Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0KuQ2iuu_3LYIAPg2l8nO0U8LA.roa
File: f0KuQ2iuu_3LYIAPg2l8nO0U8LA.roa (raw, json)
Hash identifier: FiKDXwjS6QDaFI/q/JheRvVRB9fqNenj44qFkSZKMp4=
Subject key identifier: 7F:42:AE:43:68:AE:BB:FD:CB:60:80:0F:83:69:7C:9C:ED:14:F0:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F8B55486257FA0516341267547C6F5B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0KuQ2iuu_3LYIAPg2l8nO0U8LA.roa
Signing time: Mon 08 May 2023 00:14:05 +0000
ROA not before: Mon 08 May 2023 00:14:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f8:b5:54:86:25:7f:a0:51:63:41:26:75:47:c6:f5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 00:14:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f42ae4368aebbfdcb60800f83697c9ced14f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:97:a6:34:64:13:0e:27:8b:c6:f2:b5:06:
6c:ad:22:c8:3e:53:13:44:63:63:2c:68:c7:02:fd:
0e:b1:f5:94:45:b8:1f:67:cf:f3:75:fb:7e:86:7c:
6a:0d:12:88:a2:75:9d:07:21:69:67:c7:ed:53:1c:
15:51:54:2c:de:4f:b6:1b:77:ba:7e:c5:fa:2a:78:
10:c1:c7:83:b5:11:80:74:e5:77:c8:18:c5:e3:db:
22:99:2f:df:52:0d:a5:18:a6:03:da:4c:a1:f4:37:
cd:e1:f6:e9:74:1e:be:eb:67:14:26:06:3f:bc:70:
89:a2:a8:5f:ac:3a:85:b3:48:00:b7:7a:8d:c8:d9:
6d:6e:0b:ed:3e:c4:b8:11:a3:53:3c:d4:28:98:68:
72:45:d5:67:bf:95:02:6c:37:2b:0f:d2:fc:6d:73:
c2:77:d1:45:07:ea:c3:37:e6:3c:82:4c:9f:e2:57:
80:88:0e:12:73:bf:90:05:67:79:f1:37:28:bf:d3:
89:84:08:e2:79:2b:f1:ec:17:d7:2e:b3:7e:90:4c:
b4:33:6a:5f:2d:c7:df:f1:cd:83:b1:70:0b:04:8e:
8a:dd:66:8e:a7:e3:90:ea:c4:41:08:44:c4:51:1c:
84:3a:72:5c:36:40:5f:83:52:5b:94:4d:85:3b:e5:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:AE:43:68:AE:BB:FD:CB:60:80:0F:83:69:7C:9C:ED:14:F0:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0KuQ2iuu_3LYIAPg2l8nO0U8LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e3:d0:85:bf:09:72:8e:9b:39:67:8f:12:77:29:06:57:07:
c9:e9:73:22:0a:4a:fd:c4:32:4e:2a:76:c5:e5:e5:72:53:b8:
2f:8d:5a:7c:ce:f2:a7:40:c7:af:32:3b:81:37:30:ec:49:ef:
43:6a:49:5b:0e:c4:a3:9b:fb:54:d7:c6:76:07:b3:35:72:1d:
5b:c4:bc:e7:d2:cc:ad:36:04:bb:85:cf:34:15:45:25:e8:64:
46:a8:d1:fe:15:93:9f:18:3f:17:61:3c:c3:ab:47:f4:8c:dd:
e8:14:99:c2:a5:1a:6e:05:43:2d:b0:c8:cf:37:d3:03:63:96:
ab:0c:56:67:fe:21:fa:52:d8:66:f8:01:81:7a:0d:d6:00:0c:
3a:cd:da:da:f7:99:19:0e:c1:a3:ae:d1:a0:d8:7f:d0:04:31:
72:fe:d1:fd:95:0a:c8:20:55:85:50:11:06:f0:4a:75:ca:ab:
db:d0:74:a9:66:88:ee:ba:ef:9a:ab:72:8e:2e:33:31:16:1c:
c6:64:a3:54:4b:13:cc:09:d7:04:35:f0:5d:ff:23:58:27:f9:
16:c5:22:9a:28:93:33:b4:b2:0f:c2:0f:46:b1:5f:fa:ed:eb:
e1:d2:95:2d:8a:18:0e:4b:b3:40:1b:75:c4:f0:86:0b:fe:e4:
60:84:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:51:21 2025 by rpki-client