Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpzQ8l4F7n6RMHmOhGWvWoou8Ho.roa
File: FpzQ8l4F7n6RMHmOhGWvWoou8Ho.roa (raw, json)
Hash identifier: tXB7G46dFCNYony6HS0YkNz87ZwjQkfTd/378ATux9I=
Subject key identifier: 16:9C:D0:F2:5E:05:EE:7E:91:30:79:8E:84:65:AF:5A:8A:2E:F0:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859D4D7BB32D099A16E0493710BC89FEA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpzQ8l4F7n6RMHmOhGWvWoou8Ho.roa
Signing time: Tue 10 Jan 2023 20:09:38 +0000
ROA not before: Tue 10 Jan 2023 20:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:4d:7b:b3:2d:09:9a:16:e0:49:37:10:bc:89:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 20:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=169cd0f25e05ee7e9130798e8465af5a8a2ef07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:03:c5:c3:b1:bf:6d:e4:8e:be:ce:ac:41:
4c:6e:4f:96:61:0f:10:5c:cd:5b:ca:6e:5a:eb:b7:
eb:ec:0e:fd:ec:35:49:40:9f:c5:fd:df:c6:e8:be:
ce:57:46:96:74:a2:31:f5:86:e0:eb:30:3c:fd:83:
27:89:84:36:ab:05:c1:08:75:43:de:2c:1d:2d:53:
69:72:45:3e:0a:fa:1d:99:f0:6d:3c:46:d2:7f:85:
e0:ff:22:53:34:af:a2:16:cf:4d:95:b4:7d:2d:af:
fb:45:c2:3e:d5:3c:f5:33:eb:0c:97:ca:c9:45:3d:
45:50:ed:3d:2f:2a:bb:fa:3c:50:f6:a1:ad:bd:0a:
17:32:42:85:1c:f4:31:d0:d5:f9:58:64:85:c0:08:
d7:86:8b:02:f8:a1:1e:02:e9:f4:0b:30:0c:d4:af:
a7:1b:7f:71:c8:c5:44:c2:15:7a:26:35:1e:d4:bb:
1f:07:80:69:37:95:6e:cd:b7:31:d1:16:09:50:ba:
42:f8:cd:a3:13:c9:20:af:9a:16:30:76:f3:3a:d5:
09:be:15:c7:19:0f:15:72:df:9e:e3:d8:b4:6c:f6:
91:64:76:7a:4a:ee:2f:5e:5e:5e:63:4e:90:7c:d9:
c5:2a:80:48:90:f1:ee:35:15:ad:64:73:f0:17:7a:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9C:D0:F2:5E:05:EE:7E:91:30:79:8E:84:65:AF:5A:8A:2E:F0:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FpzQ8l4F7n6RMHmOhGWvWoou8Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b7:e7:3f:92:84:af:1f:d5:5f:08:12:b9:4e:7a:54:33:59:
02:8b:04:bd:55:39:96:fa:f6:0d:00:dc:7f:c1:fc:fd:2d:06:
11:d5:c7:85:fd:62:15:90:1b:6b:f2:d6:e2:2b:35:0c:8f:5c:
e8:b2:14:ef:06:0e:90:32:46:aa:2a:70:ea:f8:a7:f3:b5:aa:
43:b5:59:2a:48:ea:3c:82:ba:1a:3e:83:56:0f:3c:a7:5d:33:
a0:3f:57:7a:25:e3:77:6b:d0:d3:55:7c:4e:3b:76:ad:70:8b:
2f:6c:82:cd:74:71:4b:60:8e:05:c8:5b:14:af:1b:06:46:81:
49:46:7d:c8:ab:a9:b2:11:78:96:01:44:d5:e9:dd:2b:31:1d:
a5:be:3f:20:b4:a2:f0:79:c0:03:90:45:9e:76:93:91:82:4f:
4a:03:91:79:dc:5f:b4:b9:30:05:94:cc:6f:c8:78:77:23:e8:
b1:23:e7:e6:40:42:c7:d3:29:28:a5:36:54:37:24:ff:68:0d:
c3:72:de:39:60:5e:af:6c:19:98:d2:c0:b7:19:7a:d0:d9:3f:
1a:38:89:ee:4d:83:cf:b1:17:69:fc:68:7d:ba:4d:1a:63:90:
84:de:ff:8d:d3:d8:88:ac:4e:f6:25:e7:b9:a5:9a:65:c2:4e:
c3:8c:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:42:02 2025 by rpki-client