Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVLbqq_FUxU_cu3vXM5-6lYfpPo.roa
File: FVLbqq_FUxU_cu3vXM5-6lYfpPo.roa (raw, json)
Hash identifier: wwMbe1jzvNa1Dgbfc9s3ex0AakrJHr1u+Hm9GAUrzDw=
Subject key identifier: 15:52:DB:AA:AF:C5:53:15:3F:72:ED:EF:5C:CE:7E:EA:56:1F:A4:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71FFD5D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVLbqq_FUxU_cu3vXM5-6lYfpPo.roa
Signing time: Sat 12 Mar 2022 21:10:21 +0000
ROA not before: Sat 12 Mar 2022 21:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912591832 (0x71ffd5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 21:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1552dbaaafc553153f72edef5cce7eea561fa4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:4d:23:ea:ce:db:32:d6:db:29:01:b6:ad:
8a:3e:26:b2:4d:bb:fe:9f:67:2b:b9:3f:64:aa:25:
2d:92:73:70:dc:6d:d2:25:ee:b9:34:61:52:42:b5:
9f:81:2f:58:90:a0:f9:5a:c1:b0:af:a3:14:21:6a:
75:ad:b6:89:82:66:3f:bc:92:b2:1c:b8:6b:75:aa:
bb:77:3c:3c:55:b6:d6:84:3a:06:03:cb:98:3c:2a:
e3:03:c8:b7:63:22:93:48:b2:04:77:af:45:22:a1:
fb:7e:48:74:c6:1d:d4:fb:b4:52:84:b0:ad:f3:3b:
64:3f:2a:c6:61:3d:a1:d6:52:86:ce:85:2a:a5:18:
e4:1e:6b:00:52:78:ca:72:c8:ea:1e:d1:2f:82:ed:
35:82:17:48:7e:26:38:e3:14:fc:fb:d9:ef:79:b1:
04:14:a4:ab:1a:91:a6:e0:76:9e:3f:d6:3b:69:eb:
90:ee:17:f9:e8:c8:26:a1:2e:e6:7a:8b:78:0c:2e:
6e:6c:80:73:18:d9:7f:9f:88:f8:15:c1:ae:aa:df:
49:d9:94:02:f8:8a:77:0d:ee:b5:f4:9d:1e:70:68:
35:9e:d1:02:67:c8:48:1f:0c:b3:ce:8c:51:8a:9a:
0f:4b:cd:b8:35:57:c8:74:07:5c:e3:91:0a:ab:ac:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:DB:AA:AF:C5:53:15:3F:72:ED:EF:5C:CE:7E:EA:56:1F:A4:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVLbqq_FUxU_cu3vXM5-6lYfpPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:2d:2c:c2:67:1e:a9:fe:76:5a:b7:cd:93:dc:9e:bc:89:9b:
57:6e:85:4c:20:58:8a:1c:d7:e6:c9:f7:0d:1a:91:43:dd:4b:
5a:f3:02:9a:0f:2c:65:a6:c8:c7:ba:1d:5a:77:b1:f2:fe:9b:
5b:ab:85:7e:ca:c4:ae:2d:bb:3e:b6:28:1b:8d:0f:9c:1c:ed:
d8:6b:f7:c1:d2:2d:f8:02:a7:f4:1e:33:af:5f:e3:49:0a:dd:
84:5d:b1:98:de:04:d8:0f:ba:65:14:b5:3e:81:c4:7c:93:68:
3a:41:7f:c6:4c:f4:3e:bd:b1:0d:2e:19:1d:f4:dd:b8:53:43:
76:0d:5d:a3:d8:dc:28:b3:c5:2b:cf:42:3e:1a:45:9d:70:1d:
13:07:7c:f9:0b:34:f2:d1:93:1d:54:28:8c:da:32:f6:c0:5f:
3a:1c:76:06:08:eb:22:39:69:81:49:ae:91:4a:fa:a0:20:7c:
42:b8:c7:24:d1:7d:4b:f2:63:72:4b:11:cf:f9:85:1a:4e:55:
5c:f8:63:cd:f0:5d:36:00:88:d9:14:ae:ec:5f:5f:de:48:17:
32:4a:18:fb:9c:01:87:9b:48:32:e3:00:83:fc:2f:e0:b8:9a:
24:b1:d0:50:2a:61:fd:d4:ce:2f:bd:b9:60:50:53:a1:30:e9:
49:78:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:43 2025 by rpki-client