Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FF_TmeLmfr0aTlyGVrL1UYwerEE.roa
File: FF_TmeLmfr0aTlyGVrL1UYwerEE.roa (raw, json)
Hash identifier: R4WkPTriRKNgHE42SCpnN0i+Pp5OWh5+nKwMWwNaVPc=
Subject key identifier: 14:5F:D3:99:E2:E6:7E:BD:1A:4E:5C:86:56:B2:F5:51:8C:1E:AC:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018811CCB8E26714D82D7AB36E1B63C52B83
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FF_TmeLmfr0aTlyGVrL1UYwerEE.roa
Signing time: Fri 12 May 2023 21:10:09 +0000
ROA not before: Fri 12 May 2023 21:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:cc:b8:e2:67:14:d8:2d:7a:b3:6e:1b:63:c5:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 21:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=145fd399e2e67ebd1a4e5c8656b2f5518c1eac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:fa:cd:8d:f6:40:4f:e5:5f:04:cc:cb:05:
ca:69:42:cf:f6:87:98:67:05:49:83:0c:2c:05:63:
66:ba:2e:ce:4f:8f:a4:4e:4b:e1:5b:45:7d:2c:3c:
81:2a:8d:f3:e1:01:8e:08:9e:83:32:ff:a9:99:fb:
9e:a0:c2:3d:ac:0a:0c:6a:48:3b:db:0c:0b:56:c7:
86:31:9c:d4:1e:ba:10:07:5d:54:e6:b4:6e:0f:04:
a6:70:4e:7a:d8:e4:0c:a2:4d:a5:7b:47:72:c1:e6:
e7:dd:fb:32:93:22:24:26:24:06:ab:2a:9d:2d:42:
11:9c:eb:d0:26:15:dc:eb:95:60:62:fb:47:f9:6d:
22:ff:f7:68:67:f6:f3:36:ea:24:ae:5e:f4:9b:cd:
85:bd:c2:cc:68:8f:1e:94:6d:93:3c:65:6f:98:94:
9f:bf:32:c3:11:c1:4a:be:67:ca:7b:92:5a:f8:17:
a0:62:14:ed:7a:8d:29:4d:fc:48:46:74:17:e5:09:
ed:41:41:99:25:6d:35:e4:60:65:74:8a:da:df:62:
61:b5:9c:82:40:74:ef:64:91:4e:1d:e9:3f:4f:d1:
a9:4d:fb:83:08:08:d4:b7:3b:02:0d:f0:c3:ef:86:
dc:de:aa:50:5c:3a:c8:5a:6d:3e:fd:8b:82:8d:c0:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:D3:99:E2:E6:7E:BD:1A:4E:5C:86:56:B2:F5:51:8C:1E:AC:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FF_TmeLmfr0aTlyGVrL1UYwerEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:77:56:dc:bd:a6:f6:07:c7:5a:3d:b5:f9:a7:4b:98:6b:c7:
7a:67:31:ea:a5:6d:2a:4e:d6:8a:9d:9d:d8:9d:d5:a7:4c:d9:
09:8c:23:9a:44:19:56:48:27:0c:51:f7:42:f9:08:46:54:31:
e8:db:9b:ca:50:72:26:85:4c:2b:dd:07:ff:21:34:f6:3c:dc:
82:fa:a8:9e:c6:63:04:55:01:09:0b:29:b2:27:db:14:14:19:
3e:3f:3b:c6:c0:63:5a:e9:9a:c8:99:55:84:3e:79:9e:9f:5b:
60:62:48:27:75:4f:6f:ad:12:00:79:f5:70:5f:ac:04:fc:20:
d2:75:84:f0:1a:ab:20:73:a8:0b:28:3b:ce:23:75:57:fe:ab:
e4:7c:d8:fe:07:72:fd:9a:33:4f:8a:4b:ef:72:ce:48:41:6d:
1f:1f:87:81:b7:c6:7e:f2:d4:71:a3:76:aa:26:bf:44:72:42:
b3:42:a7:81:24:6f:d2:71:52:08:d5:d3:d6:3b:89:11:4a:0b:
c3:8e:f1:c2:a9:d4:a6:06:1b:db:08:25:fa:b3:91:bf:e4:a7:
57:13:c4:8b:7d:e9:aa:54:95:2a:31:b6:03:39:a7:0f:eb:cf:
a7:56:4a:e5:9c:b7:e4:8a:fd:3b:07:db:85:61:ae:dc:21:78:
49:e7:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:52:30 2025 by rpki-client