Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQXM5_opdKMh0w92YOkCKd5RzgA.roa
File: FQXM5_opdKMh0w92YOkCKd5RzgA.roa (raw, json)
Hash identifier: 7Alj2P0tYbp/8nPq2WWuXVaVArtrt1AcUW4TAToft5U=
Subject key identifier: 15:05:CC:E7:FA:29:74:A3:21:D3:0F:76:60:E9:02:29:DE:51:CE:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870FB00554D262984AB43EBF0EECF9F3BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQXM5_opdKMh0w92YOkCKd5RzgA.roa
Signing time: Thu 23 Mar 2023 18:16:46 +0000
ROA not before: Thu 23 Mar 2023 18:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:b0:05:54:d2:62:98:4a:b4:3e:bf:0e:ec:f9:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 18:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1505cce7fa2974a321d30f7660e90229de51ce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:23:4e:32:84:5c:38:7f:dc:31:f1:14:21:
b1:ce:31:21:f0:6e:91:c3:06:12:ef:f2:f1:c7:71:
00:63:3f:ac:c7:53:dd:64:75:c5:ec:f8:4f:30:00:
84:aa:71:87:60:d5:1a:34:25:8a:49:5e:8f:00:1a:
03:85:56:f3:88:48:da:62:f1:da:73:47:0b:2a:d9:
c3:88:b9:1e:d3:a5:6b:0a:d3:66:ce:92:0a:50:a1:
b8:a4:6b:95:35:70:ff:d4:b9:69:1e:db:06:9f:cd:
98:c8:38:bd:16:a2:e9:d9:7a:8c:da:66:3a:ca:64:
8d:39:5c:32:e8:60:c5:97:27:bf:46:b7:ad:22:a6:
f4:03:48:bf:9f:97:47:c1:04:f6:07:80:91:dc:17:
2a:9c:9a:66:0a:ec:a2:89:1c:0a:6e:c7:ed:00:ac:
68:1e:31:30:28:ab:90:24:21:4f:a6:35:9e:53:8b:
42:70:5a:c8:8c:b3:e1:dc:25:5b:48:15:cb:d4:5d:
a5:36:2a:d2:71:db:4b:59:24:ba:40:1a:27:c6:a2:
50:03:68:ae:05:80:f1:0c:2f:24:d0:eb:53:b8:93:
11:52:c8:84:11:3c:b8:62:0a:12:7c:19:c4:12:1c:
8f:d3:59:d5:17:73:9d:d5:8d:dc:0f:32:a9:b9:41:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:CC:E7:FA:29:74:A3:21:D3:0F:76:60:E9:02:29:DE:51:CE:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQXM5_opdKMh0w92YOkCKd5RzgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:11:1d:5f:eb:75:4e:c3:8e:ba:a4:68:a5:0f:af:f2:3b:bd:
42:b3:19:34:4e:10:38:76:8c:77:c4:77:7d:f9:ea:cb:65:96:
5e:8b:9f:e7:d8:8e:46:ca:75:52:e8:a8:e3:19:09:bb:7b:bd:
c4:fb:ce:11:35:87:23:23:18:9e:e6:2e:cc:ac:bf:0a:8c:ac:
e3:6e:7b:fd:7b:22:f0:e7:f0:11:62:c2:5b:7b:37:b0:1c:fd:
65:d4:93:e9:37:53:e8:e3:41:11:79:f8:ee:d2:2b:be:72:f5:
ec:a4:f4:df:b5:b4:89:98:bc:06:d7:1b:4f:ef:41:a2:72:82:
36:bf:24:4c:b2:12:a7:1b:12:ec:09:f3:57:b5:d3:1b:d5:e0:
60:f7:42:8b:56:e6:c5:fe:5d:60:73:24:f3:06:c9:c0:c5:75:
fd:d8:de:55:36:90:e6:ae:3e:f1:6a:44:54:90:5c:a4:18:2c:
be:9a:c7:5a:7d:6f:5a:73:9d:5f:1c:66:89:f9:a6:33:a2:40:
f4:2a:63:9d:e7:de:6d:f3:9f:94:3d:69:2f:7a:74:4a:0f:90:
9c:62:5b:15:e4:ab:c8:34:64:4f:67:2a:64:7c:3c:0f:b0:29:
8f:62:be:ba:8b:b1:0c:9f:83:15:7d:4e:ce:02:52:31:a9:1c:
f7:4c:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:24:39 2025 by rpki-client