Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVY1geJ6h-H-UB_rDKlswT5gUkk.roa
File: FVY1geJ6h-H-UB_rDKlswT5gUkk.roa (raw, json)
Hash identifier: OeOaNA2qgXTI2bvUcu8umuENqLntd+EhSjLCJMctm6I=
Subject key identifier: 15:56:35:81:E2:7A:87:E1:FE:50:1F:EB:0C:A9:6C:C1:3E:60:52:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89523593
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVY1geJ6h-H-UB_rDKlswT5gUkk.roa
Signing time: Thu 02 Jun 2022 14:10:20 +0000
ROA not before: Thu 02 Jun 2022 14:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303866259 (0x89523593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 14:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15563581e27a87e1fe501feb0ca96cc13e605249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:ff:68:1f:ce:a6:1a:95:5d:3a:70:78:cf:
1f:3c:e3:c8:58:62:3e:75:7a:f2:d7:0d:6e:43:d9:
6a:1f:63:ad:2d:ee:e4:15:9c:9d:e0:ba:c4:ef:0a:
3c:e5:41:3d:28:c3:27:f7:c6:9c:4d:df:70:12:7c:
02:d2:26:fa:a5:50:2a:77:f1:c5:19:47:ea:57:bc:
c7:30:41:5e:66:bb:6c:e8:33:73:57:77:cf:e6:30:
2c:d5:eb:45:f9:87:18:ce:6b:6c:99:4f:a4:56:a6:
29:71:57:42:23:df:9e:89:1e:8e:90:0d:fb:36:41:
52:51:d6:6f:ed:b4:66:34:9c:88:4a:70:0d:cb:05:
c3:1b:b2:9b:33:2a:c9:10:97:f7:c7:7f:46:91:66:
ba:c9:cc:b9:6b:27:57:5c:6c:14:32:c1:78:a0:d5:
ec:e6:b0:6f:d6:17:18:af:3f:df:e3:29:8e:27:79:
7e:3c:1e:2d:c3:0f:4b:ed:1c:35:79:cb:9c:83:32:
f3:f3:d3:53:a5:18:fd:d6:a4:8b:25:56:77:0e:7c:
dd:3f:58:51:44:c3:d4:9c:89:2a:42:21:b4:b2:b2:
a0:af:97:76:bb:0b:9f:22:5d:64:6b:b9:5e:01:03:
7e:3e:79:00:22:9b:a2:4e:a7:b2:10:88:7c:57:19:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:35:81:E2:7A:87:E1:FE:50:1F:EB:0C:A9:6C:C1:3E:60:52:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FVY1geJ6h-H-UB_rDKlswT5gUkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:fa:ca:56:80:fd:b6:2d:b0:23:98:3c:a2:c5:04:df:8e:1e:
96:38:57:a2:97:9a:bf:e4:6c:47:d8:1c:fd:ad:dd:8a:60:47:
6d:ac:e8:62:ad:9d:12:42:be:b7:b7:b7:59:d1:d8:0a:3c:bb:
a8:2f:42:18:13:3e:ee:b5:9b:9e:f2:f1:c0:d8:1c:5a:af:1a:
d8:6e:5b:26:0a:d2:4a:6f:0d:8b:5c:9f:a0:db:84:3e:bc:18:
81:03:38:a8:e6:96:31:48:54:66:04:bb:9e:93:ba:c5:10:99:
a2:c6:c5:ae:7e:d9:21:72:5a:0f:0a:22:8c:c2:53:7b:f5:52:
eb:c6:64:44:3c:44:d6:b0:66:bd:f8:14:3f:b2:23:fe:23:30:
b1:13:19:8a:c7:18:78:e6:9a:24:21:d2:ab:84:aa:4d:0f:64:
e7:e6:0f:e8:5a:66:9e:79:cb:60:ec:72:a5:50:82:4b:f6:a9:
e6:42:2d:9a:5e:b6:1d:d9:54:8c:66:4f:1b:df:59:d3:9e:31:
f7:9f:7a:be:b7:6b:a7:de:c0:a1:88:a6:19:45:c8:0c:af:c0:
5f:c5:2f:bf:78:2a:fe:4d:a9:26:ef:5b:bb:f6:7e:90:b9:17:
06:26:9d:f4:62:bd:8a:f8:ce:9c:9e:65:9c:7b:6c:61:e0:73:
06:5d:77:c4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIlSNZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDIxNDEwMjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE1NTYzNTgxZTI3
YTg3ZTFmZTUwMWZlYjBjYTk2Y2MxM2U2MDUyNDkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu2v9oH86mGpVdOnB4zx8848hYYj51evLXDW5D2WofY60t
7uQVnJ3gusTvCjzlQT0owyf3xpxN33ASfALSJvqlUCp38cUZR+pXvMcwQV5mu2zo
M3NXd8/mMCzV60X5hxjOa2yZT6RWpilxV0Ij356JHo6QDfs2QVJR1m/ttGY0nIhK
cA3LBcMbspszKskQl/fHf0aRZrrJzLlrJ1dcbBQywXig1ezmsG/WFxivP9/jKY4n
eX48Hi3DD0vtHDV5y5yDMvPz01OlGP3WpIslVncOfN0/WFFEw9SciSpCIbSysqCv
l3a7C58iXWRruV4BA34+eQAim6JOp7IQiHxXGaFNAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUFVY1geJ6h+H+UB/rDKlswT5gUkkwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9GVlkxZ2VKNmgtSC1VQl9yREtsc3dUNWdVa2sucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAO/rKVoD9ti2wI5g8osUE344eljhXopeav+Rs
R9gc/a3dimBHbazoYq2dEkK+t7e3WdHYCjy7qC9CGBM+7rWbnvLxwNgcWq8a2G5b
JgrSSm8Ni1yfoNuEPrwYgQM4qOaWMUhUZgS7npO6xRCZosbFrn7ZIXJaDwoijMJT
e/VS68ZkRDxE1rBmvfgUP7Ij/iMwsRMZiscYeOaaJCHSq4SqTQ9k5+YP6FpmnnnL
YOxypVCCS/ap5kItml62HdlUjGZPG99Z054x9596vrdrp97AoYimGUXIDK/AX8Uv
v3gq/k2pJu9bu/Z+kLkXBiad9GK9ivjOnJ5lnHtsYeBzBl13xA==
-----END CERTIFICATE-----
Generated at Fri May 2 10:13:30 2025 by rpki-client