Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZXmWYbqq3Q86qbvULxEdvbf8D0.roa
File: FZXmWYbqq3Q86qbvULxEdvbf8D0.roa (raw, json)
Hash identifier: zbJC/T1WmUyLBXyQ50BxjDW9IqV7NFg94pZOwjR/tJs=
Subject key identifier: 15:95:E6:59:86:EA:AB:74:3C:EA:A6:EF:50:BC:44:76:F6:DF:F0:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C8668D681A29BAB39827A64F236D348D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZXmWYbqq3Q86qbvULxEdvbf8D0.roa
Signing time: Sat 17 Jun 2023 08:09:04 +0000
ROA not before: Sat 17 Jun 2023 08:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:66:8d:68:1a:29:ba:b3:98:27:a6:4f:23:6d:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 08:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1595e65986eaab743ceaa6ef50bc4476f6dff03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:23:f7:0b:85:ff:98:7d:db:43:ca:87:a6:
91:74:63:02:24:8c:2e:61:4c:d3:bc:d8:dd:a2:77:
f2:21:01:5d:02:7b:89:00:eb:c4:d2:79:bf:17:6f:
4d:6c:22:7b:4a:f5:0e:7c:9f:2e:70:11:57:bd:72:
b9:53:77:a0:e5:6a:ea:51:a9:eb:07:2a:de:32:cb:
ba:f2:cb:31:e3:b4:61:83:70:0f:b9:15:a6:96:8c:
c8:fc:32:56:0e:b7:e4:19:1a:e8:44:10:18:83:67:
c5:01:00:7c:89:2d:ce:41:d6:e1:54:46:1c:15:e8:
72:e2:fc:b7:19:be:0d:e9:bb:42:3f:e4:60:45:4b:
b6:c5:2b:74:31:0c:73:48:43:c2:19:45:0f:5c:ff:
c8:bf:d9:0e:5a:de:0a:5c:09:23:81:a3:02:42:e4:
8c:2c:1d:8d:ce:c0:23:92:ff:a2:cc:7b:8c:0e:09:
3b:be:e9:2f:c4:32:1a:fb:20:5d:bc:eb:fa:82:0f:
ad:eb:72:49:d0:a6:38:f5:99:19:aa:ab:00:4f:9b:
0b:cc:7c:81:8e:6b:b5:ad:b6:5d:28:49:9f:ff:80:
90:c0:e9:75:c1:da:8e:e7:f6:2f:31:49:b7:2e:5a:
47:4a:3e:ae:21:c3:31:d5:47:d2:3a:06:9d:2f:09:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:E6:59:86:EA:AB:74:3C:EA:A6:EF:50:BC:44:76:F6:DF:F0:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FZXmWYbqq3Q86qbvULxEdvbf8D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:7a:77:46:48:d8:75:d9:1c:b1:74:87:50:bf:f5:aa:1d:d3:
c3:d5:7b:ed:32:60:9d:c5:8d:bb:86:df:ba:f3:5b:28:24:09:
24:f0:c6:31:e5:6d:2a:2d:8f:96:32:c0:c4:f4:be:52:ff:1f:
f2:3e:d1:e8:70:87:23:b8:b6:1f:81:b1:4f:d2:63:be:88:54:
00:ed:ae:a4:37:0e:42:e3:11:ba:05:aa:2f:6e:bf:1a:02:25:
0e:70:6e:4a:49:3f:8c:b9:4e:d7:b7:05:c2:40:ca:0c:27:e9:
87:47:0c:d5:fa:7c:45:0f:c3:d4:f5:58:8f:df:af:c6:1b:ff:
75:82:62:5f:f0:3c:d0:bf:5f:a8:17:fc:07:c9:e1:db:ca:2d:
64:90:c7:ef:86:77:4f:39:44:8e:69:df:69:5c:0e:c1:8d:46:
1f:fc:e0:2c:4d:4d:59:57:71:a1:c7:aa:d8:19:aa:09:ae:93:
1d:20:f7:21:6e:1b:22:1f:f7:f6:79:a4:0a:86:2c:34:5d:97:
f4:33:c0:dc:be:fe:1d:f9:66:a1:b7:71:e3:d3:80:44:93:3e:
b3:cf:fe:0c:10:25:00:6e:a0:89:36:65:6f:cf:a0:c3:24:8f:
2c:f0:3f:40:1b:bf:4c:50:3d:ed:5a:87:51:af:1f:ed:cd:55:
8d:04:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:13 2025 by rpki-client