Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW3H3H9J7zokqyCTDq_y1HxhpOU.roa
File: FW3H3H9J7zokqyCTDq_y1HxhpOU.roa (raw, json)
Hash identifier: oVRY1W9j9/5xw+cNndvvkWkeXqQv0zRj+ezYV6EoA7E=
Subject key identifier: 15:6D:C7:DC:7F:49:EF:3A:24:AB:20:93:0E:AF:F2:D4:7C:61:A4:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831F6432A921180FCBD29F659F564F1583
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW3H3H9J7zokqyCTDq_y1HxhpOU.roa
Signing time: Thu 08 Sep 2022 23:16:43 +0000
ROA not before: Thu 08 Sep 2022 23:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1f:64:32:a9:21:18:0f:cb:d2:9f:65:9f:56:4f:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 23:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=156dc7dc7f49ef3a24ab20930eaff2d47c61a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:00:3a:ff:98:82:16:ba:8e:44:8a:0f:11:
03:08:6c:ec:e1:98:d8:73:3d:00:34:14:be:15:88:
20:b1:87:f7:87:a7:f4:4b:19:71:47:cc:2d:eb:40:
7d:a0:d4:06:3c:95:8d:a9:7b:ff:b1:1d:43:54:20:
31:7e:ba:aa:78:e6:40:e4:f9:b2:fd:3e:08:6d:9a:
42:67:63:86:3c:73:36:4b:e9:ef:97:9e:1e:e7:b5:
07:d8:6f:62:58:ea:6d:03:de:e9:b7:91:9c:a4:5e:
d8:92:66:80:9c:e7:4a:11:d4:0f:b1:ce:65:53:f9:
7b:ed:53:d6:09:54:ed:41:37:5b:f0:a0:b1:bd:3d:
b1:e3:2a:7d:07:01:e5:87:78:bd:6e:dc:19:d6:fa:
9f:98:bd:68:f7:5e:e2:7a:86:89:8f:f5:f4:11:c5:
c7:25:df:97:a9:de:a8:0b:0d:4d:93:e4:c2:0a:ad:
2d:47:22:51:f8:2b:6a:74:26:db:1b:95:33:d0:1c:
b3:f9:5b:10:9d:fe:d1:12:08:e5:9f:60:7d:a0:4d:
35:1d:4d:6e:ac:f4:6d:60:cf:b4:73:dd:75:3d:6f:
e6:af:ea:b6:6a:82:c5:1a:85:fd:9a:3b:98:a5:69:
72:2c:f1:4c:df:d5:31:e8:6c:e9:b5:de:15:4c:6d:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:C7:DC:7F:49:EF:3A:24:AB:20:93:0E:AF:F2:D4:7C:61:A4:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW3H3H9J7zokqyCTDq_y1HxhpOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:55:4b:00:02:3e:3b:54:38:81:71:38:eb:ea:00:d1:ff:a5:
74:d3:e8:82:ae:fb:ad:60:3c:0b:2d:88:a8:7b:fe:ef:99:67:
21:24:a8:e5:37:74:2d:39:9c:92:9a:af:1e:73:42:05:21:d1:
4c:94:e6:5c:88:d7:73:79:26:3e:32:2e:86:5a:83:ab:e3:1b:
3b:f3:14:a2:b6:86:b8:85:31:02:d1:7f:4f:84:56:9f:92:d3:
a9:19:97:d3:a9:6e:4c:f3:eb:a6:67:93:05:b9:ab:9e:b2:46:
bb:56:fe:c2:82:23:93:98:06:11:b5:c0:79:e2:14:2a:82:2e:
b2:23:7f:e7:df:4d:4a:ae:de:30:2b:df:98:a8:70:cc:aa:f4:
92:e9:b4:b8:70:1f:98:c3:05:3e:b8:aa:68:0a:49:70:ab:44:
e0:e3:a6:92:41:08:e4:1a:5e:83:d7:b5:55:47:fd:ed:ff:54:
21:fd:cd:ab:af:dc:4c:d9:db:61:b9:9e:07:03:e0:9d:3f:f0:
9f:45:64:3f:5b:f6:28:0f:a7:b5:d4:e5:28:30:fd:22:da:75:
68:87:f9:a1:4b:f3:b7:6b:e8:7c:45:13:e9:54:3f:0b:24:a2:
0f:89:f4:5d:af:0b:e2:ac:46:78:b2:6e:84:b8:da:b9:3a:2e:
b1:c9:7e:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMfZDKpIRgPy9KfZZ9WTxWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA4MjMxNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTZkYzdkYzdmNDllZjNhMjRhYjIwOTMwZWFmZjJkNDdjNjFhNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g8AOv+Ygha6jkSKDxEDCGzs4ZjY
cz0ANBS+FYggsYf3h6f0SxlxR8wt60B9oNQGPJWNqXv/sR1DVCAxfrqqeOZA5Pmy
/T4IbZpCZ2OGPHM2S+nvl54e57UH2G9iWOptA97pt5GcpF7YkmaAnOdKEdQPsc5l
U/l77VPWCVTtQTdb8KCxvT2x4yp9BwHlh3i9btwZ1vqfmL1o917ieoaJj/X0EcXH
Jd+Xqd6oCw1Nk+TCCq0tRyJR+CtqdCbbG5Uz0Byz+VsQnf7REgjln2B9oE01HU1u
rPRtYM+0c911PW/mr+q2aoLFGoX9mjuYpWlyLPFM39Ux6Gzptd4VTG1DlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBVtx9x/Se86JKsgkw6v8tR8YaTlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRlczSDNIOUo3em9rcXlDVERxX3kxSHhocE9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGlVSwACPjtUOIFxOOvq
ANH/pXTT6IKu+61gPAstiKh7/u+ZZyEkqOU3dC05nJKarx5zQgUh0UyU5lyI13N5
Jj4yLoZag6vjGzvzFKK2hriFMQLRf0+EVp+S06kZl9Opbkzz66ZnkwW5q56yRrtW
/sKCI5OYBhG1wHniFCqCLrIjf+ffTUqu3jAr35iocMyq9JLptLhwH5jDBT64qmgK
SXCrRODjppJBCOQaXoPXtVVH/e3/VCH9zauv3EzZ22G5ngcD4J0/8J9FZD9b9igP
p7XU5Sgw/SLadWiH+aFL87dr6HxFE+lUPwskog+J9F2vC+KsRniyboS42rk6LrHJ
foQ=
-----END CERTIFICATE-----
Generated at Thu May 1 22:14:29 2025 by rpki-client