Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvShZIBX3679ApueKllcKniWHgs.roa
File: fvShZIBX3679ApueKllcKniWHgs.roa (raw, json)
Hash identifier: oJjOzVbbcSnCrSm+Af4wSPGiWElci3sFVKDo4uYj9A0=
Subject key identifier: 7E:F4:A1:64:80:57:DF:AE:FD:02:9B:9E:2A:59:5C:2A:78:96:1E:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DFD164641CBEE9967996DD7958AF3AE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvShZIBX3679ApueKllcKniWHgs.roa
Signing time: Tue 14 Mar 2023 11:11:27 +0000
ROA not before: Tue 14 Mar 2023 11:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:d1:64:64:1c:be:e9:96:79:96:dd:79:58:af:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 11:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ef4a1648057dfaefd029b9e2a595c2a78961e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:35:ed:34:e1:6b:da:89:f3:7d:31:35:ba:
56:e2:47:dd:09:8e:57:76:f5:b0:a7:73:58:d8:e0:
f1:2c:2b:f7:22:d1:47:2e:f1:6d:cc:1b:d1:3f:37:
ea:8a:73:81:e2:45:30:2b:d8:58:62:4f:2c:ed:74:
05:91:01:5c:49:81:36:6c:7c:9b:78:9d:27:d7:8b:
e5:6f:b6:6d:8a:5b:6c:79:ad:0d:5c:94:1e:6d:86:
9c:2d:8e:87:30:14:a4:c4:3c:0c:0c:ea:6e:1d:98:
78:99:50:b2:95:87:1a:66:e7:95:85:6e:7b:10:8f:
b2:71:af:06:b5:78:29:a2:09:02:0f:22:36:0b:64:
a3:c2:5b:e0:d7:02:5d:82:c0:5d:c1:fb:7b:1a:19:
03:43:c9:8a:c1:4b:3c:c0:1d:ab:b0:f5:64:6d:80:
40:0e:85:47:10:94:5b:19:30:3b:44:57:a5:3e:62:
71:a6:c4:d2:0c:41:49:2d:af:03:64:df:30:f9:3b:
bc:e0:0e:0f:78:7f:57:fb:51:7d:94:1e:8f:a1:a7:
6a:e1:24:52:0a:c9:74:45:56:e6:1b:39:e4:be:fe:
14:0c:c1:cd:33:43:7e:41:9b:71:5f:45:91:8e:cf:
fc:3a:f1:8b:3f:c5:9c:82:dc:f4:95:c7:5e:23:34:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:A1:64:80:57:DF:AE:FD:02:9B:9E:2A:59:5C:2A:78:96:1E:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fvShZIBX3679ApueKllcKniWHgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:08:17:2b:6b:1c:a6:28:1f:dd:e8:07:5d:da:5e:61:4f:98:
3c:8b:74:c5:bf:c6:11:4c:75:d7:90:85:73:8c:8d:60:63:16:
67:41:48:8a:8c:b3:2d:e0:81:42:7c:9a:e9:15:43:e6:3f:3b:
95:f6:cf:bd:b5:18:ee:d4:6b:d6:47:01:ee:ea:53:14:c4:e3:
54:c0:3c:8a:49:99:71:2a:d6:f7:87:2f:75:60:1c:90:e8:6c:
3f:48:30:26:7b:75:45:f7:8d:0f:e9:28:cd:eb:5b:a3:f0:a1:
63:74:e2:40:f5:8b:e3:df:c8:8a:3f:fa:7a:97:d3:4a:e4:bf:
3d:17:2a:cd:7c:12:c1:17:e9:cd:aa:cd:5f:b6:ed:ac:f6:2a:
98:35:a3:60:d5:bf:db:fe:59:b9:1b:7e:7a:cc:61:be:0a:c4:
96:68:34:ca:26:27:ff:45:4e:e5:88:22:79:20:b2:7f:98:41:
cb:01:87:f3:99:18:b9:8f:47:71:2c:46:05:d1:49:92:f0:4e:
2b:f7:b0:31:f1:1a:1f:ee:b1:cf:1e:f6:a0:19:b4:df:0e:6e:
9d:33:10:94:76:b9:95:09:03:7b:a1:09:7e:2d:e2:e7:9a:7e:
1a:d4:f5:03:34:27:f9:ea:9c:a9:8c:1d:65:39:be:5c:c6:9a:
20:95:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:45:53 2025 by rpki-client