Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBTG_YAXD13SMkxkhM0z16dVCGY.roa
File: fBTG_YAXD13SMkxkhM0z16dVCGY.roa (raw, json)
Hash identifier: 6IpGsyAGCb3ESIMpCyXniRLWPRwTZaB4bWtZDXJzQDE=
Subject key identifier: 7C:14:C6:FD:80:17:0F:5D:D2:32:4C:64:84:CD:33:D7:A7:55:08:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FB8270F28D952592150E54CEAA2F9E05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBTG_YAXD13SMkxkhM0z16dVCGY.roa
Signing time: Sun 29 Jan 2023 03:11:47 +0000
ROA not before: Sun 29 Jan 2023 03:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fb:82:70:f2:8d:95:25:92:15:0e:54:ce:aa:2f:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 03:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c14c6fd80170f5dd2324c6484cd33d7a7550866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:45:3a:ed:4a:0e:01:ed:0d:90:96:ad:7f:
65:8c:73:24:28:19:0a:51:cb:39:eb:5b:3c:5f:54:
8a:ab:24:3d:14:08:d2:11:36:c2:ca:81:87:81:0e:
a9:e9:a9:ef:1e:da:1d:b2:52:d9:ea:46:3b:6d:ce:
67:89:7a:a3:6f:b5:c5:45:da:9a:44:c8:48:61:a7:
b9:60:7d:63:11:f3:09:1b:c2:f4:0d:6b:cd:3c:b2:
27:87:66:6b:30:e0:9b:6d:d6:45:99:e2:5d:7c:2a:
57:5c:6f:eb:54:b3:00:f8:a3:03:50:36:22:2e:6f:
73:dd:28:ad:76:c1:70:a8:83:6d:09:78:42:83:36:
03:76:e6:73:d3:9d:7a:73:15:f4:7b:e9:9d:03:52:
dd:8c:f7:7d:e1:8e:ba:ac:ef:ed:9b:ae:8d:f9:8b:
05:3e:44:5b:f1:d1:ad:7a:b6:92:44:34:5b:14:19:
7f:ca:78:0b:11:4c:e3:45:1c:d5:6a:d5:84:ce:17:
9d:fb:d3:f9:86:07:6a:c0:3f:20:01:a8:97:72:91:
a4:89:01:39:e6:c9:e8:c2:ce:89:a3:b4:7f:61:c3:
e7:6e:54:c1:71:38:2c:e0:3f:51:e1:6f:d7:cb:4b:
6b:75:33:64:cd:10:ac:82:9c:d8:dc:af:a5:a2:4e:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:C6:FD:80:17:0F:5D:D2:32:4C:64:84:CD:33:D7:A7:55:08:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fBTG_YAXD13SMkxkhM0z16dVCGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:fc:8a:f7:2e:99:1a:e7:a7:2b:9b:ff:3e:4d:cd:f2:35:13:
fb:f9:50:37:45:5a:8e:65:e9:e9:c7:c1:9c:af:31:e0:9a:65:
c2:1a:e3:32:60:1d:17:a9:0b:35:f1:22:c8:1a:96:24:da:39:
de:17:b7:2b:79:81:ae:28:f5:fe:07:9f:f4:6b:aa:00:44:6f:
b6:4f:27:3a:e6:1d:59:2f:fb:82:30:10:c9:45:af:b7:9c:e1:
b3:93:d3:2a:09:20:66:43:69:82:02:90:71:d8:0c:8d:83:3d:
b6:20:27:85:91:0b:71:38:b9:a0:16:04:fd:dd:79:23:29:2b:
51:38:dc:cf:bb:86:d1:90:2d:db:57:0a:1a:a2:1c:75:36:de:
e2:bd:86:43:6a:f9:6b:76:65:b2:bb:f4:1c:1a:31:cc:28:95:
cb:99:d4:b8:9c:c1:37:38:56:7a:e2:2f:7b:82:91:2f:67:16:
3c:41:a7:e7:bb:f7:c5:c6:2a:e6:80:a1:08:6f:b7:8f:c2:9d:
6f:0e:93:e3:19:2d:28:e1:fe:3a:f8:37:6b:fc:c1:4f:43:47:
c6:af:34:15:c0:3f:98:90:de:c9:84:4a:96:6f:2a:95:bd:74:
5d:7b:3b:02:57:89:2c:14:1c:80:26:4f:72:a0:2c:20:85:68:
09:de:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:43 2025 by rpki-client