Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwVmHRQuO8FZfFuIDe0qP1DwQL8.roa
File: FwVmHRQuO8FZfFuIDe0qP1DwQL8.roa (raw, json)
Hash identifier: AjJhOFwI5qYhr/TwhxKaVAATOecaU+zvsrlegRin6zI=
Subject key identifier: 17:05:66:1D:14:2E:3B:C1:59:7C:5B:88:0D:ED:2A:3F:50:F0:40:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870E649B313D5E4585FC60EECAB8643914
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwVmHRQuO8FZfFuIDe0qP1DwQL8.roa
Signing time: Thu 23 Mar 2023 12:14:46 +0000
ROA not before: Thu 23 Mar 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:64:9b:31:3d:5e:45:85:fc:60:ee:ca:b8:64:39:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1705661d142e3bc1597c5b880ded2a3f50f040bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:e8:ea:91:66:c2:c3:fd:55:4e:cc:de:58:
38:02:5b:e0:61:8e:a6:43:ba:9d:74:0f:15:0e:d4:
90:c8:59:77:b4:ed:98:1e:69:c5:e5:3b:d4:d3:e6:
85:3b:b5:f0:2c:60:61:a2:ab:b7:f3:ad:23:fc:64:
e7:ea:04:c0:b2:8b:a3:10:a7:db:85:5a:8a:ff:ef:
fc:01:54:e9:cb:0b:f9:7f:cd:12:0a:f4:04:89:ce:
b4:91:c9:81:a7:c0:06:d5:bf:2a:1e:02:24:d0:a3:
19:b0:61:a1:eb:12:42:99:9c:47:74:86:7c:e8:87:
dc:73:9a:30:c4:b3:85:df:c1:7e:85:84:c6:a7:9d:
bf:b5:ad:d9:39:cf:d7:04:2c:d2:ec:08:ee:b5:9a:
eb:3e:f2:68:04:08:3f:0d:9b:02:e5:af:bc:3a:93:
99:b2:9f:1c:6f:2b:59:35:78:d1:c8:11:01:e8:21:
0a:d7:ec:a1:2e:ce:a0:e1:b0:db:d1:11:6d:2e:a8:
da:b9:da:74:93:44:98:11:34:3e:71:1d:73:ca:76:
99:0d:a4:1d:15:af:8b:f7:17:73:b8:b3:40:33:eb:
71:39:e4:5c:43:1a:3c:1e:22:26:ca:ba:38:30:44:
ca:f5:55:c4:e4:3e:5e:79:fe:29:d8:e4:db:26:bd:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:66:1D:14:2E:3B:C1:59:7C:5B:88:0D:ED:2A:3F:50:F0:40:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FwVmHRQuO8FZfFuIDe0qP1DwQL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:6a:31:70:05:a4:35:a9:82:14:8e:f9:35:7d:a0:ed:b7:57:
28:cc:d6:3f:e2:32:ca:6a:d7:3c:92:38:ef:4b:7d:e3:4f:56:
8a:68:08:06:03:6f:06:ef:9b:d5:f0:e0:4d:e7:75:1b:d5:13:
ed:24:fe:41:d0:30:ce:e3:50:8d:2e:ad:06:33:28:78:9e:c0:
51:8d:9c:86:ff:93:fa:20:07:da:96:e1:98:2a:ea:a0:0c:38:
15:73:f8:6b:74:58:6f:e6:72:e9:d3:2e:27:09:5a:8e:ab:76:
46:7d:2c:d9:97:70:d6:aa:da:c2:11:c9:b0:db:59:67:15:6a:
31:d3:5c:f9:fe:51:67:c7:18:04:e6:70:da:75:04:8b:9e:6f:
36:7a:f6:e6:bd:c2:f4:1e:24:fe:63:ac:ca:aa:b9:45:bb:8d:
fe:ec:f1:e4:f9:80:10:34:a0:30:b2:6d:e7:54:ed:6c:77:7d:
ce:81:08:89:25:b5:22:c2:32:c3:0d:99:83:44:2b:e9:14:fa:
10:c9:2f:e1:0d:9b:b5:c5:3a:32:9f:7e:19:76:4e:54:2e:e3:
5a:79:27:60:6c:de:0f:4b:a9:58:6c:b3:c2:a1:12:ae:5f:71:
ab:57:ad:5d:95:6a:98:df:ef:c6:43:8d:4d:05:f6:df:fa:92:
01:45:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:47 2025 by rpki-client