Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCxDz-Hi0vtQndMghtAjmqYm6hI.roa
File: FCxDz-Hi0vtQndMghtAjmqYm6hI.roa (raw, json)
Hash identifier: oR+hREgtZnqYvGRUa7AzS+UG2FEOW3V5zBiRQsnG26c=
Subject key identifier: 14:2C:43:CF:E1:E2:D2:FB:50:9D:D3:20:86:D0:23:9A:A6:26:EA:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852D4B475C29FE19A0B5618704DCB282B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCxDz-Hi0vtQndMghtAjmqYm6hI.roa
Signing time: Tue 20 Dec 2022 02:09:46 +0000
ROA not before: Tue 20 Dec 2022 02:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:4b:47:5c:29:fe:19:a0:b5:61:87:04:dc:b2:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 02:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142c43cfe1e2d2fb509dd32086d0239aa626ea12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:e0:18:0e:04:a9:73:b6:2b:50:67:1c:6f:
a5:34:7d:e8:d4:08:69:9c:a0:30:5d:84:b7:02:68:
1a:cc:92:f1:be:ca:23:73:f2:07:77:63:27:0a:82:
08:e2:4f:04:45:5c:c5:b5:21:b2:36:b5:14:0f:94:
28:00:d2:63:2a:b7:52:91:28:97:8f:7e:68:0a:07:
88:a8:50:51:2a:50:dc:b8:d4:00:72:5e:45:53:56:
83:02:d2:b3:7f:da:87:57:f3:97:9f:fc:cf:b4:ff:
23:ad:d3:27:c3:2d:17:eb:83:0b:46:66:76:e9:0c:
8e:cf:2c:1b:0b:01:9b:6b:8e:b9:ca:d8:a4:26:5a:
9c:0f:db:cc:28:20:14:dc:93:6c:2d:33:3d:21:74:
e0:2a:c9:b3:35:98:04:90:db:ae:d0:57:08:35:02:
c7:3a:06:23:0a:b6:57:7e:82:02:1d:1e:06:f0:86:
69:09:1c:a3:49:3b:c0:24:29:3a:0a:7a:e8:56:90:
db:59:3e:ff:e4:43:1a:6e:73:6a:52:9a:30:47:e0:
21:30:77:4e:f2:6e:0b:53:31:6b:19:3d:e3:25:a5:
8e:97:94:1d:c2:fc:b1:be:31:e0:b0:0c:b1:b0:d5:
44:d1:da:1a:01:cd:82:a7:f2:cc:70:f3:1f:83:22:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:43:CF:E1:E2:D2:FB:50:9D:D3:20:86:D0:23:9A:A6:26:EA:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCxDz-Hi0vtQndMghtAjmqYm6hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:6c:aa:eb:71:cc:7f:0f:a9:4a:3c:1b:3f:61:3d:71:11:d2:
cd:d9:f9:0f:e5:a5:8d:27:f6:fd:ed:71:d0:3f:6c:ab:50:30:
7a:b6:2a:7a:7c:a7:9b:04:b8:25:b0:af:66:25:0d:55:23:fa:
76:ca:65:68:57:3c:98:45:6c:34:ae:33:5b:08:68:1e:9b:2e:
72:a1:27:28:1b:aa:a8:71:be:33:ad:21:8b:d4:c5:bd:a5:59:
51:ef:0c:97:c8:12:6d:ab:97:aa:88:3f:fd:bf:71:8b:9a:b4:
7c:14:a2:77:6a:4a:1a:03:3c:a1:3c:40:ad:df:9f:44:5a:1d:
bf:28:84:ec:bf:a7:8b:3c:e4:c2:f4:de:1a:a8:6c:c7:93:a3:
30:67:97:16:55:79:50:3b:57:94:51:f0:64:9a:45:f2:64:11:
3d:30:2c:5c:37:9b:62:df:65:30:8c:b0:80:97:d5:3f:89:d3:
72:13:34:8f:c3:45:49:67:ea:72:81:05:74:c6:92:6c:ec:0b:
8f:78:a4:54:5d:21:b5:61:1c:bc:47:6a:f2:3b:20:0b:bf:76:
dc:f4:d6:88:90:f3:4a:26:4d:0a:89:68:1a:d3:62:45:d8:dd:
ca:ec:f4:20:a7:c0:3d:2b:83:43:87:a3:59:6d:6d:ed:ec:18:
75:e7:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:55 2025 by rpki-client