Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqD7QyVzi9QDp2_1sKHXKq1Dwks.roa
File: fqD7QyVzi9QDp2_1sKHXKq1Dwks.roa (raw, json)
Hash identifier: pC8zcz+h9C3RMwC6hIu7SC0PwAhi6NAo2hDkMa28gMo=
Subject key identifier: 7E:A0:FB:43:25:73:8B:D4:03:A7:6F:F5:B0:A1:D7:2A:AD:43:C2:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D8C4AC6E52A4189086FA41D8F0A4B9DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqD7QyVzi9QDp2_1sKHXKq1Dwks.roa
Signing time: Mon 13 Mar 2023 02:20:13 +0000
ROA not before: Mon 13 Mar 2023 02:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:c4:ac:6e:52:a4:18:90:86:fa:41:d8:f0:a4:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 02:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea0fb4325738bd403a76ff5b0a1d72aad43c24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:71:d8:be:06:ac:da:1d:17:d6:1f:0a:8c:
d0:5f:e2:4d:6a:fb:9a:b8:a3:64:cf:09:ab:d0:ba:
1e:95:7c:35:ac:97:a1:80:1e:63:d1:d6:96:01:56:
4f:85:ff:21:eb:a7:f8:89:ea:3e:62:9d:a7:df:a5:
89:f9:87:4b:70:1a:2f:12:33:98:84:30:fe:07:75:
be:61:1b:0d:1c:29:05:78:58:ec:06:69:9f:56:8b:
77:25:f3:a2:7c:00:12:e6:98:2e:3f:49:cf:55:88:
88:cc:76:67:61:95:2c:cb:91:2a:2e:3b:64:ad:5f:
25:6f:a9:78:bd:80:5b:10:5e:35:43:a0:a8:19:e7:
89:1f:25:cf:f4:d3:5e:c8:9e:09:c8:1a:88:f8:f1:
02:53:60:ca:6f:36:74:cf:ac:47:5f:9f:5f:67:5c:
f0:5f:86:de:43:ec:80:c4:57:3c:03:8d:42:24:e7:
96:2f:2f:f0:5c:30:a0:aa:a1:90:9e:dc:f5:6a:c8:
cb:f2:ab:94:99:4b:e0:fa:38:20:ff:0b:7c:db:c5:
b1:c9:d2:df:79:5b:cf:e4:a3:7d:30:b5:30:3e:35:
dc:0c:48:5e:73:24:61:96:9d:fe:9e:4e:8e:e7:59:
01:13:8e:71:ed:ea:73:d3:4c:70:25:cb:5b:cb:ff:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:FB:43:25:73:8B:D4:03:A7:6F:F5:B0:A1:D7:2A:AD:43:C2:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fqD7QyVzi9QDp2_1sKHXKq1Dwks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:09:7e:ae:1b:4a:6d:c1:7c:02:31:ca:30:23:34:92:2b:ee:
ff:38:1e:f1:2c:3b:88:b7:d9:f8:18:7e:ad:a7:0c:cc:9d:c5:
22:22:01:be:b1:e3:ae:72:55:70:5a:5e:fa:68:94:27:97:4a:
4d:ce:2a:ef:35:b8:10:2f:62:1e:de:80:5e:ef:40:87:c0:c3:
75:92:d5:04:d7:fa:c3:d0:31:74:da:79:b0:7a:39:1d:ea:16:
b5:d0:1a:9a:52:ff:b4:80:a8:94:e1:38:b1:2d:6f:b9:e4:9e:
3f:f0:81:c6:6a:5b:33:8e:eb:83:e3:82:1a:5d:33:75:77:bf:
e3:59:00:9c:c0:6a:47:d7:26:b9:8d:a1:df:22:cb:e2:02:2f:
79:c9:e1:d1:90:e8:1d:94:bc:1a:58:08:36:07:1c:a0:fe:3b:
db:43:10:78:e5:91:46:d0:3f:91:84:b2:50:c3:19:5a:ed:d0:
7b:c6:df:18:ce:21:fa:00:af:f6:53:ff:47:47:5a:57:30:e9:
b9:54:b7:c0:34:79:4b:e2:f5:82:df:31:11:e9:e1:e4:96:ef:
49:14:85:0e:9b:f2:d0:42:d2:aa:22:b4:72:4a:01:86:58:ca:
74:22:93:6b:a2:e5:6f:fd:47:8f:4a:5f:79:f1:bf:6a:9e:2b:
ab:c3:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:46 2025 by rpki-client