Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPhbXiQzwlZYIa6xbs9z2iKbcrE.roa
File: FPhbXiQzwlZYIa6xbs9z2iKbcrE.roa (raw, json)
Hash identifier: C1RCWwvRWRhpPkrE86QuNS1Qtx3rQ2gypHeXUH40AlM=
Subject key identifier: 14:F8:5B:5E:24:33:C2:56:58:21:AE:B1:6E:CF:73:DA:22:9B:72:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185925B1ADC74B948375191FE505077CE26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPhbXiQzwlZYIa6xbs9z2iKbcrE.roa
Signing time: Sun 08 Jan 2023 17:08:42 +0000
ROA not before: Sun 08 Jan 2023 17:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:92:5b:1a:dc:74:b9:48:37:51:91:fe:50:50:77:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 17:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f85b5e2433c2565821aeb16ecf73da229b72b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:b8:d4:ed:8e:42:ae:dd:31:ef:f0:28:a4:
b7:fc:fb:5a:b1:44:61:42:b3:4c:5d:e7:24:a7:e4:
fb:ad:e5:18:29:bf:d5:b6:35:bc:ce:10:fa:21:03:
ab:26:3d:68:0d:e6:66:0f:ea:e0:3b:64:a8:64:19:
80:9b:60:fc:07:13:e7:47:ae:9f:29:ba:bf:f9:61:
f9:a8:e3:2b:48:82:07:82:5f:0c:54:c3:e6:47:45:
98:9e:2a:17:aa:f9:6c:6a:e2:d2:cd:b4:10:43:2a:
40:e1:3c:84:7a:ad:8c:82:ed:4c:5a:c2:33:98:ec:
84:66:ab:9f:9c:6c:e7:aa:05:f6:83:79:73:2f:2d:
06:6e:5b:f6:ab:bc:76:20:19:93:70:06:1e:f9:62:
84:c5:1b:33:a7:86:a3:59:12:57:4a:36:b9:09:8d:
bc:e0:ce:56:55:11:f7:53:a9:2f:e5:ac:eb:d2:7a:
cb:59:99:60:3a:ba:2b:1a:fc:70:59:b6:b0:d4:e0:
f6:56:1b:0e:07:a1:62:94:d9:1c:24:c8:5d:ae:5f:
2e:78:2d:33:c3:6c:9c:00:68:af:6a:f1:1d:91:2f:
8d:7b:ad:8e:3c:72:8a:63:96:0b:88:e5:51:9c:22:
87:1e:cf:f3:a3:11:25:40:c5:17:dd:f8:f2:50:07:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:5B:5E:24:33:C2:56:58:21:AE:B1:6E:CF:73:DA:22:9B:72:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FPhbXiQzwlZYIa6xbs9z2iKbcrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:a3:76:db:19:c7:97:c3:24:4a:1a:5f:7c:09:b9:04:61:8f:
26:bd:d1:10:ea:7e:19:47:df:17:9d:9e:1d:d0:c6:d4:55:79:
7d:80:b3:7c:79:bb:b6:a4:36:f3:a3:64:45:f6:27:6f:21:73:
d8:e7:90:f7:a2:fc:40:9b:69:b9:1f:51:56:bf:9a:44:56:76:
d9:48:8f:71:ac:98:9a:58:c4:64:20:de:b0:2d:cd:0a:83:d8:
72:2b:0e:b7:d2:df:01:23:70:f0:43:3c:23:fc:11:41:69:29:
a4:ae:ae:61:c5:d6:58:bb:f9:ef:3a:65:9a:ac:02:9b:24:36:
8f:29:75:88:d7:85:19:97:82:34:76:f8:92:07:a2:e8:99:67:
8e:d4:0e:c6:93:e5:95:69:9e:cb:bd:26:96:f6:a3:61:db:9d:
36:5f:3b:94:4f:c6:f1:a9:6d:7f:ba:6e:ab:12:00:e7:1a:90:
96:59:62:5d:94:dc:23:fd:c5:f0:85:db:7e:31:f2:57:29:96:
2d:54:4c:62:d9:e3:0f:80:2d:0c:13:ea:e1:23:f6:54:0f:3a:
9a:14:2d:16:84:1b:fc:1a:8d:68:0f:a4:74:e2:12:f5:8a:95:
1e:97:41:19:ed:42:2a:c1:bf:72:36:df:39:1d:96:f6:e4:81:
14:1d:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:58:44 2025 by rpki-client