Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwYY_wXmdjRiyt8QPJCRLY2_Tq8.roa
File: fwYY_wXmdjRiyt8QPJCRLY2_Tq8.roa (raw, json)
Hash identifier: DO5xymhzlbtJE1TGBvOwqKkQOWNVfyeoEy1+8M0tAJw=
Subject key identifier: 7F:06:18:FF:05:E6:76:34:62:CA:DF:10:3C:90:91:2D:8D:BF:4E:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D765771833B4225762F22EADC20174F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwYY_wXmdjRiyt8QPJCRLY2_Tq8.roa
Signing time: Tue 08 Aug 2023 23:04:58 +0000
ROA not before: Tue 08 Aug 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:d764:e88e/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:65:77:18:33:b4:22:57:62:f2:2e:ad:c2:01:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0618ff05e6763462cadf103c90912d8dbf4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:99:57:00:0e:09:57:ba:e5:f3:74:bf:2c:
05:25:9c:45:01:aa:3e:20:d1:f7:cd:b8:93:f7:d0:
12:59:6f:fd:59:70:2f:dc:44:19:fc:80:d7:45:56:
34:a1:4d:06:ac:cb:5a:33:95:35:15:1d:b7:df:ad:
3a:35:57:f8:cf:19:52:5c:aa:19:30:56:d6:92:80:
52:9c:bb:19:f3:38:ed:d5:b7:53:65:ac:88:a3:27:
14:82:a8:2a:8a:49:ab:d4:17:cd:ed:9b:61:0c:74:
9e:9b:1d:56:ec:53:42:e9:72:10:8b:27:57:c6:f3:
12:a8:bb:ca:b5:41:7c:f4:9d:1e:04:e0:01:af:55:
38:25:4b:f7:aa:06:0c:df:aa:4a:96:6b:b8:68:4e:
74:ef:71:07:c6:ca:9d:bb:b2:98:07:cb:b6:17:ac:
f0:4f:cb:07:d2:d3:b1:e4:87:81:1e:08:c3:28:8c:
b1:38:ca:73:2d:77:05:3c:8a:be:6e:64:99:24:7b:
4b:3d:ed:54:c3:f1:f4:d1:d0:f0:0a:8c:b7:f3:0a:
5c:2a:bb:8b:9d:10:85:6e:dd:5a:b2:ea:7a:a3:92:
63:f0:be:0f:6d:81:a3:b1:c7:37:43:9a:56:6b:a1:
73:67:46:62:67:d7:c4:8d:6f:94:dc:71:63:bd:f6:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:06:18:FF:05:E6:76:34:62:CA:DF:10:3C:90:91:2D:8D:BF:4E:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fwYY_wXmdjRiyt8QPJCRLY2_Tq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:92:ff:c1:d8:84:41:26:9b:0e:05:e6:65:92:ee:63:9a:3b:
62:d7:85:65:14:7c:25:1d:33:c3:8b:a1:48:2e:c9:67:44:3b:
85:aa:d4:eb:3e:90:b0:5d:68:34:83:9e:d2:56:ff:ce:93:bd:
e0:82:dd:7e:43:47:43:9e:37:a7:e3:2f:1c:ab:ad:b1:fa:4a:
ad:05:ad:fe:3b:bf:14:2c:e0:7d:ee:13:68:33:42:84:6f:74:
f6:f5:fc:20:d0:c3:3e:5d:c5:07:43:56:07:8e:fd:80:1d:a6:
69:32:a6:9c:bb:80:61:83:10:b0:80:0d:f2:8e:56:e9:c8:a9:
1d:97:40:5b:7a:86:8f:4e:83:2d:84:ba:21:27:48:77:4b:62:
1e:ee:cd:e9:9e:4c:2f:e4:8d:54:5c:69:b1:b3:e5:43:ec:72:
99:8b:e1:fc:5a:15:67:ea:36:62:02:01:d1:41:7e:4b:da:8a:
99:1c:2a:7b:ef:4f:8d:fd:40:7c:d2:b5:3f:a6:3a:9f:16:8e:
2e:fd:40:f4:cf:c0:81:bd:5e:13:e8:79:b3:39:a8:21:b4:9e:
73:54:d1:57:a6:cf:04:bc:22:fb:67:19:df:d1:c4:82:90:fb:
de:79:f1:13:48:78:b7:9a:7f:31:a5:c0:bd:b7:0b:3c:5f:52:
80:75:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:21:55 2025 by rpki-client