Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FbfrazZYyJ2hVCePOkfkI4Qrto8.roa
File: FbfrazZYyJ2hVCePOkfkI4Qrto8.roa (raw, json)
Hash identifier: 7P2GdaFedvuBxh9xObRdLeKLQ0lbnfSsXA0Z9N7MCf0=
Subject key identifier: 15:B7:EB:6B:36:58:C8:9D:A1:54:27:8F:3A:47:E4:23:84:2B:B6:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867BD7ACCAE01C5B772CABAB88355639EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FbfrazZYyJ2hVCePOkfkI4Qrto8.roa
Signing time: Thu 23 Feb 2023 01:16:17 +0000
ROA not before: Thu 23 Feb 2023 01:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7b:d7:ac:ca:e0:1c:5b:77:2c:ab:ab:88:35:56:39:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 01:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15b7eb6b3658c89da154278f3a47e423842bb68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:22:ca:47:60:54:d7:f9:46:56:35:ea:85:
0d:ed:a7:0c:df:e3:45:47:fe:86:fd:2b:6e:63:a4:
c3:c4:b9:3a:3f:85:5b:9c:fc:2d:e8:cf:6c:38:d0:
96:65:2a:33:5c:d4:04:30:32:fd:45:bf:0b:fa:ae:
f7:50:63:1f:a1:e3:7f:a2:bd:60:12:59:72:65:76:
00:16:e1:6e:52:7c:13:34:6a:b0:3f:e4:ab:11:f1:
73:b0:f8:40:79:5e:5b:4a:2a:30:58:3b:42:aa:18:
55:22:f2:04:09:22:cf:8f:94:27:93:67:b5:08:d4:
ac:42:0c:27:4a:34:3c:37:5a:81:47:d9:1c:45:5f:
ef:a8:33:cc:d2:01:be:da:1f:98:8b:d8:1b:1b:48:
64:67:0b:17:21:be:11:29:d6:12:19:5e:04:cd:33:
94:d2:7a:c2:92:ea:d5:7f:84:12:69:1b:e5:d9:5b:
8c:78:07:83:18:fb:72:14:4f:65:7f:86:98:8b:ef:
66:e2:bb:58:ff:92:ae:9f:1b:11:60:97:31:ba:40:
e4:ee:61:13:7f:5c:5d:7f:0e:03:7e:9c:65:00:97:
af:df:06:13:b8:18:d5:7e:68:36:c6:2b:ba:e6:81:
53:e9:ec:9d:57:8c:3e:4d:73:4f:79:23:fa:ca:f1:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:EB:6B:36:58:C8:9D:A1:54:27:8F:3A:47:E4:23:84:2B:B6:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FbfrazZYyJ2hVCePOkfkI4Qrto8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:b7:3e:b8:51:c6:67:c9:94:1b:28:e0:8c:20:9d:3f:46:d4:
71:d3:9c:2a:86:13:5a:4f:f3:bd:02:f5:6b:84:40:8e:38:80:
02:74:98:f6:84:4f:fe:e4:15:4d:4a:19:da:9f:aa:ae:d9:9e:
cb:8a:20:f5:57:30:76:0b:d0:81:5e:76:1c:b0:e1:5b:c5:f5:
2a:4c:dd:6a:05:16:3f:a0:d6:12:f3:69:21:5c:29:14:62:57:
1e:7b:a9:92:0d:bf:65:6a:0c:86:0b:cf:14:09:66:52:3e:90:
87:20:99:61:54:93:d1:e7:17:62:5b:7e:88:e4:62:43:ef:e4:
0e:ad:97:7f:85:d4:ed:b9:a8:a9:97:78:a1:ba:84:c1:0b:1c:
b1:2f:da:ba:d1:da:81:98:ea:e3:76:c2:47:d0:83:35:8d:cb:
86:06:ff:aa:88:13:80:96:e3:81:ef:bb:86:2c:23:1a:56:b1:
9a:3b:70:78:90:de:e1:3c:40:e4:fe:d4:40:9a:c4:f4:4d:5a:
7d:be:f6:b1:83:a2:f9:66:5d:66:6e:94:64:f5:5b:b8:dc:65:
09:4c:05:00:f3:63:44:7f:68:c3:f8:39:7d:47:cf:2f:8e:c7:
46:97:19:a2:5d:1a:08:4a:42:b8:ec:ed:32:a9:99:2b:98:f3:
a9:94:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:54 2025 by rpki-client