Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvC3vF38XLhedMq7L9tfp9jUZUw.roa
File: fvC3vF38XLhedMq7L9tfp9jUZUw.roa (raw, json)
Hash identifier: IXN/DMWeJy3MTDruNUp6fJ6O/J6sYr7WiahjbvLPPbg=
Subject key identifier: 7E:F0:B7:BC:5D:FC:5C:B8:5E:74:CA:BB:2F:DB:5F:A7:D8:D4:65:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186706E3A0692DBFE81838A394754CDA43A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvC3vF38XLhedMq7L9tfp9jUZUw.roa
Signing time: Mon 20 Feb 2023 20:05:17 +0000
ROA not before: Mon 20 Feb 2023 20:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:706d:4d53/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:6e:3a:06:92:db:fe:81:83:8a:39:47:54:cd:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 20:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ef0b7bc5dfc5cb85e74cabb2fdb5fa7d8d4654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:83:33:42:55:3a:53:6f:25:33:0f:d0:c2:
9c:9b:df:4d:75:46:94:cb:cb:42:e0:bf:51:a2:3d:
c2:8e:fe:ab:3c:43:48:3a:dd:fd:cb:7d:73:10:8f:
01:38:08:0a:a9:1e:41:45:49:a4:05:99:86:a2:9f:
f2:92:9a:15:17:f1:6b:4b:1a:f0:01:61:41:df:e2:
15:5b:78:ff:59:ed:39:05:1f:f9:4d:c7:33:04:33:
06:0a:60:ed:2a:c2:63:78:f9:8c:31:1b:76:68:1c:
fb:1f:07:38:ce:6b:c7:ce:52:b6:3b:80:41:08:23:
29:8c:86:d8:05:a4:65:ee:43:76:bf:b9:9a:37:b8:
4d:0d:72:0f:02:6d:7e:2a:6d:b9:f6:21:e2:d2:c4:
95:56:ed:f9:c8:c9:b3:75:5a:1b:7c:46:8f:97:c4:
44:4d:cb:7a:53:49:7e:b1:d4:b0:10:6b:dc:c1:b0:
71:7d:79:87:46:fb:54:de:b1:7d:16:83:03:29:0a:
5e:75:79:bc:b8:4a:7c:b0:a2:a1:c8:b4:5e:aa:0e:
c8:10:6a:d9:1d:e5:d0:bc:a2:d4:41:be:32:79:58:
08:9f:cd:db:15:3c:c4:b0:b7:b4:a9:68:cf:14:a2:
c7:91:ee:28:38:ff:74:21:d1:4b:9d:a0:66:77:d0:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:B7:BC:5D:FC:5C:B8:5E:74:CA:BB:2F:DB:5F:A7:D8:D4:65:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvC3vF38XLhedMq7L9tfp9jUZUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:5f:1b:6a:0b:7b:2e:c5:18:24:71:8e:2f:6d:26:b3:d2:47:
ca:09:0a:a7:a1:58:83:57:1d:77:cf:61:a6:69:40:fe:0d:f8:
61:d8:32:4b:d9:36:a8:43:c5:87:11:36:6b:02:b2:75:6e:db:
05:40:c3:d3:17:cf:31:e0:11:31:db:79:45:fb:b4:9c:e9:88:
ae:78:55:70:65:9c:d9:36:04:91:d9:69:1a:fe:18:0b:40:ea:
e8:57:d1:98:72:65:22:7a:14:fc:9d:a9:93:c9:6c:b7:17:4a:
69:9b:a7:07:aa:a0:2f:5e:7f:6a:b9:86:16:8c:7a:88:88:c5:
d0:a9:45:5d:4a:5e:83:40:78:7a:2f:3a:c5:62:10:b8:10:82:
e8:9f:ed:dd:91:42:a5:46:c5:18:21:fa:37:bc:75:87:a7:3b:
31:44:f7:e4:6f:03:aa:98:51:84:ed:55:b3:85:b5:24:e2:ce:
c1:41:4c:4b:47:6e:60:c8:af:63:1a:10:11:df:d4:7c:cb:69:
ed:43:6d:01:12:ab:e3:1f:59:83:d9:17:f6:9a:01:b0:df:d0:
ee:59:7f:ae:fd:7e:b9:0a:50:9e:40:e4:8d:ed:09:72:0c:5d:
f8:83:03:dd:aa:86:df:1c:fa:fb:50:19:23:9d:fc:4f:65:fa:
94:7c:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:16 2025 by rpki-client