Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FgEXjiaa5YKsbXyJwIDj4ES2osA.roa
File: FgEXjiaa5YKsbXyJwIDj4ES2osA.roa (raw, json)
Hash identifier: ZfnVy2CaWeMTkn09ct5/gbLHKqBMW0Xkg3rvuCHURHo=
Subject key identifier: 16:01:17:8E:26:9A:E5:82:AC:6D:7C:89:C0:80:E3:E0:44:B6:A2:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B9985FE7B2EDD2D288088C10B668654D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FgEXjiaa5YKsbXyJwIDj4ES2osA.roa
Signing time: Thu 03 Aug 2023 04:11:58 +0000
ROA not before: Thu 03 Aug 2023 04:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:98:5f:e7:b2:ed:d2:d2:88:08:8c:10:b6:68:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 04:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1601178e269ae582ac6d7c89c080e3e044b6a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:17:6f:56:b3:0f:ea:ab:18:0a:4c:62:4f:
f2:91:4c:7e:c9:65:0a:f6:4e:c6:a3:8a:e8:d7:86:
8e:62:61:85:6f:c0:b1:84:85:ae:3b:2b:f3:dd:1a:
22:43:6d:d9:71:65:88:fb:45:b9:22:65:e9:8a:7e:
73:a5:2f:b4:0c:5e:a1:e5:4c:66:d3:4c:89:57:c3:
71:b6:de:d8:dc:fd:96:dc:73:75:bd:bc:bf:9c:1c:
0d:cf:ad:ff:6e:6e:39:4f:47:94:0c:e3:ce:e7:5b:
8d:ae:ef:72:87:6a:00:0c:96:14:5e:fc:66:53:f0:
7b:0a:f7:4b:2c:32:ac:dc:05:bc:9f:e8:df:37:49:
17:47:38:a9:e1:9b:22:b6:4b:d4:f5:ab:cc:12:cf:
d4:eb:d6:dc:f5:e5:67:f8:1c:3b:d2:5a:dd:9f:85:
ce:90:9d:07:41:22:a0:9b:a1:ff:4f:c5:2c:e2:fa:
44:7c:06:72:97:57:13:34:87:26:74:43:6f:30:78:
ea:0b:ee:df:09:42:fe:91:cd:79:5e:94:8d:ef:bf:
34:0d:94:19:20:a1:ef:47:47:07:f5:cc:f0:66:d0:
14:3d:84:85:88:90:58:5b:e7:f3:f0:40:43:1a:88:
14:74:2d:a6:c3:03:9e:ba:36:07:c1:1e:71:95:88:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:17:8E:26:9A:E5:82:AC:6D:7C:89:C0:80:E3:E0:44:B6:A2:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FgEXjiaa5YKsbXyJwIDj4ES2osA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:ea:4e:5a:03:dc:0e:4e:42:af:08:f6:e2:4a:86:2f:c5:73:
ae:a0:18:85:a7:4c:5f:20:99:cf:db:84:9f:f9:66:c4:ed:d8:
53:1c:22:8e:a9:9b:2a:fe:3d:7d:68:f0:1b:fe:1b:8c:6d:de:
e4:ce:4c:36:21:95:9e:89:be:8f:89:c0:5f:9b:39:17:84:1d:
e9:27:5e:8d:e2:60:fc:e6:1e:c0:8b:35:50:a5:f5:30:7b:6e:
f3:75:aa:97:19:0c:a5:72:2f:77:68:d7:9d:5b:ab:b1:ea:5c:
ab:5a:95:ef:38:15:b5:5b:4f:58:57:b0:d1:62:9f:ac:f2:48:
15:56:f4:fc:ad:89:bf:b5:31:da:53:e7:99:06:6c:fa:60:24:
29:a9:85:2e:22:95:96:23:38:71:70:16:fb:9a:78:c2:b5:fe:
a1:2f:b1:ce:65:2a:bd:1c:5b:1e:72:27:ff:41:b5:b9:bd:23:
da:96:07:40:aa:b5:a4:9e:fe:c0:d0:af:0e:d4:1d:6d:a6:1f:
7e:37:d6:fd:55:73:1c:eb:0e:20:87:81:f0:76:23:be:11:43:
ee:7a:b3:08:4e:8d:14:46:85:2e:52:ff:2f:f4:bc:f1:a9:b0:
7d:ae:ab:3d:4e:01:32:51:01:04:51:1b:8b:e6:40:dd:7a:99:
af:a2:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:25 2025 by rpki-client