Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/flB3NqSaqQp4Kcnh6biG91D5mqg.roa
File: flB3NqSaqQp4Kcnh6biG91D5mqg.roa (raw, json)
Hash identifier: /eFKH9rIIn9SIGml0YSs9CxVkuip4P2q6Ns2EeFdcq0=
Subject key identifier: 7E:50:77:36:A4:9A:A9:0A:78:29:C9:E1:E9:B8:86:F7:50:F9:9A:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0F6F44CF56B57E8ADA6C0157E260EC85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/flB3NqSaqQp4Kcnh6biG91D5mqg.roa
Signing time: Sat 19 Aug 2023 20:14:24 +0000
ROA not before: Sat 19 Aug 2023 20:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:6f:44:cf:56:b5:7e:8a:da:6c:01:57:e2:60:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 20:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e507736a49aa90a7829c9e1e9b886f750f99aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:f0:4b:bb:34:72:bf:00:38:cc:de:76:64:
4c:5a:06:10:05:07:b8:72:2f:38:7b:88:f0:eb:dc:
06:ab:e3:a7:b1:25:33:3b:6e:ee:67:b2:52:2a:46:
7b:29:aa:95:97:25:2f:fa:67:b2:4b:ef:ad:1c:10:
02:40:f1:d8:95:e4:f1:a2:4c:9a:91:d8:37:ba:41:
e3:18:81:2d:a9:b9:ee:b9:17:a5:6e:e4:10:fa:df:
54:e2:2c:ce:fe:58:98:82:ff:ee:19:19:41:0b:3f:
fa:5d:7e:b2:1b:40:9a:56:a9:30:48:b6:e6:6e:c7:
c4:ea:e1:d5:0d:37:f3:2e:53:3c:fd:8a:7b:ec:78:
3a:ed:ed:de:1d:bf:3c:4c:de:e8:18:31:bf:23:ba:
a2:e4:ce:ad:bd:5d:be:88:fb:ac:91:f4:1e:a7:3d:
97:e8:99:87:b6:93:b7:8f:5d:f9:87:7e:e3:ac:37:
9e:10:ea:46:37:2b:bd:20:69:40:87:4e:cf:4b:d7:
21:6e:7d:6d:df:4e:50:9d:2b:ee:53:80:3d:30:2e:
cf:fe:98:d4:f6:7f:f3:e2:ea:98:91:21:b3:5e:a7:
0e:25:4f:73:a6:1e:0c:cd:29:0a:9e:89:1c:7e:51:
f0:ab:33:2a:15:fe:94:1d:93:e3:7f:ae:39:21:ba:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:77:36:A4:9A:A9:0A:78:29:C9:E1:E9:B8:86:F7:50:F9:9A:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/flB3NqSaqQp4Kcnh6biG91D5mqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:50:03:75:a4:68:75:f8:6d:1f:c1:d1:b4:ef:62:44:4f:75:
c1:cc:d1:93:27:b0:30:a3:8c:22:a1:e5:9d:ad:78:69:54:9a:
a1:a5:2b:8b:82:9e:1e:ec:13:52:72:5b:83:1e:b8:c3:b5:79:
fb:cf:56:48:0b:cc:13:24:f8:4c:44:b2:f8:cb:4a:ac:86:3c:
13:3d:86:8e:60:3d:0a:b8:52:89:7c:5d:cd:57:d4:b9:65:aa:
12:ca:4e:03:fa:27:31:db:0e:7a:f8:97:61:93:6b:69:c9:99:
53:11:dd:35:cb:58:3c:52:d7:6a:e1:cc:b3:43:43:ad:ea:1c:
90:a3:57:e3:0b:40:69:1a:a9:1e:21:3b:35:00:88:58:ce:b5:
d0:32:25:f7:29:f9:55:67:a8:d6:81:aa:e5:67:49:85:eb:73:
ee:d1:58:75:fb:66:49:15:e4:37:75:61:85:10:7f:eb:d2:a8:
be:c4:54:1b:f4:bc:23:ee:ef:15:35:01:bb:2c:84:45:a8:66:
90:5f:2e:81:9b:1d:b2:02:7d:b7:a0:a9:a0:d6:d5:16:0f:17:
b3:b3:5a:43:25:9c:0b:5d:27:48:0a:17:7f:b3:26:70:58:27:
20:bc:9a:58:f3:f1:1a:57:cb:a0:91:1e:55:79:ee:80:d4:ca:
22:e3:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:57 2025 by rpki-client