Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmRIlD02bRz6KLQjBgXNZyyIyS4.roa
File: FmRIlD02bRz6KLQjBgXNZyyIyS4.roa (raw, json)
Hash identifier: oPt8Eq7aDd4MGaG2IKurVE+KKIuHTZIk6peDwvA5I/4=
Subject key identifier: 16:64:48:94:3D:36:6D:1C:FA:28:B4:23:06:05:CD:67:2C:88:C9:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B1B629012E48BEE08F2E872A541E9A7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmRIlD02bRz6KLQjBgXNZyyIyS4.roa
Signing time: Sat 26 Nov 2022 02:13:35 +0000
ROA not before: Sat 26 Nov 2022 02:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b1:b6:29:01:2e:48:be:e0:8f:2e:87:2a:54:1e:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 02:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=166448943d366d1cfa28b4230605cd672c88c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bd:d9:e2:71:49:5d:ef:8e:16:46:58:f5:ac:
8d:66:04:3b:1f:e5:dd:0a:da:60:f0:c4:d1:79:b4:
b7:ee:f8:44:ba:45:78:c0:72:40:cd:11:80:87:bb:
76:e9:b2:ad:d0:fd:4a:b1:97:d7:b1:68:8a:2f:ec:
16:1c:e0:d0:26:ea:33:37:dc:53:2f:1d:69:3c:04:
7a:e2:96:42:09:e3:aa:50:0e:bf:c1:32:73:84:8e:
28:55:4f:ff:e7:e0:a2:b5:4a:a4:58:57:fc:b5:78:
5d:d3:a5:f4:ee:d1:6f:e2:3f:7e:06:f6:a3:d0:c8:
eb:00:66:af:be:97:70:74:b0:27:b6:6d:c1:e0:59:
ce:af:ff:3d:f8:de:ae:53:db:18:3d:00:db:9d:da:
3b:ca:94:99:e1:36:28:7d:1a:cf:fb:c1:c9:b7:13:
f4:25:da:bc:67:57:d0:9c:89:29:89:84:54:45:6e:
0f:6a:9a:2d:0f:8e:bd:68:3e:e2:8c:6e:82:d1:cf:
11:39:e3:d9:87:80:c2:be:0e:4e:7c:91:68:e3:ec:
c5:d4:4a:3b:59:a5:67:3f:bf:65:e5:a9:9a:31:e6:
69:5c:01:90:f6:51:07:5b:12:1b:e7:01:20:4e:b3:
5e:f0:25:d3:9e:31:8e:91:ac:52:26:4c:73:a6:42:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:48:94:3D:36:6D:1C:FA:28:B4:23:06:05:CD:67:2C:88:C9:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmRIlD02bRz6KLQjBgXNZyyIyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:86:7e:21:86:c8:29:b8:67:a3:c0:f6:40:43:70:8a:1b:98:
a4:b3:35:64:84:01:a6:a3:7d:d8:0b:c8:29:a1:2c:86:b8:64:
6f:8f:e7:8e:82:88:1b:a1:fb:af:bf:13:90:43:4b:99:ee:2e:
be:11:a4:df:a1:39:b7:e5:cc:e8:b5:56:1f:a7:4e:ec:53:48:
0a:c9:1d:c8:d8:4b:fa:5e:df:80:e0:16:80:44:6f:f9:a7:53:
01:1e:2e:f7:70:2d:c1:40:fb:fc:03:b6:0f:1c:f5:94:5c:dd:
bc:4c:19:84:29:98:5a:4e:9a:7c:3b:0c:fd:83:bf:b6:0d:bd:
59:0b:61:b3:37:7e:7a:93:21:44:b6:89:0d:71:0d:00:4f:6f:
3e:ca:cd:3d:9d:ca:54:52:0c:fc:18:f9:c9:11:8e:2b:fc:5c:
c3:50:db:13:f5:27:a2:61:80:f7:99:16:7f:d7:33:d3:d3:13:
b6:29:df:4e:a4:c7:30:22:b5:25:7f:60:fc:86:79:6e:1b:61:
ad:4a:ac:b3:02:7d:29:67:c1:8a:81:90:72:62:9f:8a:95:d2:
f7:8b:0f:7e:19:c1:1c:81:d0:11:3d:60:c7:b5:56:59:ca:8e:
7c:8b:3d:e0:88:51:30:04:20:6c:33:89:aa:96:e8:fe:42:e1:
e9:6a:ed:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSxtikBLki+4I8uhypUHpp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI2MDIxMzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjY0NDg5NDNkMzY2ZDFjZmEyOGI0MjMwNjA1Y2Q2NzJjODhjOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb3Z4nFJXe+OFkZY9ayNZgQ7H+Xd
Ctpg8MTRebS37vhEukV4wHJAzRGAh7t26bKt0P1KsZfXsWiKL+wWHODQJuozN9xT
Lx1pPAR64pZCCeOqUA6/wTJzhI4oVU//5+CitUqkWFf8tXhd06X07tFv4j9+Bvaj
0MjrAGavvpdwdLAntm3B4FnOr/89+N6uU9sYPQDbndo7ypSZ4TYofRrP+8HJtxP0
Jdq8Z1fQnIkpiYRURW4PapotD469aD7ijG6C0c8ROePZh4DCvg5OfJFo4+zF1Eo7
WaVnP79l5amaMeZpXAGQ9lEHWxIb5wEgTrNe8CXTnjGOkaxSJkxzpkL1PwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBZkSJQ9Nm0c+ii0IwYFzWcsiMkuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRm1SSWxEMDJiUno2S0xRakJnWE5aeXlJeVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEqGfiGGyCm4Z6PA9kBD
cIobmKSzNWSEAaajfdgLyCmhLIa4ZG+P546CiBuh+6+/E5BDS5nuLr4RpN+hObfl
zOi1Vh+nTuxTSArJHcjYS/pe34DgFoBEb/mnUwEeLvdwLcFA+/wDtg8c9ZRc3bxM
GYQpmFpOmnw7DP2Dv7YNvVkLYbM3fnqTIUS2iQ1xDQBPbz7KzT2dylRSDPwY+ckR
jiv8XMNQ2xP1J6JhgPeZFn/XM9PTE7Yp306kxzAitSV/YPyGeW4bYa1KrLMCfSln
wYqBkHJin4qV0veLD34ZwRyB0BE9YMe1VlnKjnyLPeCIUTAEIGwziaqW6P5C4elq
7QY=
-----END CERTIFICATE-----
Generated at Thu May 1 21:07:37 2025 by rpki-client