Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FC2ONCG4tJ-o8BztlJbCaWy1XQk.roa
File: FC2ONCG4tJ-o8BztlJbCaWy1XQk.roa (raw, json)
Hash identifier: ZDZu38HMfspgGTTyMb9s5BrA+zDe0HDsy+4aNLL3VXE=
Subject key identifier: 14:2D:8E:34:21:B8:B4:9F:A8:F0:1C:ED:94:96:C2:69:6C:B5:5D:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E1E6F11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FC2ONCG4tJ-o8BztlJbCaWy1XQk.roa
Signing time: Sun 19 Jun 2022 14:09:44 +0000
ROA not before: Sun 19 Jun 2022 14:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384359185 (0x8e1e6f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 14:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142d8e3421b8b49fa8f01ced9496c2696cb55d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:93:7c:14:41:26:4e:00:82:60:83:18:9e:
b9:b5:0b:45:e8:5f:70:a9:3f:7d:99:fc:e8:f6:8a:
5a:35:2b:e2:aa:9d:b1:3a:bd:22:4f:e9:e7:0b:c7:
d7:a2:21:12:83:ee:be:4c:4e:5e:0c:b5:43:0e:d7:
20:0a:d9:4a:f9:26:e6:c9:b3:42:ec:ac:48:3b:3f:
42:c9:ca:94:96:4e:7c:5c:07:c5:e7:2e:53:ed:92:
77:5f:dc:ce:bd:11:21:58:57:b2:2f:53:2a:8a:a6:
97:90:06:6c:6e:b8:92:e8:a8:04:d8:b7:9d:47:a3:
a3:0b:f8:00:b5:75:c7:79:eb:d9:1b:c2:d0:15:66:
0c:42:2e:9e:31:50:4e:8f:e0:6f:2f:1f:c3:49:60:
79:ea:76:47:ac:0a:aa:91:10:73:12:32:bc:f2:7e:
02:31:db:04:05:10:ad:36:35:f8:d8:c5:77:93:4b:
ee:51:51:db:2c:fc:88:20:70:65:2a:6e:9c:b6:52:
0b:31:2a:ea:c7:3a:31:62:0b:8c:dc:a0:2b:65:7d:
48:1c:b5:54:a3:cd:9b:32:2a:82:a6:de:7f:53:c9:
46:c3:f5:57:50:93:a1:a9:8c:d9:10:63:62:0d:ce:
65:4e:6f:30:6e:ad:f2:e5:60:71:a7:35:14:35:89:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:8E:34:21:B8:B4:9F:A8:F0:1C:ED:94:96:C2:69:6C:B5:5D:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FC2ONCG4tJ-o8BztlJbCaWy1XQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:86:ed:f3:be:c0:e2:7c:2b:95:b3:85:eb:b2:72:12:92:83:
d7:20:57:01:1a:f2:79:9b:fe:30:07:14:df:e3:e7:a4:79:f7:
f9:b3:77:ca:95:72:f5:37:20:2e:93:57:bb:81:9a:e1:1e:2a:
23:ec:a1:de:30:ef:1c:6f:8e:34:fc:57:be:da:06:4a:36:13:
59:6d:13:6d:04:8b:44:18:24:9e:42:76:4c:27:a5:f8:c5:7f:
e9:6a:26:70:e9:2b:d3:03:ce:29:cc:e1:73:91:3e:71:a4:66:
ef:e0:01:e2:30:a9:b7:e4:55:2f:23:69:5e:a7:26:49:ae:dc:
24:5f:a8:54:f1:af:1a:8a:e3:c4:da:0a:70:42:bf:17:46:bd:
36:97:ef:0c:73:59:c6:b2:c8:db:74:01:4a:b5:14:69:06:bb:
ca:82:23:d5:99:39:b1:ba:33:ea:0c:3b:b3:b8:f6:df:2d:69:
2a:3f:fc:83:e4:67:ec:b7:c1:df:7e:93:4c:37:d5:f9:78:b0:
e4:df:8b:8d:e2:47:76:3d:a7:c3:a2:c8:fc:c6:dc:3f:39:71:
80:1d:ed:a1:18:d2:28:09:e9:c0:ce:f9:14:6b:dc:8a:bf:8d:
1c:28:ed:d5:98:be:a1:2e:1e:61:fd:04:19:1b:49:e3:0d:e4:
c1:ba:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:40 2025 by rpki-client