Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmyYbFPdXFqY7FCjyPoCSYGo9e4.roa
File: FmyYbFPdXFqY7FCjyPoCSYGo9e4.roa (raw, json)
Hash identifier: eyPc33//fqcoxlgyMmsVFXkQ2+aYlrJAgq5LPs0XucU=
Subject key identifier: 16:6C:98:6C:53:DD:5C:5A:98:EC:50:A3:C8:FA:02:49:81:A8:F5:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854B55A39CB31E61BBC8C5329328791F6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmyYbFPdXFqY7FCjyPoCSYGo9e4.roa
Signing time: Sun 25 Dec 2022 22:09:41 +0000
ROA not before: Sun 25 Dec 2022 22:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4b:55:a3:9c:b3:1e:61:bb:c8:c5:32:93:28:79:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 22:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=166c986c53dd5c5a98ec50a3c8fa024981a8f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:64:3c:35:62:75:51:01:13:a2:9c:06:f9:
8f:ef:96:94:cd:70:58:86:92:6d:4b:d3:7f:fa:df:
af:b0:96:f9:d1:67:cf:05:ab:c0:25:7a:22:c4:7d:
f9:77:b2:9e:66:57:90:72:a4:1c:69:dd:e3:2d:4e:
8f:2f:d1:b0:56:cc:07:a6:fe:b4:33:7c:0b:23:96:
f4:6e:b0:64:90:0e:6c:22:dc:6c:b0:45:5b:e4:ec:
64:91:50:1d:cb:38:f3:0d:4f:eb:34:94:bd:b8:d0:
76:6d:d6:86:ff:32:06:46:ac:44:41:64:53:c3:41:
3e:dd:17:67:6c:2b:c1:62:70:3b:ed:ca:b8:ba:2c:
66:95:ef:df:72:d1:dd:56:49:04:52:97:2f:09:49:
72:b3:d7:f2:75:6c:bc:51:74:19:74:25:ef:19:71:
0e:26:8f:85:74:3a:8f:04:ff:e9:8a:cf:3b:0d:d1:
bb:57:eb:bc:d8:3a:ce:4f:55:c4:03:42:7f:6a:85:
5b:64:c8:b0:d9:7d:56:60:51:bf:c9:a8:bb:86:11:
78:8e:23:e8:73:b3:c4:aa:65:3c:48:cd:aa:da:00:
7d:76:de:59:3d:45:58:44:72:56:42:44:c5:18:e3:
07:d2:5c:26:a3:6a:00:fe:05:75:a1:96:5d:ce:da:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:98:6C:53:DD:5C:5A:98:EC:50:A3:C8:FA:02:49:81:A8:F5:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FmyYbFPdXFqY7FCjyPoCSYGo9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:08:74:19:75:d9:4f:5e:fb:35:39:9e:1c:a5:ce:da:82:74:
67:25:b3:bd:71:e4:59:fe:00:8d:8d:ee:46:3f:8e:5f:d7:6a:
75:39:42:53:58:cb:05:7e:0f:9d:d4:e9:5c:97:26:08:1b:12:
5f:86:09:d6:8f:7f:19:35:c6:b7:f1:e9:bb:8d:1e:ef:da:a8:
50:f6:b5:42:8e:7d:a3:24:73:c2:3b:9a:8e:3c:98:f0:ab:0b:
5d:ef:d6:65:46:14:97:17:24:2c:ba:6e:75:eb:21:d6:53:4a:
fb:8e:61:c6:58:f3:49:0e:a9:de:98:ca:2a:3c:ec:37:a3:c5:
c0:2f:68:57:c4:34:43:21:6d:91:08:7b:d4:3f:49:07:ff:3f:
04:59:4b:65:f1:fe:75:39:61:52:51:a2:13:3f:a1:fe:90:e4:
f0:5e:6f:c0:79:ea:01:ed:b0:60:ba:60:09:3c:fc:5a:f9:23:
1a:56:d3:77:a9:b1:ef:ec:5b:22:77:97:e5:ef:96:c4:55:40:
84:2d:f1:c1:d0:f5:0f:ba:d6:c1:3f:5c:39:fb:53:be:9c:a2:
fe:b6:a0:ac:9c:35:70:de:9f:e1:2a:b2:a9:be:e6:e7:5f:a3:
82:b3:11:7f:18:42:d0:41:aa:9d:0d:66:15:ce:2f:2c:23:1a:
58:44:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:51 2025 by rpki-client