Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpUatdHP_eJRyigXp9jaK5LwGYc.roa
File: FpUatdHP_eJRyigXp9jaK5LwGYc.roa (raw, json)
Hash identifier: 12kvf6vPy7tjbATVq5qSC644VExvr33vX7M70u2BDxQ=
Subject key identifier: 16:95:1A:B5:D1:CF:FD:E2:51:CA:28:17:A7:D8:DA:2B:92:F0:19:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879E567FA5CE4A00A66C2CC6DEABE8F8EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpUatdHP_eJRyigXp9jaK5LwGYc.roa
Signing time: Thu 20 Apr 2023 11:04:41 +0000
ROA not before: Thu 20 Apr 2023 11:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:9e56:2506/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:56:7f:a5:ce:4a:00:a6:6c:2c:c6:de:ab:e8:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 11:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16951ab5d1cffde251ca2817a7d8da2b92f01987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:67:19:aa:aa:4c:9e:f1:f5:18:90:07:56:
77:bf:47:af:a9:1c:5c:f7:8f:86:f3:08:79:e6:67:
31:15:ee:7c:48:4e:e0:d9:53:62:13:cd:77:92:e7:
b4:9b:3a:3d:cc:2a:e2:90:e1:87:60:2e:61:7f:4c:
8c:2b:13:65:3b:7f:59:95:ac:d0:98:25:0d:60:0e:
d1:ea:eb:b6:f0:1a:af:8b:d8:11:2f:bc:62:0b:c0:
23:a6:a0:14:f4:e9:31:ce:83:11:75:ac:0c:2a:45:
a6:b8:51:14:09:57:b8:48:bd:7a:91:a9:87:c0:b2:
6a:df:07:71:d3:cd:ab:c9:b2:07:0d:3e:4a:e6:fe:
dc:fa:9e:98:d1:7d:ae:80:3c:14:ef:13:21:e6:19:
e7:61:f8:28:8b:65:29:bd:ad:b6:32:f5:9b:d0:51:
51:83:54:24:d5:bd:c9:99:20:f4:9e:00:e7:9f:9c:
80:43:cc:97:2e:72:e0:d1:86:82:49:14:33:98:95:
dd:96:50:73:18:7b:af:16:f9:fe:12:ca:bd:2d:92:
a8:6f:62:e4:91:35:25:17:9d:13:3c:f7:10:a1:56:
dc:63:33:62:1d:1c:9c:9c:37:0a:68:dc:78:ba:f2:
6b:ff:de:c6:59:ec:c7:5e:92:1d:49:e8:2d:f8:82:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:1A:B5:D1:CF:FD:E2:51:CA:28:17:A7:D8:DA:2B:92:F0:19:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpUatdHP_eJRyigXp9jaK5LwGYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:aa:79:a1:0e:cb:fc:f9:22:cb:eb:15:c0:ae:34:2c:ea:1a:
44:55:9a:a0:6a:21:99:61:de:93:7f:03:46:30:4b:f3:fe:a4:
e4:76:25:59:56:12:42:c9:2f:46:cb:2e:3c:e8:ac:e3:49:24:
0d:7a:a4:10:a3:86:30:0b:70:f4:b1:9c:35:80:49:4b:eb:58:
56:aa:c8:91:52:8e:ff:2d:a3:f0:e9:78:32:a1:48:3d:36:f5:
8c:f5:b0:1f:ff:cf:2b:73:00:f4:23:0b:ff:f4:07:20:b9:cc:
e9:e6:9e:0f:fd:ce:c5:cf:5b:13:3e:2f:20:31:8f:b7:86:30:
fe:4c:ca:1c:75:a8:a0:af:5d:ee:70:04:55:02:95:cc:67:18:
f7:64:c9:44:f1:71:31:7c:03:77:fe:dd:94:2f:30:5f:81:25:
3e:4b:83:d9:0c:f7:49:aa:ce:71:73:9e:f7:7f:81:f6:46:55:
05:fb:0f:75:e5:a3:34:f3:0a:3f:46:8a:f7:98:ad:a2:07:1e:
10:5c:eb:5f:dd:92:2b:39:99:fa:0f:4b:28:f5:5a:ea:79:d8:
5c:9a:78:70:81:e7:31:72:1b:84:4c:c5:4c:82:67:6a:e2:63:
f0:f4:1c:55:6a:43:ee:ab:b6:34:b7:56:3f:79:be:a2:2c:55:
d7:95:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:04 2025 by rpki-client