Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmea2LHIVKsXRmvwbpiO9Hyc7P4.roa
File: fmea2LHIVKsXRmvwbpiO9Hyc7P4.roa (raw, json)
Hash identifier: ldpQTSPux72vZCImKWlymQFbVhGD50OfuF7n8Fllijg=
Subject key identifier: 7E:67:9A:D8:B1:C8:54:AB:17:46:6B:F0:6E:98:8E:F4:7C:9C:EC:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B3CBA93932196DB4593EE444CA1F049F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmea2LHIVKsXRmvwbpiO9Hyc7P4.roa
Signing time: Mon 24 Apr 2023 15:04:41 +0000
ROA not before: Mon 24 Apr 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:b3cb:462b/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:cb:a9:39:32:19:6d:b4:59:3e:e4:44:ca:1f:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e679ad8b1c854ab17466bf06e988ef47c9cecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:ac:1e:84:09:78:25:9f:e5:bc:c1:6c:2c:
78:d3:d7:6a:76:b3:0c:dc:3b:29:2b:56:16:ef:08:
34:35:2c:f8:ac:b3:a7:28:de:ba:0f:6b:56:85:41:
a7:6d:f3:2b:2e:54:82:59:49:9c:65:98:f5:cf:d7:
ad:b0:df:cd:4a:e6:b3:33:88:af:9f:47:39:0a:ea:
ad:48:fe:01:92:4d:25:91:cf:a7:16:3a:4e:8c:0d:
64:b1:cc:ce:05:aa:13:50:0f:72:0e:c9:25:fe:94:
44:6a:3e:33:29:ef:b5:18:a5:66:3e:e7:28:53:4b:
0b:eb:41:56:ef:a6:a1:da:db:16:01:68:13:3f:e9:
17:00:d2:99:b8:c0:37:0d:cd:d2:91:7a:60:91:7b:
ee:2a:c0:06:4f:ae:c6:22:74:20:42:d7:de:dc:5c:
08:bf:43:5a:4c:05:a5:4a:8e:30:7a:5d:2d:18:83:
16:f3:85:19:dd:d4:bb:6a:0b:75:da:37:a5:74:9d:
16:3d:b6:05:58:35:42:a0:23:ea:9f:2f:22:5d:f2:
d7:95:e6:48:30:0e:63:f2:0d:5a:57:f9:9a:fc:5e:
1d:70:69:ad:c9:0f:94:fb:69:6e:da:60:7a:47:4b:
e9:9c:5d:ca:89:15:09:72:7e:38:eb:a9:af:8c:9d:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:67:9A:D8:B1:C8:54:AB:17:46:6B:F0:6E:98:8E:F4:7C:9C:EC:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmea2LHIVKsXRmvwbpiO9Hyc7P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:31:b1:43:d0:71:ce:fc:1b:84:a6:8f:1d:d8:41:1e:be:5a:
83:c7:9a:f5:bf:36:a9:ba:a3:6c:9c:de:c9:3a:9b:4b:4e:d0:
fd:1a:95:64:55:58:fe:9e:1a:30:28:ae:10:a8:97:26:b8:55:
a9:95:94:c3:76:7b:f3:ae:31:ac:f6:74:4c:01:81:2b:1e:4e:
69:98:4f:02:11:97:07:05:c0:7e:50:03:fb:42:2f:b7:83:1f:
93:2a:d1:ce:72:7b:07:bb:8c:dc:17:20:18:70:cb:82:84:1d:
e7:f1:8f:7e:7c:ab:d6:03:d5:61:6b:fb:5e:2b:db:27:d5:3f:
02:8a:29:ec:39:5a:8f:c0:d6:1c:3a:f6:28:b7:2e:5b:be:62:
9a:ba:d9:c5:da:b1:9e:c0:98:40:ae:42:3e:7e:87:91:4e:77:
a5:31:4f:1b:8e:89:c3:4d:7a:a5:b9:bf:dd:4b:54:c8:f5:c2:
76:68:2e:59:d6:9f:bc:be:71:b8:01:64:51:74:da:47:5d:b4:
4e:1f:a2:b1:f6:f7:87:96:b3:f8:18:e8:c0:8c:b9:e2:ee:21:
85:06:01:b5:22:31:6b:1e:36:e2:4b:03:bb:e8:c2:90:ae:c4:
bf:df:6f:9d:b6:bd:76:03:40:74:46:4e:f4:a4:92:10:36:52:
cc:ca:b9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:18 2025 by rpki-client