Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fyLEjQCfRpdvt-bg4Vidcvl0FQM.roa
File: fyLEjQCfRpdvt-bg4Vidcvl0FQM.roa (raw, json)
Hash identifier: v1FwcsQBOo41tLrcwcOnLzzTRDs/h1LGS1c9LAqexSM=
Subject key identifier: 7F:22:C4:8D:00:9F:46:97:6F:B7:E6:E0:E1:58:9D:72:F9:74:15:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E2263BEE824D1817863D4D517FA84742
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fyLEjQCfRpdvt-bg4Vidcvl0FQM.roa
Signing time: Thu 22 Jun 2023 08:08:56 +0000
ROA not before: Thu 22 Jun 2023 08:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:26:3b:ee:82:4d:18:17:86:3d:4d:51:7f:a8:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 08:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f22c48d009f46976fb7e6e0e1589d72f9741503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:0c:0d:fe:ce:bb:33:4f:41:41:bb:7d:8f:
5d:4c:1b:30:db:92:15:6c:cc:95:d9:12:89:2e:5b:
db:87:f7:a6:8c:c7:e8:2c:df:a4:25:14:34:76:27:
fa:80:ee:07:23:85:d6:ce:71:0e:8c:1f:c3:18:50:
70:1c:86:f8:0b:5e:11:83:ef:6d:74:88:77:9f:48:
92:51:44:26:13:fc:54:36:e8:8a:61:09:cc:e0:cb:
ec:29:48:ab:9e:ae:8d:99:1c:81:79:1e:23:11:7b:
c3:b1:79:0c:8a:9a:cc:0c:c7:13:65:c4:f5:2b:2e:
01:e5:31:c8:ef:55:ec:fc:e7:34:3a:aa:54:e2:09:
d9:1d:17:17:12:ed:ef:30:a4:f6:b2:1f:15:d3:13:
78:ef:ea:0a:a2:71:51:51:c8:05:e8:91:37:de:ec:
82:cd:7d:3f:c0:23:78:4c:a1:3e:50:42:15:e7:74:
d1:20:57:4a:0e:d1:16:c8:af:b0:27:18:0d:86:86:
d6:4d:e2:9f:9b:3c:bd:29:03:d0:98:e0:ff:bf:f5:
ea:5b:e0:c6:59:03:95:4b:5f:c1:b1:ae:9b:38:c9:
6b:e4:c7:64:98:91:3b:3a:cd:78:9f:79:ff:84:56:
5c:5e:03:62:de:d6:e1:ec:eb:24:3b:7a:2c:a9:fb:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:C4:8D:00:9F:46:97:6F:B7:E6:E0:E1:58:9D:72:F9:74:15:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fyLEjQCfRpdvt-bg4Vidcvl0FQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d0:23:72:bb:6b:4b:d7:21:b5:1e:1b:f1:0a:61:fb:c0:e6:
80:00:c1:f4:0b:cd:1e:11:65:1e:e4:86:af:0e:35:70:59:ce:
84:c3:d8:ee:bf:4e:ef:f9:f0:e8:65:df:ab:44:49:c5:de:24:
c8:57:33:0f:29:22:04:81:fe:80:4b:79:59:f3:92:e3:06:4c:
9d:21:a7:20:bc:d3:cd:41:3d:16:68:1e:bf:4c:94:21:3c:a4:
e3:03:c2:1e:e8:80:11:43:cc:41:60:c0:bb:30:22:01:a7:73:
b8:e4:0f:ec:a8:5f:c6:af:90:0a:4a:6a:b4:9f:46:ca:50:75:
19:4a:4f:0f:d3:c2:0e:ee:e9:50:d6:57:46:3f:16:60:fe:71:
21:a8:0d:7d:fe:80:56:c6:dd:8a:97:bd:f3:5f:a2:00:75:e3:
c8:ae:1a:13:01:a3:57:fa:f4:e9:5c:69:d8:77:08:84:d7:ff:
a1:81:5f:84:54:33:91:17:5a:24:47:bc:a5:f9:c5:53:bf:17:
b4:c5:5c:d5:48:1e:c0:96:90:8c:84:a0:4c:68:20:f7:8c:c7:
6c:7f:0b:34:c2:46:37:c2:fe:4e:60:df:64:f4:74:22:59:16:
48:93:19:5d:3c:ca:f4:33:9f:c3:30:bd:d8:9b:38:de:9b:a0:
f6:d9:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:48:47 2025 by rpki-client