Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fchv_8kCvVO9u7zPs7cVFePrpY.roa
File: _fchv_8kCvVO9u7zPs7cVFePrpY.roa (raw, json)
Hash identifier: 97bZph3JqY5fd9pY26+iM5cLoYvH07HFRRrwfHOcTEg=
Subject key identifier: FD:F7:21:BF:FF:24:0A:F5:4E:F6:EE:F3:3E:CE:DC:54:57:8F:AE:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018667A7CD053EF21A63DC118233A58F1241
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fchv_8kCvVO9u7zPs7cVFePrpY.roa
Signing time: Sun 19 Feb 2023 03:11:35 +0000
ROA not before: Sun 19 Feb 2023 03:11:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:67:a7:cd:05:3e:f2:1a:63:dc:11:82:33:a5:8f:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 03:11:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf721bfff240af54ef6eef33ecedc54578fae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:cd:01:66:ba:43:86:8b:e2:ab:0d:58:11:
4f:bb:7c:2a:4d:47:af:c9:c1:28:eb:60:be:d2:37:
f2:7e:6c:98:91:11:69:d2:ba:08:28:37:44:4c:8a:
64:bc:f9:32:b7:44:02:7b:d6:28:50:78:b2:de:f3:
54:af:0c:e1:3d:65:6f:11:99:29:6d:b6:07:7d:08:
25:2e:04:30:44:df:d8:f7:87:09:71:2d:3d:6a:8b:
0f:29:0b:f1:7b:9d:7b:60:d5:22:64:b1:ef:61:c4:
65:69:63:fc:59:31:c0:a9:49:45:3b:8d:5c:6f:92:
35:7b:bb:44:63:5a:22:e9:c5:b6:a1:33:27:07:1b:
36:bc:96:1c:69:a1:67:2d:0e:4d:04:fd:4a:e8:ea:
6d:cb:77:a1:e1:f0:49:90:12:d4:96:6a:00:86:b7:
71:a2:cb:bd:61:ca:29:c0:7b:db:57:77:b0:d4:e0:
7a:84:87:9b:26:14:5a:af:b2:6c:b3:98:eb:b0:3e:
1e:77:eb:e6:61:74:66:5f:48:b5:27:b5:c6:76:69:
e5:88:fa:6a:07:c0:19:b9:ae:16:02:02:5d:20:c2:
e4:a7:2e:ba:3c:7c:75:dc:b8:71:a6:34:60:94:f5:
6e:d8:b6:8f:2c:f1:84:93:55:a4:83:c4:15:82:a6:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:21:BF:FF:24:0A:F5:4E:F6:EE:F3:3E:CE:DC:54:57:8F:AE:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_fchv_8kCvVO9u7zPs7cVFePrpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:ac:7e:a7:ad:20:b9:16:a5:c9:49:c7:81:d7:56:e3:f3:b0:
3b:26:c5:10:ad:9d:7a:24:9a:d6:d5:a9:aa:b1:b2:d4:fe:25:
8e:92:d0:4b:96:55:dc:b5:de:0d:3f:5f:d0:d7:9e:6d:21:3d:
0c:6a:7e:3e:3b:ae:05:13:5e:1c:c8:92:eb:7b:d2:75:26:ee:
64:62:80:20:d4:dc:ce:f8:b3:ee:f7:66:cf:aa:e3:e8:42:af:
3c:d3:a2:fd:70:6e:06:8d:15:62:ff:43:28:bd:3b:ac:37:62:
43:8c:26:dc:ff:bd:c5:96:54:0e:90:fe:ed:83:75:b0:31:87:
8c:3c:4e:3a:f5:a0:1b:31:03:15:c6:4a:ad:cd:51:42:fa:f9:
f5:2b:31:51:c5:85:de:a7:18:6d:90:29:9a:d6:cb:8f:53:1c:
5e:f5:20:2e:35:e6:9f:33:35:d7:71:5d:68:57:70:41:ff:40:
7e:39:8a:2d:3d:b7:53:3c:64:f8:19:2d:2d:d8:ac:61:67:1a:
5c:7e:f7:6d:83:55:03:d0:f4:ed:49:30:03:c3:8f:54:2c:66:
98:62:a0:00:a0:17:f8:4e:39:0c:da:10:69:ab:8f:07:df:1b:
ec:d5:df:d6:06:51:28:60:ae:e3:b5:3e:21:58:80:1b:2f:c9:
61:7b:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:08 2025 by rpki-client