Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmYH8EZZs1Ud0PjX4qubX571Xiw.roa
File: fmYH8EZZs1Ud0PjX4qubX571Xiw.roa (raw, json)
Hash identifier: X5NHhz5pdCzu11qBJYuD6mPyJ9LSBjlHwjELWAFmzt8=
Subject key identifier: 7E:66:07:F0:46:59:B3:55:1D:D0:F8:D7:E2:AB:9B:5F:9E:F5:5E:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3E64FA3B7EA54F35F1F5CFAB08A659D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmYH8EZZs1Ud0PjX4qubX571Xiw.roa
Signing time: Mon 28 Aug 2023 23:05:19 +0000
ROA not before: Mon 28 Aug 2023 23:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3e64:3d55/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:64:fa:3b:7e:a5:4f:35:f1:f5:cf:ab:08:a6:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 23:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e6607f04659b3551dd0f8d7e2ab9b5f9ef55e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:bd:91:75:68:06:d3:c3:8b:f5:64:cc:e7:
7c:89:18:fd:98:d8:0b:1b:a8:69:3e:e3:ce:3a:a0:
e9:9a:a8:d5:65:86:f9:61:3f:a3:80:f7:de:9c:2b:
73:27:07:3e:e2:5b:41:83:d7:25:ba:47:d7:e7:a2:
f8:f8:c2:ec:4b:2f:2d:eb:e5:1a:2c:19:63:6f:b4:
75:43:b8:63:8d:a8:28:6c:7e:c8:37:a8:fe:c9:34:
81:90:7f:16:58:21:09:be:4d:60:69:96:ca:7d:13:
64:d1:84:61:08:49:59:5d:06:ca:9e:81:8a:db:a5:
9f:c4:d1:c3:bd:8d:2a:da:f3:31:0b:97:b1:93:86:
c2:f1:ac:88:43:ea:30:59:cc:82:93:15:80:81:7d:
1e:e1:60:f1:12:2e:07:c0:9e:63:06:ab:00:d2:fd:
bd:dd:36:e5:d1:c3:8d:c2:63:f7:92:f8:1e:16:5b:
e5:45:57:8d:ad:6e:cf:f8:33:0e:ed:36:cc:89:24:
c6:01:fe:63:4c:7b:f6:03:ec:aa:ce:da:b7:cd:43:
2c:52:b1:42:c8:27:4a:e9:ff:b9:a4:9e:9b:32:64:
fc:d3:9b:43:61:96:10:cb:24:2a:23:43:1e:c7:ad:
d9:44:03:c4:f4:d0:03:72:47:85:b7:2c:1e:41:a0:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:07:F0:46:59:B3:55:1D:D0:F8:D7:E2:AB:9B:5F:9E:F5:5E:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmYH8EZZs1Ud0PjX4qubX571Xiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:9a:c5:f0:5f:40:ae:8c:ac:ab:5c:05:a9:dc:d8:3d:06:51:
86:fc:44:bf:a2:0d:5d:01:0a:bb:18:a1:d5:7c:82:c2:d2:bf:
db:91:7f:1d:94:bc:2b:1b:76:36:13:54:a7:de:d5:3c:8f:50:
2f:01:ac:13:b7:64:3b:58:45:96:71:64:cf:bd:7a:6b:3d:d4:
73:da:eb:c8:5c:12:82:ed:d5:32:4a:65:1a:29:69:11:55:18:
7f:e5:fa:90:83:60:a8:c0:7c:09:dc:85:dd:af:b2:09:cb:4e:
92:29:e2:d2:54:c6:e6:53:51:75:5a:2b:6d:c2:05:7a:0a:7f:
48:8f:3b:46:a3:e5:ef:d8:6b:6d:5c:1d:97:ad:05:db:6a:25:
1a:4e:5b:d6:5e:0d:3c:63:86:41:8f:79:91:b2:40:fd:df:8b:
ad:7c:63:a9:91:92:4a:fe:20:9d:a0:d7:83:ae:78:85:29:74:
64:31:ca:72:b5:d5:a4:7c:01:ad:84:c4:11:aa:bc:2b:30:3a:
ec:c6:d2:23:38:3b:16:1c:95:bc:16:82:62:62:da:d6:16:3a:
0f:ea:05:0e:c8:35:25:da:24:9a:20:f5:e7:f6:50:09:b5:f0:
49:f4:4e:b4:40:8e:c4:18:62:fb:8d:a3:72:c4:e5:24:de:91:
7f:39:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:25 2025 by rpki-client