Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fgrlh4nntc9IzL-vJhFupFntIA0.roa
File: fgrlh4nntc9IzL-vJhFupFntIA0.roa (raw, json)
Hash identifier: ouEGtiUpJiB4tA/blolDig7OKeNXsS3wK1/vtz6E1+4=
Subject key identifier: 7E:0A:E5:87:89:E7:B5:CF:48:CC:BF:AF:26:11:6E:A4:59:ED:20:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FE79D563301DC7738A66EB61FE2E1D6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fgrlh4nntc9IzL-vJhFupFntIA0.roa
Signing time: Wed 16 Aug 2023 13:12:24 +0000
ROA not before: Wed 16 Aug 2023 13:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:79:d5:63:30:1d:c7:73:8a:66:eb:61:fe:2e:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 13:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0ae58789e7b5cf48ccbfaf26116ea459ed200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:85:2e:fa:31:43:d7:15:ed:28:9c:38:96:
bd:9c:3f:dc:5f:7c:de:e7:14:08:c0:db:63:6d:46:
d4:14:9f:d2:25:d1:a8:8e:c4:b9:cc:b2:cb:b3:27:
ba:71:8f:4e:35:ac:0d:df:ad:4b:b5:79:1b:1f:c7:
b8:16:15:9c:85:e6:0b:68:ef:7e:cf:30:37:02:3b:
c0:e1:78:3e:02:d7:f3:44:72:36:dd:45:6e:74:15:
36:9b:61:8d:f3:33:43:bb:fe:1b:bf:b2:27:04:c1:
75:14:d0:ee:57:c6:e7:74:ba:2b:ba:01:10:ea:7e:
bd:4d:35:c8:09:42:e6:95:dd:aa:34:43:dc:28:75:
06:b4:65:b0:58:61:69:f5:2b:9b:3f:18:6f:68:b5:
60:c7:cc:d7:bc:c3:39:24:bc:6c:9a:2c:bf:c4:2a:
ea:ed:6e:00:20:f4:b1:5f:88:63:98:21:5c:f8:40:
fe:73:9b:6b:1c:5f:b6:eb:03:db:ae:6b:07:9f:b6:
52:02:59:b5:1e:75:92:d5:c2:1b:44:5d:d2:bc:ce:
ba:df:c8:9c:69:3e:3e:b9:60:e8:bb:aa:a4:ff:78:
bb:79:0e:95:46:df:34:c1:dc:18:be:ce:4b:db:3c:
5d:cf:fe:1e:69:d8:e7:07:8b:8e:e8:49:51:d8:e0:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:E5:87:89:E7:B5:CF:48:CC:BF:AF:26:11:6E:A4:59:ED:20:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fgrlh4nntc9IzL-vJhFupFntIA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:da:a7:c5:f8:43:6b:2b:ea:2b:2d:d7:d7:5c:22:7f:1d:6c:
5e:48:15:f6:a5:96:ba:68:cc:68:ba:5d:f6:25:f6:d0:f8:91:
1d:d8:2a:1e:02:f6:b8:6c:40:81:93:50:2d:e0:32:a9:fe:e1:
0c:b2:c5:b8:75:ae:eb:11:69:7d:07:48:bf:82:eb:67:40:4a:
5f:3f:e0:5d:ba:ab:4a:a2:aa:69:06:99:e5:25:63:19:3c:44:
78:a4:88:71:aa:fc:e8:29:f5:69:63:ed:1c:58:ae:1b:0e:1b:
80:a8:09:eb:bf:0d:31:83:dc:43:f3:a8:0f:d8:23:76:cc:95:
71:b7:c2:21:fc:44:79:c6:bf:97:3f:4c:ce:92:d7:0a:89:3e:
31:b3:da:7b:0d:73:a1:e5:80:d5:33:8c:30:86:65:54:5f:ae:
1f:54:cb:a8:58:6a:a0:ee:ad:aa:bf:6b:03:c4:43:8b:03:a0:
9f:e8:7c:cc:fb:f4:86:77:ce:8b:cb:94:6e:c7:de:cc:7b:35:
8f:67:8c:0c:2a:cf:bd:01:28:a8:86:51:ec:a8:b6:4d:f3:e3:
18:76:c9:6c:e4:a9:76:c2:13:fd:0f:2e:96:93:0d:50:8c:99:
df:88:c5:d2:84:64:bf:4d:46:23:26:5e:c3:86:df:75:27:17:
20:f6:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:58 2025 by rpki-client