Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW9AbJDY9YMf9y68XwYwch2xsCo.roa
File: FW9AbJDY9YMf9y68XwYwch2xsCo.roa (raw, json)
Hash identifier: wcjwruTB9bz+pl4AsV18mgjZnFkir+dT1jfktkvkZ1E=
Subject key identifier: 15:6F:40:6C:90:D8:F5:83:1F:F7:2E:BC:5F:06:30:72:1D:B1:B0:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187078853DCC39B02CE32B30690378C1BD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW9AbJDY9YMf9y68XwYwch2xsCo.roa
Signing time: Wed 22 Mar 2023 04:16:27 +0000
ROA not before: Wed 22 Mar 2023 04:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:88:53:dc:c3:9b:02:ce:32:b3:06:90:37:8c:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 04:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156f406c90d8f5831ff72ebc5f0630721db1b02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:48:b7:8f:65:27:0b:35:4a:e1:67:db:1a:
ac:bf:8f:48:15:5d:8e:3d:78:73:5f:ed:2f:9d:2c:
b5:9c:dc:a5:31:03:35:b8:17:e5:be:2f:cc:f5:7e:
52:55:fa:94:1e:29:18:7a:f7:67:00:b7:a5:7c:9e:
16:8e:c1:60:ea:6b:b4:99:02:e9:23:c9:b5:79:0a:
82:07:6a:a1:d5:87:f0:8f:e2:ac:13:04:88:08:a4:
cf:aa:59:82:4e:8b:d5:c8:79:e3:77:5b:a3:6a:e7:
c0:8a:88:a5:6a:7b:61:1a:b6:35:88:0d:3f:78:57:
9e:92:b9:c1:bf:f9:d0:96:97:3a:94:7c:e9:28:77:
3c:a4:ae:a7:8f:4d:80:02:87:3e:0c:36:15:c1:3b:
33:40:f2:ea:23:62:64:f3:3d:7e:ff:7f:50:0a:17:
14:31:d1:d6:ff:6c:7a:c5:5a:f3:63:3a:dc:75:df:
90:78:75:77:f8:6e:f3:3a:c8:21:d6:3f:dd:d5:be:
19:a4:21:96:d0:24:d3:e2:ef:65:fa:df:2d:fc:7e:
40:d6:3b:bf:ae:81:29:38:25:17:f4:68:d4:89:f1:
bf:40:4e:63:81:5a:cc:97:39:da:cb:7f:af:fa:5b:
13:67:fb:06:cb:6c:11:d0:d7:76:ef:b2:35:a2:b8:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6F:40:6C:90:D8:F5:83:1F:F7:2E:BC:5F:06:30:72:1D:B1:B0:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FW9AbJDY9YMf9y68XwYwch2xsCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:3f:78:cb:da:de:c3:50:82:7c:f6:c9:d4:e2:0b:18:fe:9a:
0c:a3:f3:37:ec:bf:2e:90:4e:4f:08:dd:fd:ac:9f:e1:33:e2:
68:d3:15:bc:af:ee:69:98:1e:5e:3a:be:a6:ec:20:56:f7:f9:
80:f3:b5:b7:da:59:f8:d2:dd:8e:f3:e9:66:09:cf:b1:a7:12:
81:85:8c:92:a4:c1:1e:51:9a:9b:e6:26:8e:06:52:43:69:8d:
7a:a0:0d:0e:4c:a4:23:5a:4b:e3:37:c4:ec:f4:2a:20:b6:4b:
ee:a5:0c:a4:a0:4f:b4:52:89:8d:ee:33:9d:5a:d2:90:cd:36:
3e:76:95:e8:26:61:87:fd:17:4e:5d:aa:ed:84:4e:bd:54:7d:
16:93:54:db:19:17:c0:9f:e8:d2:3d:55:76:20:1d:bf:74:0d:
bf:22:9e:ed:25:91:61:97:6a:8b:f3:1f:21:50:13:fa:e3:f7:
c4:ed:bf:f6:93:2b:3c:54:39:12:42:ad:bf:7d:a2:60:e2:7e:
3b:0e:f8:75:ec:9a:8a:1b:25:5c:7b:04:48:65:67:da:e7:31:
71:21:cc:7a:4b:a4:83:f6:56:37:9f:35:55:8d:65:4e:b1:6a:
b0:d6:67:a1:87:8d:7c:b7:fc:1e:b3:76:98:8a:0a:cc:f4:4d:
a6:54:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:46:11 2025 by rpki-client