Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmvUzbrLMjrOzFbAfAvxgq1ihEk.roa
File: fmvUzbrLMjrOzFbAfAvxgq1ihEk.roa (raw, json)
Hash identifier: w67cuWG1YtVYesKwTZsxR855VG3GGaVxx4zDWBnuasQ=
Subject key identifier: 7E:6B:D4:CD:BA:CB:32:3A:CE:CC:56:C0:7C:0B:F1:82:AD:62:84:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186884826443A1E8B8676E854A6044D1C82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmvUzbrLMjrOzFbAfAvxgq1ihEk.roa
Signing time: Sat 25 Feb 2023 11:14:35 +0000
ROA not before: Sat 25 Feb 2023 11:14:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:48:26:44:3a:1e:8b:86:76:e8:54:a6:04:4d:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 11:14:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e6bd4cdbacb323acecc56c07c0bf182ad628449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:c4:6b:ab:74:79:36:99:a5:fe:dd:f5:5c:
4a:5d:00:a1:26:7c:cf:55:7f:ad:df:4b:74:6d:7a:
9d:fd:68:ab:63:93:9b:26:b8:a2:9a:6c:f6:29:ab:
98:1e:0f:3c:59:7d:10:d8:02:af:b9:91:10:ae:bb:
12:83:ae:06:c7:79:6a:85:5f:0f:32:28:91:09:e3:
75:e5:9f:b1:1f:24:28:e4:3e:1d:c1:52:6a:1e:5d:
5f:98:95:97:12:55:80:64:76:28:ae:9e:d5:54:83:
d9:13:78:a0:64:82:a0:0f:62:ec:51:28:0c:eb:c2:
19:5e:72:11:1b:7a:d3:57:83:a9:b1:b8:45:65:cb:
ff:c1:00:a8:0b:12:42:ed:98:9e:f2:d7:33:54:10:
f9:98:0b:5d:2e:a1:16:28:a5:4a:35:3c:4a:1b:66:
04:09:c6:c0:39:b4:10:0e:89:d1:c7:39:b9:c8:eb:
5c:69:bd:7e:c7:fc:a0:25:e1:66:e1:61:19:5c:ae:
88:26:06:08:82:5c:74:22:1d:8d:2a:30:b5:21:cc:
49:c2:53:d9:7e:c3:09:4d:92:58:47:6b:58:bc:b5:
7d:d0:76:29:24:19:7c:85:ba:ed:89:40:31:1c:25:
d9:23:22:14:fa:05:c6:e7:3b:f5:54:b3:b6:da:df:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:D4:CD:BA:CB:32:3A:CE:CC:56:C0:7C:0B:F1:82:AD:62:84:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fmvUzbrLMjrOzFbAfAvxgq1ihEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:49:e7:d6:e1:3f:7e:a2:5b:3c:2b:46:cd:1f:b1:fc:61:6a:
10:9e:6c:c3:f1:c3:35:55:19:f1:3e:d4:c2:31:ba:bb:4b:52:
59:96:c7:f0:b7:3a:9b:5e:7d:e4:f3:cd:10:d6:a3:2f:45:09:
b9:8f:c4:75:27:01:75:3b:16:18:02:b7:47:3e:85:87:9c:6d:
7e:68:76:70:9b:8b:6f:53:ee:de:7a:4c:07:f4:7f:cf:93:e1:
25:bd:eb:e4:b8:db:2e:92:b1:e7:9e:ea:d7:98:aa:c0:7d:e1:
71:53:76:63:9f:63:ec:22:83:b8:21:40:e7:ac:43:ed:71:30:
67:d2:b6:e3:7c:69:59:d3:06:60:60:2a:85:8e:eb:bb:79:fd:
49:49:c5:85:65:97:5f:02:39:2a:95:6d:69:42:64:bf:8d:1b:
3d:d1:53:0c:23:d5:1a:04:d2:66:5c:81:e8:75:f6:a7:84:4d:
10:6f:54:15:a2:c0:87:84:c9:bf:91:6f:a1:ff:4f:d1:fc:4b:
5a:e8:32:da:9c:2d:9a:45:f2:bb:47:f2:35:44:89:63:b2:81:
83:9f:c1:83:99:e6:b3:74:b8:ac:64:fb:a6:5f:d7:94:87:b3:
9d:93:fa:b5:c4:ef:ad:e5:f4:70:2a:a8:6b:86:7a:b8:e1:22:
94:2a:b9:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaISCZEOh6LhnboVKYETRyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI1MTExNDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTZiZDRjZGJhY2IzMjNhY2VjYzU2YzA3YzBiZjE4MmFkNjI4NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8fEa6t0eTaZpf7d9VxKXQChJnzP
VX+t30t0bXqd/WirY5ObJriimmz2KauYHg88WX0Q2AKvuZEQrrsSg64Gx3lqhV8P
MiiRCeN15Z+xHyQo5D4dwVJqHl1fmJWXElWAZHYorp7VVIPZE3igZIKgD2LsUSgM
68IZXnIRG3rTV4OpsbhFZcv/wQCoCxJC7Zie8tczVBD5mAtdLqEWKKVKNTxKG2YE
CcbAObQQDonRxzm5yOtcab1+x/ygJeFm4WEZXK6IJgYIglx0Ih2NKjC1IcxJwlPZ
fsMJTZJYR2tYvLV90HYpJBl8hbrtiUAxHCXZIyIU+gXG5zv1VLO22t9WsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH5r1M26yzI6zsxWwHwL8YKtYoRJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZm12VXpickxNanJPekZiQWZBdnhncTFpaEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAhJ59bhP36iWzwrRs0f
sfxhahCebMPxwzVVGfE+1MIxurtLUlmWx/C3OptefeTzzRDWoy9FCbmPxHUnAXU7
FhgCt0c+hYecbX5odnCbi29T7t56TAf0f8+T4SW96+S42y6Sseee6teYqsB94XFT
dmOfY+wig7ghQOesQ+1xMGfStuN8aVnTBmBgKoWO67t5/UlJxYVll18COSqVbWlC
ZL+NGz3RUwwj1RoE0mZcgeh19qeETRBvVBWiwIeEyb+Rb6H/T9H8S1roMtqcLZpF
8rtH8jVEiWOygYOfwYOZ5rN0uKxk+6Zf15SHs52T+rXE763l9HAqqGuGerjhIpQq
uYo=
-----END CERTIFICATE-----
Generated at Thu May 1 07:54:57 2025 by rpki-client