Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fxfmfKmcDsG2ygqjPlWKMMTTgSo.roa
File: fxfmfKmcDsG2ygqjPlWKMMTTgSo.roa (raw, json)
Hash identifier: RgwX5wRYUKC40fH4bAjEioJZKbKXgANL45wJ8CsqDAw=
Subject key identifier: 7F:17:E6:7C:A9:9C:0E:C1:B6:CA:0A:A3:3E:55:8A:30:C4:D3:81:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870484893B0A4EAE23856762BC8E99A00D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fxfmfKmcDsG2ygqjPlWKMMTTgSo.roa
Signing time: Tue 21 Mar 2023 14:13:27 +0000
ROA not before: Tue 21 Mar 2023 14:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:84:89:3b:0a:4e:ae:23:85:67:62:bc:8e:99:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 14:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f17e67ca99c0ec1b6ca0aa33e558a30c4d3812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:d4:23:f4:f7:f0:2a:57:94:42:a5:0e:96:
70:22:21:ad:5a:46:23:87:82:75:14:c2:db:85:84:
28:1d:24:ea:c2:b7:62:01:95:1f:c2:19:18:24:0b:
02:57:04:42:dd:95:ac:2f:61:c5:cc:e8:e0:14:f8:
4a:ad:53:27:e2:c1:bd:01:eb:66:78:ea:57:64:a4:
75:13:b8:1c:d5:c1:fe:61:6e:6d:f6:20:e4:97:ab:
1a:93:f9:70:91:93:a7:bc:d3:0a:00:5a:91:cf:53:
14:71:78:e1:2d:8b:d7:cc:37:a7:9c:6b:da:5e:b7:
3e:7e:56:ee:e2:ab:62:f4:c4:08:5f:89:ff:9f:38:
1f:5d:48:e0:3f:11:e2:55:46:2e:c5:e1:19:b7:f7:
d3:3d:56:ee:c9:e8:b6:6b:8e:fb:d7:ed:b5:9d:45:
d7:da:38:57:fb:3b:3e:1a:43:69:c1:d4:de:b7:91:
21:8e:d9:cf:fd:9b:cb:9b:a8:c9:ef:a5:ac:b2:4c:
3f:34:0d:d6:08:0f:8c:e6:0c:6f:f9:1b:55:4c:43:
32:dc:07:71:ce:d4:87:f0:8c:ed:de:f0:91:ed:81:
5b:55:a7:60:4a:25:e4:47:7b:96:2f:48:f7:94:3b:
01:94:b0:15:76:68:52:8d:5f:a3:16:a1:30:92:d0:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:E6:7C:A9:9C:0E:C1:B6:CA:0A:A3:3E:55:8A:30:C4:D3:81:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fxfmfKmcDsG2ygqjPlWKMMTTgSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:12:e3:60:96:84:51:71:ef:46:22:d6:26:c3:1d:7c:4f:08:
b7:52:4c:8a:13:56:55:b4:ff:a8:2b:2b:99:f5:97:df:ff:cf:
92:a3:03:c5:af:9b:f9:98:79:ff:cd:df:87:3e:4f:04:bf:fe:
48:0d:0c:ec:a3:8e:c7:63:29:84:a7:a3:e7:7d:82:fc:e5:a0:
7c:f3:49:b9:0a:55:9d:d7:91:ce:de:23:44:e2:1a:2b:3f:1a:
c9:42:87:8d:01:6a:90:77:88:61:07:50:99:7a:cb:d1:f0:bd:
52:e6:76:24:e1:d4:cc:77:e1:02:7d:77:72:31:76:b8:0b:ca:
08:fe:bd:ee:22:3d:cf:e7:14:7e:f7:cc:a4:cc:d8:43:dd:88:
14:1d:9a:b6:ad:a9:92:74:97:3a:cb:e5:29:ed:9e:91:5d:d3:
ad:03:8c:fc:26:04:f3:90:84:06:5e:8d:01:c9:99:54:5d:ba:
85:0d:6f:80:75:3d:a0:2a:5d:fa:23:20:11:70:0b:00:8e:a1:
98:f1:e4:7a:b2:e7:ed:28:c8:09:44:0a:1e:b8:f9:cd:64:d9:
f6:9d:e4:5a:86:34:59:c0:ae:cb:6c:96:4b:91:1b:82:8c:a1:
f7:d6:e4:d3:58:43:5c:ee:72:db:5f:03:3e:0f:a2:5d:17:05:
de:23:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:12 2025 by rpki-client