Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVETI5oVY8R1Nw4abPkZ1CANJ40.roa
File: FVETI5oVY8R1Nw4abPkZ1CANJ40.roa (raw, json)
Hash identifier: 98IknqMIT2vEtMJR15Oxe0wBSVgA4/N5Kl7owAyxRAI=
Subject key identifier: 15:51:13:23:9A:15:63:C4:75:37:0E:1A:6C:F9:19:D4:20:0D:27:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018706A8EF5F335BCB2646749B8A10F2376B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVETI5oVY8R1Nw4abPkZ1CANJ40.roa
Signing time: Wed 22 Mar 2023 00:12:27 +0000
ROA not before: Wed 22 Mar 2023 00:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:a8:ef:5f:33:5b:cb:26:46:74:9b:8a:10:f2:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 00:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155113239a1563c475370e1a6cf919d4200d278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:ba:96:3c:43:4a:04:c5:c4:8b:9a:8b:9b:
00:1a:94:7d:15:58:71:99:4e:fd:74:de:07:51:df:
d7:b2:7a:ff:1f:12:69:2e:91:a4:58:a2:62:0b:f7:
94:7a:44:7a:04:4f:20:9b:4f:8f:cc:ca:b1:b6:3c:
e5:d3:9d:95:10:07:22:34:d1:db:7c:59:03:9d:c1:
fb:f2:1e:70:08:1f:be:73:e1:40:db:fd:3f:5d:76:
f6:48:aa:9f:f4:a6:50:65:10:b3:3a:0f:18:be:67:
2d:ae:77:25:38:aa:8c:31:81:b0:d0:88:d1:28:5e:
0a:90:7c:cb:a4:ac:2e:35:13:9c:d6:b3:4a:80:a1:
0b:cc:7f:10:f9:aa:00:2e:08:dd:5f:5d:32:15:16:
fb:d4:11:7a:57:a2:cc:67:a4:4e:31:9b:3f:21:ba:
02:65:81:d0:66:36:f5:f6:33:f5:29:b7:f5:7d:71:
e0:c3:27:44:80:89:61:62:63:32:6d:08:f6:9d:7c:
ac:75:43:7f:d1:bc:da:c7:2a:56:b8:63:6d:be:1d:
89:d3:95:80:cf:82:2b:6a:3f:8e:84:76:c9:2f:57:
80:62:4e:df:51:38:24:aa:90:9c:b8:a0:c3:32:10:
2a:9f:de:c4:65:fa:9e:16:1e:3a:e3:dd:86:bd:90:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:13:23:9A:15:63:C4:75:37:0E:1A:6C:F9:19:D4:20:0D:27:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVETI5oVY8R1Nw4abPkZ1CANJ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:bd:d7:7b:19:93:69:29:8b:dc:b0:91:a9:72:ca:f7:2a:7a:
e4:de:e2:08:42:86:b6:16:8c:f9:44:1b:12:c7:78:4c:9b:ac:
43:9f:bc:c5:33:00:5d:7b:c7:91:3a:2b:bc:27:f8:c9:3f:29:
c4:b7:4b:98:f8:36:3b:c0:87:54:2c:16:b8:e6:59:97:d7:c1:
5b:2c:a0:67:af:2e:e2:78:0d:46:d9:87:ba:50:18:0f:29:e6:
b2:e9:11:4d:d9:5f:2c:8c:14:a7:d7:b4:20:dd:25:19:61:b7:
57:5b:e2:06:e1:29:7f:4d:f4:bf:18:0a:9e:ef:54:4d:67:d1:
8f:f7:5e:3e:28:e5:ff:dd:0d:ce:86:07:31:a9:da:b8:19:d0:
4c:56:87:7a:a9:16:0e:8d:62:c7:a0:19:5f:87:2c:bb:28:d1:
4c:f3:84:ba:96:f0:9f:98:3d:e8:6d:c1:f9:12:65:49:0e:cf:
41:63:09:b0:62:64:32:e7:9a:cc:e4:1c:8d:0b:b8:1c:ba:e3:
f7:36:0d:b7:c3:f4:b6:a3:69:85:df:3a:63:e5:63:dc:71:dd:
33:37:33:31:2b:68:d5:64:fa:23:93:0c:c0:d7:89:90:71:e2:
6e:79:ad:c5:5a:48:6e:b6:9e:be:d5:bd:14:7b:8c:b7:2b:74:
06:2a:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:04 2025 by rpki-client