52:08:8b:b8:68:bb:1f:7a:cb:
7f:79:5b:77:36:00:6e:9b:8f:f8:b4:a6:d5:08:6d:9a:af:09:
4f:15:5f:05:d1:46:72:38:23:d9:68:89:90:b7:98:5e:15:ce:
56:ce:e5:74:d8:ba:0b:47:65:42:99:c9:05:21:51:aa:96:78:
1f:82:79:86:3f:66:6d:22:3f:e2:2f:3e:04:8d:f9:5e:53:33:
cb:76:c1:54:e2:e8:3d:c7:87:12:60:91:23:d7:be:3e:e7:a6:
b7:8d:91:16:ef:d6:bc:01:94:24:7b:3d:e7:59:c3:ed:c5:e7:
a4:52:4e:2b:2c:79:d4:64:72:67:8b:55:98:ea:58:ac:2c:c8:
36:24:b5:cf:8d:40:39:b6:e9:23:8f:38:9c:97:57:75:d8:71:
63:d9:42:05:d8:fb:94:76:18:c2:13:49:32:df:fc:cc:92:e7:
68:06:6a:29:46:80:6b:c0:6e:cc:bd:3e:6f:f7:a4:ce:47:fe:
3c:9d:29:86:38:b4:2c:27:89:8c:92:56:39:37:a2:a4:a2:73:
9f:d7:49:6a:70:2e:44:6f:e2:25:6c:51:8c:de:42:2c:7a:87:
eb:e5:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:44 2025 by rpki-client