Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPStFPpk9wakqPbbUtfwX683hgw.roa
File: FPStFPpk9wakqPbbUtfwX683hgw.roa (raw, json)
Hash identifier: HLfuv7tRUI+ePH/IL0HWoEyV6cpWsS0yX5G5ubYvRQQ=
Subject key identifier: 14:F4:AD:14:FA:64:F7:06:A4:A8:F6:DB:52:D7:F0:5F:AF:37:86:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A38D0C089F55822A59F636662E2F79CDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPStFPpk9wakqPbbUtfwX683hgw.roa
Signing time: Sun 27 Aug 2023 21:05:19 +0000
ROA not before: Sun 27 Aug 2023 21:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:38cf:f5e8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:d0:c0:89:f5:58:22:a5:9f:63:66:62:e2:f7:9c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 21:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f4ad14fa64f706a4a8f6db52d7f05faf37860c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:2e:15:bc:68:f2:13:ad:64:4f:51:be:bf:
af:33:b3:2b:c8:58:e0:39:56:e9:04:e6:9a:18:f1:
60:3c:94:b1:09:d0:38:e0:0c:db:74:90:ca:11:00:
a8:94:78:fe:77:11:70:9d:0c:b9:52:66:18:fd:23:
4b:20:82:fa:af:ff:a2:29:aa:18:1e:94:0f:86:3c:
18:63:52:70:b0:5d:94:e5:e6:12:09:16:e2:74:0a:
a4:d4:e4:32:b6:b2:20:2d:36:a6:24:32:a7:f5:b4:
2f:56:5e:37:9d:4c:3b:07:5f:0f:05:bf:fc:41:09:
29:32:d8:dc:31:bb:50:fd:c3:b9:b4:db:8b:2c:ce:
b7:b2:25:20:4f:e4:a2:ef:1f:5b:49:30:aa:bd:9e:
1f:ca:f3:be:1b:27:b6:e2:ff:25:24:df:f4:40:e8:
55:2f:94:8d:00:b0:4b:a2:da:4e:03:e2:f5:ba:c3:
50:b4:de:d6:8c:f2:ff:c4:af:4e:a7:f4:66:ab:c9:
71:ee:60:2d:7a:77:7f:8a:c2:9a:37:58:82:6f:00:
38:1a:b9:9a:6e:fa:58:1d:a5:b2:a6:80:48:e5:b9:
31:bb:02:82:f0:b3:c1:06:a7:8c:34:69:f2:fe:3d:
41:12:fa:20:f9:96:ac:1e:28:50:ab:4c:a6:5e:46:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:AD:14:FA:64:F7:06:A4:A8:F6:DB:52:D7:F0:5F:AF:37:86:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPStFPpk9wakqPbbUtfwX683hgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:7d:ca:cd:a4:e6:28:64:1a:a1:05:00:f1:2a:07:66:95:4c:
c2:60:54:bb:86:1f:ca:53:e6:67:cb:10:b7:93:d9:5d:a8:24:
98:11:2b:8d:18:46:b1:02:ac:98:95:b0:fe:a3:2b:05:b1:51:
ab:61:b4:f3:79:92:26:39:55:f8:ff:4f:f2:01:ea:b4:2b:a5:
e2:05:bb:09:ea:93:cf:4d:1d:c3:79:32:ae:dc:38:92:07:f5:
bb:48:d9:ed:e3:3c:98:e1:bd:e9:cb:b5:45:40:90:f0:b7:61:
e6:07:98:ef:59:66:2f:3e:53:c1:a0:3e:23:6f:66:7f:5b:f8:
bb:94:9f:65:85:17:61:6e:33:d1:93:51:b6:35:b9:90:8c:86:
41:2d:59:04:fa:64:12:b5:55:35:06:59:7d:65:7d:45:31:15:
7f:4c:c2:93:1e:4c:f7:33:16:cb:76:4b:61:dd:71:96:2b:ff:
99:08:d9:fd:a2:9d:7b:49:e6:a3:ff:d8:9e:6d:26:77:ea:95:
83:af:49:30:f1:d9:26:62:25:39:d6:b2:b7:8b:82:5a:0e:d8:
d7:8f:34:6e:7e:a8:58:ca:53:8a:c5:2a:ac:21:cc:d4:29:e5:
74:54:33:53:a6:e0:fa:95:7d:a2:df:c7:a6:1d:9b:32:91:3a:
85:82:bf:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo40MCJ9VgipZ9jZmLi95zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MjEwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGY0YWQxNGZhNjRmNzA2YTRhOGY2ZGI1MmQ3ZjA1ZmFmMzc4NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0guFbxo8hOtZE9Rvr+vM7MryFjg
OVbpBOaaGPFgPJSxCdA44AzbdJDKEQColHj+dxFwnQy5UmYY/SNLIIL6r/+iKaoY
HpQPhjwYY1JwsF2U5eYSCRbidAqk1OQytrIgLTamJDKn9bQvVl43nUw7B18PBb/8
QQkpMtjcMbtQ/cO5tNuLLM63siUgT+Si7x9bSTCqvZ4fyvO+Gye24v8lJN/0QOhV
L5SNALBLotpOA+L1usNQtN7WjPL/xK9Op/Rmq8lx7mAtend/isKaN1iCbwA4Grma
bvpYHaWypoBI5bkxuwKC8LPBBqeMNGny/j1BEvog+ZasHihQq0ymXkZ6PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBT0rRT6ZPcGpKj221LX8F+vN4YMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRlBTdEZQcGs5d2FrcVBiYlV0ZndYNjgzaGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEl9ys2k5ihkGqEFAPEq
B2aVTMJgVLuGH8pT5mfLELeT2V2oJJgRK40YRrECrJiVsP6jKwWxUathtPN5kiY5
Vfj/T/IB6rQrpeIFuwnqk89NHcN5Mq7cOJIH9btI2e3jPJjhvenLtUVAkPC3YeYH
mO9ZZi8+U8GgPiNvZn9b+LuUn2WFF2FuM9GTUbY1uZCMhkEtWQT6ZBK1VTUGWX1l
fUUxFX9MwpMeTPczFst2S2HdcZYr/5kI2f2inXtJ5qP/2J5tJnfqlYOvSTDx2SZi
JTnWsreLgloO2NePNG5+qFjKU4rFKqwhzNQp5XRUM1Om4PqVfaLfx6YdmzKROoWC
vyM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:19 2025 by rpki-client