Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHYU0t-S6-IkLEmJntz1sztVTVw.roa
File: fHYU0t-S6-IkLEmJntz1sztVTVw.roa (raw, json)
Hash identifier: YxbR+yEpGnAoE16d+Tds6QviBs0NvPvuzHJ5FxSv+hw=
Subject key identifier: 7C:76:14:D2:DF:92:EB:E2:24:2C:49:89:9E:DC:F5:B3:3B:55:4D:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CDFF772EFFEE83607181E7CBCDC249DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHYU0t-S6-IkLEmJntz1sztVTVw.roa
Signing time: Mon 07 Aug 2023 03:16:58 +0000
ROA not before: Mon 07 Aug 2023 03:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cd:ff:77:2e:ff:ee:83:60:71:81:e7:cb:cd:c2:49:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 03:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7614d2df92ebe2242c49899edcf5b33b554d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:a4:68:b3:a7:8f:ee:96:4d:a7:51:82:ec:
9c:f8:0e:ee:87:40:0e:a5:b1:da:9c:dd:b6:1c:ea:
d0:d4:c2:bd:02:21:80:14:55:67:8f:6a:be:22:1d:
aa:28:3d:48:5e:da:3f:67:69:b2:48:e7:68:b3:8b:
32:e6:f9:8c:32:d4:b0:1c:e1:e3:e4:68:ef:7b:65:
7e:28:b0:c1:9a:75:ec:6c:4d:28:8c:8d:a5:fd:6e:
65:42:8b:e2:0c:f2:b5:7d:2a:46:bf:98:19:24:48:
af:f0:17:3f:bd:2f:78:16:e9:d4:79:e3:d5:34:82:
f5:c0:2e:aa:50:01:a2:86:a4:9c:b5:b5:d1:eb:9a:
7f:52:ad:dc:4e:d9:37:f5:e6:d1:60:bb:1e:2e:7d:
cf:64:04:6b:ee:29:8c:06:e2:8f:05:b4:d5:05:8e:
c9:46:90:0d:8e:80:a0:1c:01:30:43:87:2a:53:c4:
60:25:6c:00:f6:b8:d7:b6:af:47:98:98:37:a3:5f:
6e:ae:92:5e:b6:f3:7a:78:f6:24:d4:00:d2:6e:9b:
93:b4:38:dd:31:04:c7:45:fe:30:5d:6d:75:15:e8:
7a:81:d5:c3:68:9f:8a:3e:c6:76:12:26:90:ea:85:
cb:b1:05:6d:d6:c7:2b:c7:64:06:fc:ff:98:3e:37:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:14:D2:DF:92:EB:E2:24:2C:49:89:9E:DC:F5:B3:3B:55:4D:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHYU0t-S6-IkLEmJntz1sztVTVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:77:37:60:6b:bf:d8:f6:84:08:05:2d:1c:bc:d7:fe:3d:23:
7a:16:84:80:b7:42:09:9c:df:f1:f3:87:bd:80:70:c8:31:b6:
61:9e:96:6d:11:7a:47:2d:2c:d1:86:e6:c0:d2:42:e7:75:d1:
1e:cd:e3:6f:11:d8:8d:7a:c6:f0:9a:dd:ce:ca:e5:35:9d:74:
91:b3:b5:f0:d7:0c:79:49:b4:bf:2e:22:9a:4a:e2:5d:48:2b:
7e:cb:f2:5c:a3:47:fb:e7:57:5b:ae:f1:f6:20:6c:e7:16:4a:
86:be:7f:58:56:59:a1:51:3d:90:58:12:8b:92:ec:a2:c4:e9:
45:1a:02:a4:35:f1:90:5c:80:35:44:f8:03:84:d8:c6:29:3a:
16:80:4b:13:cb:f5:12:ac:0c:36:88:3b:68:a0:17:ba:19:2d:
bd:0b:98:15:94:6a:9f:b8:34:43:c2:d0:47:e3:37:2b:bd:b3:
30:3a:50:4d:cd:d5:92:da:f8:21:3d:34:16:36:b5:c0:bd:a1:
ca:b6:f1:1c:64:84:c8:39:24:9f:02:50:93:cd:4e:e4:b1:f7:
b5:c1:a9:19:b6:c0:82:1c:5e:e5:10:e1:ca:93:78:59:60:a4:
18:03:7f:31:76:3b:bc:94:e3:cb:9c:73:28:62:52:7d:c0:e5:
ba:38:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:11:07 2025 by rpki-client