Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXstCecw3Bi6OwiLqv-NQ0H4kJE.roa
File: FXstCecw3Bi6OwiLqv-NQ0H4kJE.roa (raw, json)
Hash identifier: cGzWXzdkBe4ys1QDlpu2O2ooCPVvwKU3KLdKEsaSapw=
Subject key identifier: 15:7B:2D:09:E7:30:DC:18:BA:3B:08:8B:AA:FF:8D:43:41:F8:90:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888205196BDA7EBB215591E5001D562B97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXstCecw3Bi6OwiLqv-NQ0H4kJE.roa
Signing time: Sat 03 Jun 2023 16:09:12 +0000
ROA not before: Sat 03 Jun 2023 16:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:05:19:6b:da:7e:bb:21:55:91:e5:00:1d:56:2b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 16:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=157b2d09e730dc18ba3b088baaff8d4341f89091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:89:c0:b8:70:3d:94:e7:2b:a2:f7:43:d9:
d0:3c:dd:dc:67:f3:e3:2f:62:d8:55:fa:bb:86:b6:
de:d1:b1:5f:da:5a:fd:4d:c3:2c:88:a5:b0:97:2b:
06:7f:ba:45:10:08:32:17:b9:70:9d:90:e1:82:5c:
4c:f2:d3:82:a5:75:93:51:39:3d:50:f8:9e:94:05:
de:a5:d1:75:9d:e8:41:f7:97:80:86:4a:a0:50:16:
ad:d1:a2:4e:ec:32:91:e6:8b:41:9b:93:db:c6:6e:
37:ac:3c:b7:fd:b8:13:0d:16:c0:8a:f2:f0:b2:9d:
27:3b:c1:61:4d:c8:86:d9:5c:c0:eb:d1:e0:2c:e9:
93:76:f4:ce:9f:84:24:f2:de:7c:fe:49:77:fa:b6:
a4:37:49:3a:d5:29:4a:53:60:a7:cb:c2:1d:be:b7:
1e:dc:02:5a:f9:b8:93:fc:06:5d:a5:16:d9:a7:1a:
5d:52:db:f1:80:45:7b:08:83:08:43:13:06:41:9a:
9c:3e:4e:8d:6b:54:04:f7:74:b2:f6:a3:49:70:58:
4e:f7:97:c4:e4:ed:35:29:59:1f:d6:6a:ce:45:14:
70:1a:c2:60:b2:3d:69:14:19:5a:59:2e:1b:b9:6d:
86:69:f4:26:04:a1:8b:fd:b3:08:5b:34:0a:be:41:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:2D:09:E7:30:DC:18:BA:3B:08:8B:AA:FF:8D:43:41:F8:90:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXstCecw3Bi6OwiLqv-NQ0H4kJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:29:78:72:6f:0b:37:cb:eb:71:57:cb:b7:62:42:8a:47:50:
09:32:ec:c1:fe:f8:67:05:b7:e0:61:e3:24:a8:46:b3:58:9a:
46:e9:8d:a5:46:36:f2:6e:a2:5d:a6:a1:f7:b7:ee:e2:8b:94:
cb:72:27:60:40:2e:db:79:3c:f9:5b:1d:a5:c9:46:f2:f6:b4:
e1:39:74:cc:2c:60:05:a8:2a:b3:74:2c:38:d8:4f:6d:79:dc:
cd:ce:d9:c4:8a:33:81:a4:64:a1:95:71:b3:27:da:7c:d3:b0:
74:ac:31:94:fd:04:59:16:26:fb:fe:94:0f:38:2a:6a:73:ac:
09:b5:57:8b:55:5c:e3:25:94:6e:41:3b:49:bf:e5:78:07:6c:
17:e3:09:9a:54:79:82:12:4a:56:f3:51:b2:0c:e3:96:50:55:
cd:56:98:f6:06:55:48:be:7b:f5:dd:4f:d6:13:45:f8:3c:82:
c0:55:94:8f:a5:e5:9d:81:12:07:46:d8:9e:4b:de:cc:5a:a2:
75:9c:9c:9e:58:a1:d5:fc:04:92:60:69:0b:8d:cc:ab:45:ad:
26:a5:74:34:93:9d:2f:51:6c:ca:31:50:88:56:8c:68:18:eb:
e5:14:86:dd:64:ac:a2:e8:6f:f0:43:99:47:26:f7:38:df:b5:
0f:80:2a:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiCBRlr2n67IVWR5QAdViuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAzMTYwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTdiMmQwOWU3MzBkYzE4YmEzYjA4OGJhYWZmOGQ0MzQxZjg5MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8KJwLhwPZTnK6L3Q9nQPN3cZ/Pj
L2LYVfq7hrbe0bFf2lr9TcMsiKWwlysGf7pFEAgyF7lwnZDhglxM8tOCpXWTUTk9
UPielAXepdF1nehB95eAhkqgUBat0aJO7DKR5otBm5Pbxm43rDy3/bgTDRbAivLw
sp0nO8FhTciG2VzA69HgLOmTdvTOn4Qk8t58/kl3+rakN0k61SlKU2Cny8Idvrce
3AJa+biT/AZdpRbZpxpdUtvxgEV7CIMIQxMGQZqcPk6Na1QE93Sy9qNJcFhO95fE
5O01KVkf1mrORRRwGsJgsj1pFBlaWS4buW2GafQmBKGL/bMIWzQKvkFKgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBV7LQnnMNwYujsIi6r/jUNB+JCRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRlhzdENlY3czQmk2T3dpTHF2LU5RMEg0a0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJUpeHJvCzfL63FXy7di
QopHUAky7MH++GcFt+Bh4ySoRrNYmkbpjaVGNvJuol2mofe37uKLlMtyJ2BALtt5
PPlbHaXJRvL2tOE5dMwsYAWoKrN0LDjYT2153M3O2cSKM4GkZKGVcbMn2nzTsHSs
MZT9BFkWJvv+lA84KmpzrAm1V4tVXOMllG5BO0m/5XgHbBfjCZpUeYISSlbzUbIM
45ZQVc1WmPYGVUi+e/XdT9YTRfg8gsBVlI+l5Z2BEgdG2J5L3sxaonWcnJ5YodX8
BJJgaQuNzKtFrSaldDSTnS9RbMoxUIhWjGgY6+UUht1krKLob/BDmUcm9zjftQ+A
KqA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:07 2025 by rpki-client