Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FUO-ZRUmSqhh84tmGMtHOhcg6B8.roa
File: FUO-ZRUmSqhh84tmGMtHOhcg6B8.roa (raw, json)
Hash identifier: 08OtJxDOPOFgEg2ENdAD38rL8nRYrgSE36GX4JoATvI=
Subject key identifier: 15:43:BE:65:15:26:4A:A8:61:F3:8B:66:18:CB:47:3A:17:20:E8:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C6E6F3C817F0AE4C2E85C1F8157098E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FUO-ZRUmSqhh84tmGMtHOhcg6B8.roa
Signing time: Thu 09 Mar 2023 15:04:29 +0000
ROA not before: Thu 09 Mar 2023 15:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:c6e6:bf54/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:e6:f3:c8:17:f0:ae:4c:2e:85:c1:f8:15:70:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 15:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1543be6515264aa861f38b6618cb473a1720e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:aa:86:e2:02:a5:f0:3b:07:01:d4:5b:fb:
70:89:87:41:7c:85:2b:43:1e:d6:b6:fa:53:18:44:
29:ba:b9:b5:9d:5d:53:3b:56:ab:dc:37:ef:59:a2:
e7:9b:e0:90:5d:ec:94:e5:a1:d4:61:d1:d9:37:df:
cc:ae:9d:c4:91:a5:9d:4a:3a:90:9f:53:b6:be:21:
b8:21:fc:57:89:c3:13:93:80:55:23:f0:13:f2:78:
85:7f:32:27:f9:fb:af:7a:f7:9f:f8:b5:40:97:36:
21:32:4d:16:9b:ac:b5:b9:55:4b:5d:ba:f1:00:0b:
95:40:28:54:b3:48:22:c5:7d:73:27:d1:07:a7:a7:
63:27:76:c5:d5:a6:26:71:c4:91:f4:f6:cc:38:11:
0f:22:bb:f5:c8:ba:8a:66:6f:8f:17:ad:7d:e7:02:
3a:16:1e:a9:a0:6c:e9:50:a3:45:d7:09:73:5b:b2:
14:ba:c4:82:ed:9a:33:32:21:14:0c:1f:0b:d7:2f:
e5:1a:1a:77:d8:65:02:7c:1c:e7:b4:67:5b:a5:0e:
fa:4b:b7:86:69:f1:8b:18:06:a9:59:53:67:c9:b0:
07:50:24:f6:cf:89:2d:ec:c0:89:18:b4:cb:51:d4:
73:88:cc:d8:36:ba:ed:3a:cf:2c:6a:dc:22:4e:e6:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:BE:65:15:26:4A:A8:61:F3:8B:66:18:CB:47:3A:17:20:E8:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FUO-ZRUmSqhh84tmGMtHOhcg6B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:c3:74:3e:fe:7c:60:6e:95:14:e3:48:d2:bc:9a:42:4a:a6:
17:92:6b:c7:4a:23:f2:5d:f0:26:8e:a3:c8:fe:1c:5d:78:8c:
8d:99:2d:d0:ad:6b:9d:a9:89:c1:6b:7b:ea:87:ef:36:6e:0d:
18:10:d3:32:1a:0e:fa:ec:06:73:ca:61:53:e5:61:f0:dc:31:
81:81:da:2a:fc:23:47:14:fd:a6:4e:ae:ba:85:26:8c:f5:28:
1a:a8:e0:75:d9:b6:d4:98:54:f0:4e:6f:33:a2:7a:f3:2f:23:
39:af:62:9b:67:46:45:a6:b4:86:30:01:c1:0c:d0:da:6d:52:
22:14:b0:06:67:b0:e3:76:66:99:3c:ca:78:58:1a:fe:ce:c4:
04:6d:d3:83:09:42:db:14:9b:be:c4:4b:c1:78:33:6e:f7:85:
57:3f:7d:30:8f:16:e9:86:dd:a2:66:49:27:4f:74:51:c1:c1:
61:af:e0:3b:f3:b6:01:09:34:ea:6a:ef:c9:b6:af:84:32:b9:
61:9a:3b:1c:73:7f:d1:52:17:e3:fd:3b:08:6b:9b:26:7e:9d:
26:a7:8f:8d:f8:cb:08:36:d8:99:c8:cf:43:2e:00:e3:21:5e:
54:f7:7d:67:f6:97:58:d5:05:2b:f2:43:ee:94:4f:60:23:1e:
68:a3:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:05:29 2025 by rpki-client