Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwBArEgbHv8QEKwon4fiSlewyBk.roa
File: FwBArEgbHv8QEKwon4fiSlewyBk.roa (raw, json)
Hash identifier: J7sSaUDzl8ttqiLMR+15YWPZdKc0sr1WXMA3GbhkzEM=
Subject key identifier: 17:00:40:AC:48:1B:1E:FF:10:10:AC:28:9F:87:E2:4A:57:B0:C8:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887A4C79AAE0361EBE378C587E096C702E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwBArEgbHv8QEKwon4fiSlewyBk.roa
Signing time: Fri 02 Jun 2023 04:10:12 +0000
ROA not before: Fri 02 Jun 2023 04:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:4c:79:aa:e0:36:1e:be:37:8c:58:7e:09:6c:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 04:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=170040ac481b1eff1010ac289f87e24a57b0c819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:2f:62:24:5b:55:ba:c9:03:18:a4:a6:67:
55:c3:6a:eb:4a:16:ce:40:1f:9e:dc:19:40:33:be:
06:dd:97:a9:7d:19:1d:08:59:6a:64:6d:32:57:d4:
c3:e7:3a:cd:bd:f4:31:e3:55:97:b0:1e:3a:f6:b3:
16:ae:b6:21:98:8c:94:8a:9d:54:1a:de:87:d1:5e:
82:e7:15:cf:f1:f2:4e:69:03:d3:ec:88:4a:1e:03:
7f:ae:0c:53:b0:2d:34:42:65:b0:60:b4:4f:8a:f9:
13:44:71:77:c7:d6:13:4f:dc:c5:f1:85:7b:15:ac:
cf:84:02:eb:e0:77:14:e8:b2:ea:5c:d9:9e:8b:60:
42:b0:8a:f6:a3:eb:0c:99:30:e7:d7:d3:92:82:59:
51:33:8c:15:83:5e:87:bf:bb:9a:52:37:4e:10:dc:
46:5b:2a:04:7a:07:c0:49:b4:2d:74:fc:90:8d:6a:
db:e5:2b:6b:62:1c:77:77:6d:d0:1b:e3:ee:f6:71:
fd:f7:a4:37:e4:de:30:b7:c7:10:be:3d:b6:47:ef:
2f:84:a1:ba:48:f3:20:b8:f7:e2:fc:17:7a:10:70:
7e:5d:52:a9:16:f9:aa:f9:16:65:e5:4e:98:57:60:
ab:cc:23:32:56:f2:c4:cc:b8:8b:c6:9b:72:e3:86:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:40:AC:48:1B:1E:FF:10:10:AC:28:9F:87:E2:4A:57:B0:C8:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwBArEgbHv8QEKwon4fiSlewyBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:9a:94:c5:bb:d6:9b:27:71:31:0d:69:88:8a:4f:80:14:01:
d1:2b:8a:83:51:9b:e3:c1:fa:a5:00:af:6b:f6:ae:04:60:eb:
24:f4:70:1a:9d:1f:47:ca:56:0c:a0:cb:67:b9:f5:37:ad:7f:
78:ad:d5:0c:62:5f:90:88:24:83:1c:6d:c7:24:97:8d:97:af:
f8:d0:28:73:e9:a9:88:44:43:84:ed:14:04:5f:66:af:9d:03:
d0:5a:5b:f8:87:4f:49:b3:4c:81:f6:e4:1d:a3:29:eb:e5:7d:
dc:e0:d8:6b:a7:46:6c:10:6e:79:e7:31:cd:27:f0:73:1e:6c:
6c:37:46:f5:0c:b2:45:76:cc:e3:2b:fd:bd:a2:b2:7e:96:59:
8b:6c:0d:6e:d1:7a:62:02:bb:58:77:90:3e:c1:be:08:b7:09:
e8:31:5c:6f:0f:6f:37:35:b5:36:89:25:9c:29:d0:be:ae:70:
a0:c7:d9:da:d1:4e:6d:98:c0:24:55:7f:82:5a:53:e3:3d:55:
d3:5f:e8:ae:7c:23:57:41:51:6a:01:15:c4:0c:e1:e0:e1:b6:
2f:f0:e3:f3:88:74:a7:37:8f:df:5b:4f:66:7b:ea:f3:9f:1b:
75:64:47:79:04:86:b2:51:8e:83:d0:ca:fc:97:87:d6:f3:08:
2c:8d:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:39:21 2025 by rpki-client