Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FRKm1UgOk9P-eor_Ol9PpXpQVT0.roa
File: FRKm1UgOk9P-eor_Ol9PpXpQVT0.roa (raw, json)
Hash identifier: Tl8IC72wXPuHzTq1hKyUlIOzzEwHS88oQljB/2vjyMk=
Subject key identifier: 15:12:A6:D5:48:0E:93:D3:FE:7A:8A:FF:3A:5F:4F:A5:7A:50:55:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186443EBF8AC0ED31B3B38BA3300CB3FF01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FRKm1UgOk9P-eor_Ol9PpXpQVT0.roa
Signing time: Sun 12 Feb 2023 06:10:08 +0000
ROA not before: Sun 12 Feb 2023 06:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:3e:bf:8a:c0:ed:31:b3:b3:8b:a3:30:0c:b3:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 06:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1512a6d5480e93d3fe7a8aff3a5f4fa57a50553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:ab:a3:91:31:29:74:3f:1b:41:52:56:53:
17:fb:19:d6:5b:48:83:19:de:79:2b:e4:9f:ac:d0:
50:c3:a8:64:a6:94:13:62:27:9d:44:ba:bf:25:6f:
37:b1:71:16:40:ba:06:ba:51:ec:dc:d0:59:d6:44:
2e:c8:d5:2b:6d:bb:43:2f:3b:e0:36:01:79:b3:c9:
7c:cc:04:e1:73:47:00:bc:1b:99:90:8b:19:37:b6:
a5:28:e4:e5:fb:f9:20:2d:2f:d7:e7:fa:c9:7f:00:
2c:45:23:36:1c:b6:71:ff:dd:bc:47:04:cf:5c:4a:
5a:0c:89:11:ed:06:03:46:84:d3:36:20:a2:b6:aa:
bb:0e:c2:b9:ec:47:e3:7d:a4:fb:36:21:b1:a3:ef:
cb:d9:bb:3d:7a:84:be:61:83:95:d2:8e:62:f6:18:
97:a9:b3:77:0f:81:bf:06:c1:40:eb:f5:60:2f:46:
15:12:f9:76:e6:49:52:b5:c8:3a:ce:0c:26:11:6b:
6c:b6:1f:a1:de:69:f4:59:4d:07:90:cb:da:78:48:
4a:c1:a5:f8:0b:a2:d4:83:38:e9:5b:be:f9:c3:ae:
f2:d9:93:aa:59:15:c4:99:03:22:12:21:28:26:27:
1e:10:b2:4f:6a:a6:47:4d:c1:8b:4d:80:a0:98:d7:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:A6:D5:48:0E:93:D3:FE:7A:8A:FF:3A:5F:4F:A5:7A:50:55:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FRKm1UgOk9P-eor_Ol9PpXpQVT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:28:e2:ab:70:10:7a:72:71:bf:01:f6:13:b4:54:bb:dd:f1:
b0:de:b2:9f:dc:cb:26:73:6d:b9:ad:a1:00:ee:4b:10:1c:7f:
bc:72:88:2c:62:85:c5:94:74:51:43:39:2e:92:5b:8d:6f:0c:
3d:90:19:66:8f:80:69:95:71:d4:d2:3d:d5:9c:9f:c5:d3:11:
3d:e1:af:27:d4:bc:11:f7:51:78:eb:85:b6:c8:9f:ec:0a:bf:
42:55:72:a3:c5:f9:97:e8:a1:50:74:fb:b8:60:25:cb:bf:21:
66:a3:2f:6f:12:a7:5a:fe:5e:ae:ec:f2:2b:de:9b:39:7f:77:
85:17:2a:31:84:1f:c6:72:ad:82:17:7c:85:f2:47:66:ab:e2:
f5:26:e2:51:ea:95:8a:d0:6e:54:14:2e:5f:47:34:c9:f9:30:
c7:80:50:9a:a2:e9:db:54:e4:e3:96:f7:41:3f:3f:69:49:ad:
db:6a:ae:63:f1:5b:a3:71:50:ad:3f:1d:a2:81:fd:af:c8:b2:
29:04:86:bc:65:2d:05:8a:11:64:81:4f:85:18:a2:56:05:73:
79:f1:16:ee:32:d4:f8:9d:8e:ed:67:cd:1b:8b:e8:9b:5a:f9:
ba:61:95:a2:8d:5c:c7:3b:26:52:e8:02:a1:83:36:0e:01:7c:
1b:72:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:56:01 2025 by rpki-client