Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FBkIzdSEEMWyFDZrCP-97fHTeoo.roa
File: FBkIzdSEEMWyFDZrCP-97fHTeoo.roa (raw, json)
Hash identifier: ZIUdFGEiKZY3YMVUSYbVtsDaoFkqiWtjwhbbM/H7ZHg=
Subject key identifier: 14:19:08:CD:D4:84:10:C5:B2:14:36:6B:08:FF:BD:ED:F1:D3:7A:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 763D0865
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FBkIzdSEEMWyFDZrCP-97fHTeoo.roa
Signing time: Sun 27 Mar 2022 20:10:38 +0000
ROA not before: Sun 27 Mar 2022 20:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983711333 (0x763d0865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 20:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=141908cdd48410c5b214366b08ffbdedf1d37a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:9b:fe:ed:0a:92:e4:7d:4d:6f:22:38:22:
64:93:9f:75:37:31:8f:16:77:f4:ce:5a:a7:ad:67:
04:ca:2e:a4:cd:06:ed:9a:f0:1a:cb:b5:be:e6:03:
da:b7:a5:ad:b0:04:e3:b2:35:23:a1:b1:0f:ce:6b:
af:a8:8c:c3:19:b7:39:a4:3e:0e:0c:eb:a8:7e:16:
00:ad:38:0a:07:f0:2e:a3:d7:85:16:60:aa:5d:03:
64:ba:48:be:e2:9d:48:73:d8:1d:1f:3d:9e:9d:b6:
1b:a0:39:02:0b:e7:d8:48:8d:fb:6a:b0:04:bb:3a:
c8:74:9e:02:32:52:a3:54:ae:24:80:8a:3b:83:65:
a0:58:49:df:cd:ae:d4:b1:d5:98:fb:a3:6b:d5:f8:
fb:9d:28:6b:92:9c:2f:f3:7f:69:08:1b:ea:e5:bd:
7a:b5:c0:88:dc:8c:c9:87:64:4b:b5:57:89:e8:69:
98:94:17:37:70:62:1c:39:0c:40:de:f7:33:cb:78:
aa:ec:02:27:dd:77:15:7d:16:dd:5d:91:f0:20:f2:
9b:5d:a2:a3:40:0a:99:64:a0:0c:16:7e:69:74:a9:
9b:53:d1:81:97:55:44:17:ac:29:18:86:62:19:2e:
36:ce:73:2f:37:4d:52:16:89:64:e4:f3:61:03:f2:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:08:CD:D4:84:10:C5:B2:14:36:6B:08:FF:BD:ED:F1:D3:7A:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FBkIzdSEEMWyFDZrCP-97fHTeoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:44:f7:b0:0b:31:4f:ec:60:cf:ea:d4:84:89:4e:2c:e2:3d:
39:0c:dd:ff:41:0d:04:f6:11:1f:5c:60:e2:0c:c5:e1:50:04:
64:00:90:89:32:ab:02:8b:a7:1c:7f:4d:7b:2e:89:97:91:f2:
43:b1:34:6e:23:f1:05:03:39:b4:01:40:20:91:3e:58:1a:02:
77:aa:cd:78:c3:b4:e4:cf:1b:a7:81:3c:9b:89:f2:6e:3c:5f:
2d:d7:0e:07:50:6d:b0:90:97:cd:fa:03:a2:75:35:b8:89:a5:
f5:93:92:20:24:12:98:2b:df:d1:08:06:d6:a4:e5:65:a6:9c:
a3:cc:6e:6c:d4:32:38:e2:27:2b:d0:a3:83:2f:62:82:5a:7a:
74:8f:6f:4c:c5:89:ef:4d:cc:1a:1b:df:75:1b:69:43:b0:02:
97:dd:c8:56:16:99:d9:c4:26:c0:bc:3f:02:8e:ec:ec:05:a0:
6e:59:79:a4:c0:83:57:e1:e3:93:c2:69:68:43:68:3f:6b:72:
e1:d1:69:fa:fe:1d:66:31:ad:66:15:ca:f4:47:88:ba:57:c9:
cb:f8:02:c2:9b:37:09:d2:16:4c:6b:f4:0a:38:e6:76:c8:12:
a3:df:a8:0d:fd:ea:d4:96:08:7d:31:f7:d0:1b:97:f1:fd:27:
4b:02:6b:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdj0IZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
NzIwMTAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQxOTA4Y2RkNDg0
MTBjNWIyMTQzNjZiMDhmZmJkZWRmMWQzN2E4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxHm/7tCpLkfU1vIjgiZJOfdTcxjxZ39M5ap61nBMoupM0G
7ZrwGsu1vuYD2relrbAE47I1I6GxD85rr6iMwxm3OaQ+DgzrqH4WAK04CgfwLqPX
hRZgql0DZLpIvuKdSHPYHR89np22G6A5Agvn2EiN+2qwBLs6yHSeAjJSo1SuJICK
O4NloFhJ382u1LHVmPuja9X4+50oa5KcL/N/aQgb6uW9erXAiNyMyYdkS7VXiehp
mJQXN3BiHDkMQN73M8t4quwCJ913FX0W3V2R8CDym12io0AKmWSgDBZ+aXSpm1PR
gZdVRBesKRiGYhkuNs5zLzdNUhaJZOTzYQPysjUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQUGQjN1IQQxbIUNmsI/73t8dN6ijAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0ZCa0l6ZFNFRU1XeUZEWnJDUC05N2ZIVGVvby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAZRPewCzFP7GDP6tSEiU4s4j05DN3/QQ0E9hEf
XGDiDMXhUARkAJCJMqsCi6ccf017LomXkfJDsTRuI/EFAzm0AUAgkT5YGgJ3qs14
w7TkzxungTybifJuPF8t1w4HUG2wkJfN+gOidTW4iaX1k5IgJBKYK9/RCAbWpOVl
ppyjzG5s1DI44icr0KODL2KCWnp0j29MxYnvTcwaG991G2lDsAKX3chWFpnZxCbA
vD8CjuzsBaBuWXmkwINX4eOTwmloQ2g/a3Lh0Wn6/h1mMa1mFcr0R4i6V8nL+ALC
mzcJ0hZMa/QKOOZ2yBKj36gN/erUlgh9MffQG5fx/SdLAmut
-----END CERTIFICATE-----
Generated at Thu May 1 06:47:19 2025 by rpki-client