Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_FLCAB2ZYGjqGtmQMCZv8InXH8.roa
File: b_FLCAB2ZYGjqGtmQMCZv8InXH8.roa (raw, json)
Hash identifier: +e0KlRz8K4bmpDQ9P/zq9mqPk9QeLIWUIlW43UtaTl8=
Subject key identifier: 6F:F1:4B:08:00:76:65:81:A3:A8:6B:66:40:C0:99:BF:C2:27:5C:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F2E3229DA1404ACCDFEBB703D9F0BA5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_FLCAB2ZYGjqGtmQMCZv8InXH8.roa
Signing time: Mon 14 Aug 2023 07:11:59 +0000
ROA not before: Mon 14 Aug 2023 07:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:e3:22:9d:a1:40:4a:cc:df:eb:b7:03:d9:f0:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 07:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff14b0800766581a3a86b6640c099bfc2275c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:9a:d8:79:73:27:da:86:95:14:60:ce:0c:
2f:95:86:ae:47:08:6a:ab:84:c0:61:4e:cf:9c:2a:
7d:cc:bf:4f:93:e2:ca:44:72:5f:a7:42:bc:93:77:
bc:d7:4f:fb:d7:02:9d:db:47:84:b0:6f:b9:c3:6f:
96:6d:51:88:9c:2b:de:f2:77:3f:bc:71:95:68:62:
81:73:6c:2e:cd:e1:72:fd:7d:43:6f:b4:af:db:0e:
1a:7f:d6:36:6b:85:47:a5:4b:eb:23:1b:f5:e0:7e:
fc:34:76:ae:0f:6a:25:6c:1d:77:d0:3f:cb:d8:92:
eb:da:11:34:ca:6e:3e:69:90:8d:2a:f2:bc:20:00:
ba:e4:94:55:1c:4d:f9:37:0c:1e:54:37:15:0c:c0:
27:13:cb:a1:43:7a:95:30:00:c9:3f:6e:8c:07:7d:
63:d5:4a:a1:ed:a8:61:91:69:b3:f6:e2:b3:4e:15:
3e:e6:f9:c2:7c:55:2e:4e:a6:ce:7d:53:6b:7d:c8:
21:e7:ed:16:39:20:41:e2:55:9c:97:ba:57:7b:d7:
8e:7d:26:aa:6d:56:53:21:86:b4:9d:02:9e:72:8a:
69:18:82:07:2a:26:54:91:f1:b1:f7:78:8c:26:81:
d8:43:f4:43:73:20:41:29:27:bb:67:65:99:df:a2:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:4B:08:00:76:65:81:A3:A8:6B:66:40:C0:99:BF:C2:27:5C:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_FLCAB2ZYGjqGtmQMCZv8InXH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:b2:99:dc:1b:a4:9a:0f:2b:8e:6c:23:10:5f:9c:78:8b:c5:
c4:aa:4d:ba:18:7b:c1:eb:08:49:a8:b9:6c:c5:1b:95:a1:eb:
49:3b:86:b0:a6:8b:3f:91:9b:75:47:5f:ea:5f:28:8a:ac:56:
61:83:6b:e3:23:45:db:99:fb:95:49:35:7d:b3:02:3a:d4:d3:
da:e3:7f:18:32:41:80:f0:3b:b7:ef:a9:29:cd:3c:49:52:89:
bb:bb:28:ed:3d:eb:92:8a:b3:0c:79:5b:ad:db:b8:cc:a3:96:
4f:dc:2d:a1:5b:30:ff:49:60:05:90:90:e0:9b:c1:51:74:96:
df:75:3b:d6:32:49:9d:7a:8a:ae:33:ad:74:54:b4:ae:89:cf:
29:23:23:d5:8a:77:74:44:19:17:1c:e1:3a:35:58:dd:6a:a4:
26:fe:89:4d:f6:44:df:14:e3:c5:94:9e:88:da:0e:e2:6b:a4:
14:4a:b6:26:5c:40:ac:94:9a:a7:86:f2:0f:12:81:eb:b6:60:
64:47:4a:af:48:57:29:ea:e3:7a:4c:2e:a4:cd:2d:b2:84:b6:
f1:b1:2e:86:16:ff:68:97:1b:e1:fb:69:a1:5f:48:7b:76:52:
4c:a6:43:05:25:56:f3:56:17:34:b6:a2:43:df:4c:01:72:03:
14:a8:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:31:44 2025 by rpki-client