Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FNvDOK5EE9htFQAepjlG4XBM82A.roa
File: FNvDOK5EE9htFQAepjlG4XBM82A.roa (raw, json)
Hash identifier: Git1sRl/b5wMRfyK1AN+dzpaX1ZlHL2sJcZtCiyUWk8=
Subject key identifier: 14:DB:C3:38:AE:44:13:D8:6D:15:00:1E:A6:39:46:E1:70:4C:F3:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866C27425B796CA3D58F13E1E884F64C9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FNvDOK5EE9htFQAepjlG4XBM82A.roa
Signing time: Mon 20 Feb 2023 00:09:17 +0000
ROA not before: Mon 20 Feb 2023 00:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:27:42:5b:79:6c:a3:d5:8f:13:e1:e8:84:f6:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 00:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14dbc338ae4413d86d15001ea63946e1704cf360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:51:e7:7e:8e:4b:e2:f1:4b:a1:89:a6:c1:
d4:e7:d4:77:67:11:af:41:04:9f:d6:70:47:8d:0d:
da:c7:c4:83:da:11:c0:9c:f1:8a:a2:e9:4a:cb:ca:
81:5d:8f:8d:b9:63:7a:11:b8:65:b5:eb:eb:88:46:
96:d7:1e:c6:ea:f9:f1:8c:3e:99:d2:66:4b:b3:f3:
f8:f0:a6:38:b3:cb:5d:52:df:51:29:1c:8e:83:d6:
3e:8f:35:27:af:94:01:33:98:bc:a2:1a:75:29:bf:
17:66:3d:3e:ad:7e:42:d8:4e:3a:c7:6d:fc:7d:55:
42:65:d5:68:63:84:54:53:f9:01:a4:71:7d:e7:bb:
57:82:25:ad:5b:26:50:47:b0:be:73:38:98:61:3e:
fc:fb:dd:ed:ce:62:ba:69:07:dd:04:b3:e4:cc:02:
40:54:43:21:36:1a:95:56:f7:6e:f1:5b:a1:ff:94:
04:b9:78:4c:e9:b2:56:ed:55:f7:b1:98:9f:20:27:
a0:6f:5b:95:6d:07:e3:31:12:0c:6d:7f:56:5a:e7:
3b:2c:a7:b3:6f:5e:cc:fc:4a:5b:67:1f:b7:6d:ef:
b1:ee:d1:e6:9b:a7:e5:7a:10:bb:f6:23:41:93:a1:
c1:c7:fa:e3:d0:04:89:37:82:c3:66:a0:17:f2:38:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:C3:38:AE:44:13:D8:6D:15:00:1E:A6:39:46:E1:70:4C:F3:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FNvDOK5EE9htFQAepjlG4XBM82A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d2:f7:db:26:11:c3:26:fa:5b:dc:f5:5d:4a:15:68:d7:a2:
c3:b2:14:6f:f4:e0:8c:7e:6d:38:bb:30:a5:84:e6:af:1a:32:
c3:4c:d1:fe:79:94:27:86:8f:2c:40:28:c0:05:95:47:a1:d4:
ec:5f:8f:e8:18:ef:3a:16:96:48:4c:16:d3:6b:89:60:61:34:
7d:91:0d:79:4b:16:f7:b5:92:0c:33:71:8f:9c:cd:50:5f:f8:
88:89:d5:4a:b6:1a:0c:83:af:55:16:14:a7:6f:5e:22:dd:61:
4a:bd:a3:36:1d:cd:c9:80:97:a6:4d:15:c0:fc:b1:17:d7:2b:
81:64:02:5b:03:48:9a:38:fe:58:1c:78:b7:2c:79:6f:5e:3c:
81:15:d8:19:72:a3:ce:2f:92:7f:7e:ca:89:fa:70:fc:d7:26:
73:04:a3:c8:2c:23:55:59:4f:6d:cf:61:95:6b:d3:7d:04:08:
83:ff:1c:b7:cb:48:b2:95:c0:c2:5a:db:55:ab:4d:1b:88:3a:
e6:1a:02:27:2d:a9:d0:4b:18:a6:85:81:a2:48:81:e2:72:f2:
bc:ef:24:b5:38:b3:53:50:f8:f3:e1:9a:26:fe:e6:b7:da:4b:
a4:0f:47:a1:19:b6:6f:42:4b:25:ef:f5:ca:a3:8f:62:73:e3:
04:5d:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:57 2025 by rpki-client