Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fih4YpDUTRFi9F3TyLbkN2w5gms.roa
File: fih4YpDUTRFi9F3TyLbkN2w5gms.roa (raw, json)
Hash identifier: rJEfqXW0zT67VZcX7/7kMs2aaqI0Uah6LHCDNqLe7Bo=
Subject key identifier: 7E:28:78:62:90:D4:4D:11:62:F4:5D:D3:C8:B6:E4:37:6C:39:82:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D4D98237DFFCC7200C30B0F1744F6879
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fih4YpDUTRFi9F3TyLbkN2w5gms.roa
Signing time: Mon 19 Jun 2023 18:10:04 +0000
ROA not before: Mon 19 Jun 2023 18:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:d9:82:37:df:fc:c7:20:0c:30:b0:f1:74:4f:68:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 18:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e28786290d44d1162f45dd3c8b6e4376c39826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:42:90:23:ce:d1:3e:b8:8c:7b:29:59:95:
aa:ff:67:60:93:13:69:7e:63:e0:ea:14:20:64:16:
4f:0b:44:3b:21:47:00:22:9a:44:d5:c8:ea:30:d7:
a2:59:2f:aa:85:93:40:7c:81:17:c0:a7:8d:93:6c:
c5:0d:52:04:4c:6a:ca:7e:94:e3:bc:fe:a8:a8:c5:
b6:9e:ae:78:f9:c9:ae:c1:48:49:71:96:48:96:95:
b2:cc:71:7f:e5:a1:37:26:4e:b4:bb:dd:b1:aa:5a:
20:a5:d6:f0:8b:93:b9:f9:58:86:84:22:27:2d:98:
ae:87:cc:c1:31:b3:04:19:42:06:a4:25:b2:1d:10:
98:8d:39:60:b3:d4:d7:23:38:5b:a3:c5:40:48:24:
e7:af:17:e2:1d:27:b6:59:f7:24:f9:f6:0b:2b:4a:
2a:78:b3:90:d1:b4:fc:6f:a8:3e:1f:24:68:15:f4:
0b:ba:d3:75:57:df:e8:3d:0b:b7:04:16:45:55:8e:
2a:b8:ba:cf:c5:8b:39:a8:ef:b7:72:8c:89:d5:30:
44:cd:09:fa:c0:7a:57:27:b4:6b:09:d4:f1:4f:27:
d4:d4:c5:d6:b6:f4:bc:82:39:43:90:aa:3d:0d:41:
cb:14:2b:ae:c0:e9:ee:3e:24:64:ae:c5:e6:45:9e:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:78:62:90:D4:4D:11:62:F4:5D:D3:C8:B6:E4:37:6C:39:82:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fih4YpDUTRFi9F3TyLbkN2w5gms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:01:39:24:d5:cc:99:1b:99:0a:8b:16:c7:31:94:0b:02:b0:
5d:83:f0:d0:bb:c2:4b:b9:9a:64:a2:d9:a4:a8:60:33:11:dd:
18:bd:be:e1:c6:1a:1e:05:4e:b9:91:06:90:cd:1a:55:d6:a7:
cd:ab:61:8d:a1:4b:3b:9a:a5:0f:b2:83:68:ff:f7:1f:de:e6:
f9:bd:e0:61:0a:13:91:cf:d4:b5:cc:4f:72:01:08:7e:16:00:
29:53:ba:a8:0a:f3:e3:58:13:41:aa:93:0d:29:e3:34:c0:a2:
7a:53:18:4d:e9:c3:c3:6d:4d:5a:a1:62:b6:da:5f:9e:56:3a:
98:3a:a3:f2:11:b1:35:99:7e:fb:87:39:2f:be:60:68:4e:c9:
a9:8d:5e:9d:83:ed:b8:a2:20:6a:4e:9c:a9:62:a4:77:67:b2:
33:98:5c:42:e7:c9:fb:97:76:42:8e:6f:4f:7e:98:54:ac:d2:
b6:b7:9e:39:50:d0:92:d4:cd:19:a3:db:fb:40:35:44:5a:56:
d5:8c:9f:4f:18:72:53:03:17:5e:d2:04:0d:d8:66:11:6a:ac:
e8:f0:85:5e:a5:2d:95:a1:22:f9:f1:48:b1:3d:df:45:f5:d4:
ec:39:1a:18:04:e9:f4:ff:9d:ee:6b:b8:fa:c7:43:1f:48:ec:
a7:ec:d6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:15:28 2025 by rpki-client