Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FrNrOIX24dCGeHbtahdgI62SyDo.roa
File: FrNrOIX24dCGeHbtahdgI62SyDo.roa (raw, json)
Hash identifier: Y2/WrGaiH+ofeOwHb4I/zqGhRDdzEBOzZxjKYVbUwk0=
Subject key identifier: 16:B3:6B:38:85:F6:E1:D0:86:78:76:ED:6A:17:60:23:AD:92:C8:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018682E8B8FF947E54F09C07945FD9F4A886
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FrNrOIX24dCGeHbtahdgI62SyDo.roa
Signing time: Fri 24 Feb 2023 10:12:14 +0000
ROA not before: Fri 24 Feb 2023 10:12:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:e8:b8:ff:94:7e:54:f0:9c:07:94:5f:d9:f4:a8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 10:12:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16b36b3885f6e1d0867876ed6a176023ad92c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:f8:97:0c:c8:4f:8e:32:72:34:54:be:73:
7e:f3:21:f5:9d:b2:1a:36:61:f4:a5:53:ee:2f:d2:
c4:75:b4:46:ed:86:cf:8f:78:a9:a7:b8:fd:e7:8d:
64:0f:b8:f3:f5:1b:f5:dc:8a:aa:3a:58:02:8a:78:
c4:28:01:86:de:fb:a4:13:05:18:22:70:bc:5e:59:
1c:ed:9a:9e:a9:f5:bf:45:f2:58:10:1a:4b:d1:96:
79:a3:e7:df:9d:82:30:6e:09:15:77:ed:f2:5e:02:
7c:80:71:da:f4:e6:41:fa:a2:17:e4:0b:ca:54:6e:
6d:ce:9e:3d:23:79:46:bf:9c:17:e6:1a:52:58:43:
ec:8c:4c:98:51:36:a9:fc:04:d3:be:17:19:ac:cc:
fb:81:b3:93:0d:60:0e:fe:a3:6e:18:32:9a:71:32:
36:15:16:35:88:e9:c5:71:9f:5f:0c:52:fc:d9:3a:
9c:da:d7:59:d4:e8:d8:77:b5:d9:29:13:82:62:ce:
e3:ee:12:33:99:a2:d2:4f:ca:30:4f:22:e1:cf:9e:
c3:b1:c3:f9:78:43:1f:a3:55:48:28:f0:a5:8f:68:
80:40:86:ab:28:4a:ae:d4:e9:5e:bf:40:8a:c9:03:
38:93:14:86:97:4d:ed:1a:f9:a6:69:00:44:98:fb:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:6B:38:85:F6:E1:D0:86:78:76:ED:6A:17:60:23:AD:92:C8:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FrNrOIX24dCGeHbtahdgI62SyDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:55:a6:44:8d:b0:85:d2:0b:f9:18:90:47:31:f8:e4:d9:6f:
e9:79:0b:e8:f4:f7:26:e5:b8:17:6f:fd:8d:85:74:e6:d8:75:
a9:50:a2:38:ff:79:1c:ed:92:d2:a4:d8:a0:b0:e2:97:ea:cc:
6e:a4:5f:63:57:a5:55:8f:e9:fb:ca:f3:9a:b4:bd:e9:15:ce:
77:ae:dc:d1:ab:31:90:47:93:18:de:54:b8:24:39:75:29:08:
fe:51:bd:c1:5e:55:36:07:1d:75:5c:d6:52:0a:aa:6b:8c:60:
10:40:33:c6:74:ef:23:e0:4b:a0:c3:54:95:79:c3:ca:83:a5:
08:5f:29:5d:0d:91:93:15:31:f2:5b:07:2c:4c:7a:19:e3:66:
dd:eb:e4:30:30:a0:ad:f5:64:39:ca:f3:84:9b:3c:ee:63:56:
3d:6f:4e:ca:82:2a:c8:3f:95:eb:c2:14:04:c9:ee:a7:ca:97:
f7:e4:67:53:fd:a1:d5:f6:d5:d5:d2:bc:e2:49:ef:1c:e6:3f:
88:f8:77:30:69:eb:94:a2:83:1f:28:e5:e2:3b:63:17:7e:04:
1d:c9:64:58:00:1e:64:ae:dd:67:ec:97:d6:0f:9f:a7:f6:ec:
52:c6:7f:c5:8c:64:e6:a9:16:7e:3e:b1:ab:b8:0f:19:c2:2c:
00:82:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:40 2025 by rpki-client