Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcLl1B70vrQ-Ew8LDlsGzQWdozo.roa
File: FcLl1B70vrQ-Ew8LDlsGzQWdozo.roa (raw, json)
Hash identifier: BUf1+ekuEQxqgXSSZVfS66pKzvsDGqZFW+VCWasjyxY=
Subject key identifier: 15:C2:E5:D4:1E:F4:BE:B4:3E:13:0F:0B:0E:5B:06:CD:05:9D:A3:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018857BFC207D0C54AD85AE4E47A2C78DB3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcLl1B70vrQ-Ew8LDlsGzQWdozo.roa
Signing time: Fri 26 May 2023 11:09:24 +0000
ROA not before: Fri 26 May 2023 11:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:bf:c2:07:d0:c5:4a:d8:5a:e4:e4:7a:2c:78:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 11:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c2e5d41ef4beb43e130f0b0e5b06cd059da33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:34:71:85:e9:41:38:81:69:cf:a3:ec:d8:
c0:07:2a:ed:6e:48:fb:00:06:76:61:7f:ad:0e:f1:
e0:e0:bd:ae:ab:c0:60:68:d2:78:38:f9:0c:e6:9e:
44:6f:5d:3d:d7:ba:30:f4:9c:a6:18:5f:91:90:43:
83:06:62:75:db:91:5c:55:c6:2d:7a:e0:55:64:12:
d4:90:34:2c:16:59:e1:76:a6:ce:b9:31:bb:75:71:
fe:be:74:76:d4:4c:a5:29:90:f3:43:df:a0:bd:42:
48:4c:22:80:23:d4:e6:52:a4:cc:7c:9f:43:84:0a:
15:91:1a:62:fc:36:dc:f3:04:b6:c1:02:b1:4e:93:
aa:b6:67:88:15:2c:54:49:0c:74:41:e4:aa:8c:50:
bb:b9:e1:d4:5a:57:6f:2e:7b:f7:72:df:8f:63:ef:
39:c9:9c:2a:68:06:9b:c3:43:b9:81:53:81:ab:3f:
3a:f2:a9:5e:05:ff:cd:fd:66:c0:bb:0f:b7:70:74:
2d:26:42:5b:e8:f4:fe:d6:7e:54:91:e7:86:f8:40:
38:c0:d3:d0:94:7c:12:06:70:25:a7:26:f7:c9:55:
40:be:97:0d:88:d6:e7:a7:3c:c3:d2:54:cf:80:b7:
0a:92:75:e8:bf:6b:bb:58:8e:b5:61:8a:5b:db:e9:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C2:E5:D4:1E:F4:BE:B4:3E:13:0F:0B:0E:5B:06:CD:05:9D:A3:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FcLl1B70vrQ-Ew8LDlsGzQWdozo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:d5:d9:12:f9:bf:3e:3a:7f:cc:26:14:2b:ff:77:6b:5c:d6:
28:b0:23:c8:d1:61:cf:cf:fb:7c:a9:58:ee:b2:bf:e4:83:d7:
53:60:e2:64:80:df:fa:a0:96:2c:46:f2:ab:9b:11:64:10:3c:
6d:73:d9:30:00:9b:6f:13:dd:d3:d5:60:f6:84:c8:c6:d3:f1:
a3:61:fe:a4:4a:f9:09:f0:76:27:11:ec:81:71:81:cd:1a:cd:
52:5e:ed:ba:8a:56:94:b4:8c:97:50:c4:a0:1d:a4:2d:12:a2:
27:ab:78:f7:65:4f:44:32:82:7f:66:90:e4:7b:d1:83:08:90:
a6:f5:1d:e6:fb:d8:54:ba:08:a9:70:55:ab:03:9d:44:01:f4:
1d:c5:b7:e4:8a:5d:53:86:28:ad:92:9d:a3:5d:c7:d7:c2:ab:
c4:2f:6e:62:c7:c7:d6:49:3a:51:e5:04:57:44:8f:bc:cc:e2:
74:10:f7:28:68:a4:45:3b:ab:db:0d:0b:3a:7b:e6:fb:56:86:
a4:b2:63:7e:af:e5:d7:02:df:a6:3c:3d:9d:e6:29:28:f9:44:
2d:d3:07:ca:37:3f:a6:38:fa:07:8f:9f:f3:25:a6:f1:35:14:
45:0f:f0:5e:17:0a:c4:b4:6c:86:76:77:76:31:83:96:1c:f0:
b4:28:86:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhXv8IH0MVK2Frk5HoseNs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI2MTEwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWMyZTVkNDFlZjRiZWI0M2UxMzBmMGIwZTViMDZjZDA1OWRhMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNY0cYXpQTiBac+j7NjAByrtbkj7
AAZ2YX+tDvHg4L2uq8BgaNJ4OPkM5p5Eb10917ow9JymGF+RkEODBmJ125FcVcYt
euBVZBLUkDQsFlnhdqbOuTG7dXH+vnR21EylKZDzQ9+gvUJITCKAI9TmUqTMfJ9D
hAoVkRpi/Dbc8wS2wQKxTpOqtmeIFSxUSQx0QeSqjFC7ueHUWldvLnv3ct+PY+85
yZwqaAabw0O5gVOBqz868qleBf/N/WbAuw+3cHQtJkJb6PT+1n5UkeeG+EA4wNPQ
lHwSBnAlpyb3yVVAvpcNiNbnpzzD0lTPgLcKknXov2u7WI61YYpb2+l4DwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBXC5dQe9L60PhMPCw5bBs0FnaM6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRmNMbDFCNzB2clEtRXc4TERsc0d6UVdkb3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJDV2RL5vz46f8wmFCv/
d2tc1iiwI8jRYc/P+3ypWO6yv+SD11Ng4mSA3/qglixG8qubEWQQPG1z2TAAm28T
3dPVYPaEyMbT8aNh/qRK+QnwdicR7IFxgc0azVJe7bqKVpS0jJdQxKAdpC0Soier
ePdlT0Qygn9mkOR70YMIkKb1Heb72FS6CKlwVasDnUQB9B3Ft+SKXVOGKK2SnaNd
x9fCq8QvbmLHx9ZJOlHlBFdEj7zM4nQQ9yhopEU7q9sNCzp75vtWhqSyY36v5dcC
36Y8PZ3mKSj5RC3TB8o3P6Y4+gePn/MlpvE1FEUP8F4XCsS0bIZ2d3Yxg5Yc8LQo
htU=
-----END CERTIFICATE-----
Generated at Thu May 1 11:15:17 2025 by rpki-client