Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmDfjorYzwjCtffkiPtxtDo7EOA.roa
File: fmDfjorYzwjCtffkiPtxtDo7EOA.roa (raw, json)
Hash identifier: lMnuYkEiZa2d1mGZSmUXGpNFwqmc1smPRKS0tFfBEZc=
Subject key identifier: 7E:60:DF:8E:8A:D8:CF:08:C2:B5:F7:E4:88:FB:71:B4:3A:3B:10:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CF182CC5D52F165260E725F9D30D919B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmDfjorYzwjCtffkiPtxtDo7EOA.roa
Signing time: Sat 11 Mar 2023 05:15:13 +0000
ROA not before: Sat 11 Mar 2023 05:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:18:2c:c5:d5:2f:16:52:60:e7:25:f9:d3:0d:91:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 05:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e60df8e8ad8cf08c2b5f7e488fb71b43a3b10e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:38:a2:67:a2:14:45:05:dd:12:79:2c:3a:
0c:04:95:cb:ff:05:29:df:e4:1d:79:31:08:21:97:
84:48:2d:6e:99:73:44:17:8a:97:cb:6d:6e:34:f2:
b5:84:cc:9b:2f:48:d7:86:e5:2f:7e:47:80:fb:92:
4c:78:f5:3d:7c:72:a6:d0:35:df:13:f1:9f:85:07:
51:cc:b1:58:2c:71:33:39:d1:4b:ad:b1:03:5b:e0:
98:f3:ff:8c:14:08:ca:3c:8e:1e:74:da:86:f6:5b:
18:d2:71:b5:ed:76:58:87:f6:5b:1c:60:7f:f4:a2:
2b:8e:74:f2:36:7c:b6:de:86:0f:85:c0:1b:8a:51:
85:90:f3:b8:d7:c6:53:75:d4:38:75:bd:d4:01:f8:
ce:3e:03:7c:30:d5:77:b3:85:46:f0:30:f6:25:f8:
16:1b:05:bf:51:93:dc:de:8b:80:7e:09:b6:b6:64:
06:76:21:81:5e:ab:f9:35:a8:00:49:d0:ad:d3:5a:
15:5f:a2:07:be:ff:09:18:4b:2c:5e:c0:2e:fc:e7:
b3:89:e4:8e:41:a0:ba:bc:81:8f:78:8a:b5:f1:0a:
5b:25:9e:dd:e4:2a:ac:bf:15:a8:79:fb:aa:8e:5d:
5e:46:96:13:7d:c7:38:36:0b:a7:1f:71:93:ec:83:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:DF:8E:8A:D8:CF:08:C2:B5:F7:E4:88:FB:71:B4:3A:3B:10:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmDfjorYzwjCtffkiPtxtDo7EOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:77:b5:c8:bf:a6:f8:6a:fe:9f:27:f6:7e:85:c2:3d:76:03:
ac:a3:06:73:cd:76:5f:c0:97:d7:d7:a3:94:9a:1c:81:52:fa:
bb:98:e4:0f:c9:3e:1f:06:96:02:b3:66:ff:d1:23:54:76:cf:
fb:17:7b:35:4e:5a:57:4d:21:b9:7f:72:a0:09:3b:6b:0c:76:
51:2b:3d:24:6b:1a:1d:09:69:83:20:cd:15:80:08:33:1b:9c:
bb:fc:86:e0:41:48:74:62:79:73:c1:b7:ad:f0:a7:74:8f:77:
69:96:2e:d4:0c:c6:4c:6f:28:3e:72:da:d2:de:9a:63:64:bc:
c0:39:84:94:7c:87:ae:3c:41:6e:e4:ae:8d:81:43:29:8e:ed:
16:c8:a6:4a:8c:1a:d8:b9:81:43:1d:ac:db:4e:6f:02:40:7f:
de:45:ff:3f:79:fd:bc:15:31:e2:33:05:0b:d6:ae:5f:52:f1:
49:74:b2:d1:c4:7a:cd:ac:9d:36:9c:db:47:11:dc:5e:e9:2f:
1a:94:92:df:0f:5e:ed:87:c3:a8:54:fd:c7:f5:77:58:37:68:
72:3b:e9:45:10:ab:7f:48:b2:c6:de:d2:ce:29:13:dd:09:96:
1a:71:d8:b6:6c:a5:fb:69:c0:6f:ad:52:49:a8:ea:c5:c8:cd:
17:88:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:49:09 2025 by rpki-client