Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I_fsgzUPpOSBm2P-Cryu0wf-DZM.roa
File: I_fsgzUPpOSBm2P-Cryu0wf-DZM.roa (raw, json)
Hash identifier: qzRSNKjRrVvtWbu1IrcabyQ7G7Vu9ce2f114HJletdU=
Subject key identifier: 23:F7:EC:83:35:0F:A4:E4:81:9B:63:FE:0A:BC:AE:D3:07:FE:0D:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018850E3C7A8F528110B1BDA6FE4143A9790
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I_fsgzUPpOSBm2P-Cryu0wf-DZM.roa
Signing time: Thu 25 May 2023 03:11:25 +0000
ROA not before: Thu 25 May 2023 03:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:50:e3:c7:a8:f5:28:11:0b:1b:da:6f:e4:14:3a:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 03:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23f7ec83350fa4e4819b63fe0abcaed307fe0d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:5d:6b:5f:ae:24:a7:f9:c3:a6:95:71:8f:
c4:26:c1:5e:bb:d9:24:b4:ef:e0:5c:82:4f:2c:6e:
2f:14:ba:6f:c8:71:20:19:d6:51:cc:7d:d6:60:c2:
bb:47:6f:fd:d8:9e:df:83:28:e5:76:08:44:c5:f5:
87:e1:4e:a5:c3:28:7b:86:f2:ef:75:09:a5:aa:13:
8d:12:15:37:c5:6e:24:b2:45:10:a9:e3:c8:f7:7c:
9f:41:bb:ed:ad:96:fd:98:c5:b6:71:6f:0c:c3:ba:
4f:35:72:0c:f6:1d:23:1d:2a:e1:a1:55:42:86:ec:
15:8a:72:ac:31:16:d7:40:03:d5:1e:e6:2b:ef:9a:
a2:ff:c5:80:67:de:ba:0b:0e:63:89:bd:da:be:cb:
5c:c3:16:26:af:60:a8:4d:66:72:2e:78:f2:9d:f5:
f6:d0:5a:44:9a:b8:86:c3:c8:73:dd:2f:91:67:28:
1e:57:52:6a:58:37:29:57:6c:e5:9c:f0:8a:1e:55:
35:90:02:f7:02:76:47:49:00:ab:29:c3:70:11:71:
81:3a:b3:1e:8b:5d:73:ff:1f:22:db:6f:81:4d:5c:
f4:8e:6a:d0:f7:d6:43:f4:3a:34:53:e4:58:d4:fc:
13:92:6d:9d:31:c7:80:a3:c4:67:40:77:23:8d:db:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:EC:83:35:0F:A4:E4:81:9B:63:FE:0A:BC:AE:D3:07:FE:0D:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I_fsgzUPpOSBm2P-Cryu0wf-DZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:47:bf:fc:df:25:eb:a8:07:2a:df:1e:87:15:50:03:50:a8:
7f:85:aa:52:67:01:3e:2d:1e:b8:5f:cf:eb:ae:f5:81:64:eb:
d7:fb:88:fa:82:54:48:bc:ff:b3:e3:8c:af:6c:7a:81:34:67:
93:32:38:1d:94:cc:99:5f:f0:53:07:89:3f:b6:b6:a2:4f:df:
a0:2e:6f:38:2f:a6:d7:bc:be:0d:56:17:98:62:81:91:3b:a2:
6a:ae:97:89:f4:62:89:88:6c:4b:90:a7:f1:b4:e4:de:70:ae:
f7:4c:5c:70:a9:20:43:27:26:53:a7:5c:78:6c:9e:b3:b9:ab:
bf:82:ec:56:c0:f0:04:39:ae:4c:87:e5:a3:7a:1c:d0:78:83:
ce:06:30:7a:1e:d1:31:f7:18:dc:17:51:a3:2b:be:9c:63:5e:
8a:32:d7:c0:ab:b8:36:a5:ea:fd:24:5f:60:a4:b9:c9:59:2a:
86:a2:7b:d6:0e:a9:0a:d3:75:7f:4c:0b:ec:f8:42:28:ff:a0:
ae:73:00:76:d7:55:62:29:a3:7c:b6:f6:94:fc:6e:67:0a:57:
d4:f2:e0:92:da:a5:5f:c6:7c:68:dc:25:75:00:17:8c:07:10:
b4:24:14:1b:b0:e7:12:d8:2f:bd:7d:19:be:5c:c2:19:a7:15:
59:c5:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:40:49 2025 by rpki-client