Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frCG_gSpSAar8hJBosv5IpdoIJI.roa
File: frCG_gSpSAar8hJBosv5IpdoIJI.roa (raw, json)
Hash identifier: u9SXz0V9Tjkubfwjfi3oxiuHO06k4WkYb1R62izMrpw=
Subject key identifier: 7E:B0:86:FE:04:A9:48:06:AB:F2:12:41:A2:CB:F9:22:97:68:20:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DE154A5B74648ACEF3F3DF5DE9BB273E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frCG_gSpSAar8hJBosv5IpdoIJI.roa
Signing time: Wed 21 Jun 2023 13:11:57 +0000
ROA not before: Wed 21 Jun 2023 13:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:15:4a:5b:74:64:8a:ce:f3:f3:df:5d:e9:bb:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 13:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb086fe04a94806abf21241a2cbf92297682092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:61:d2:a7:23:9e:c4:b5:97:e3:86:86:71:
f0:34:2e:01:ae:4b:b9:4d:08:ba:59:e5:7e:e6:72:
cc:cc:6c:8b:df:7d:12:bb:c5:5a:73:a4:0d:51:d0:
84:bb:18:b6:22:e3:df:92:1c:d5:48:42:d5:52:f9:
91:05:7e:61:0f:de:19:87:14:55:bc:21:80:d9:a4:
f6:82:fe:e0:7c:82:92:a4:61:2f:f4:d0:3c:ca:d4:
90:fd:90:f4:ce:b5:cc:1c:b4:ef:1a:48:e8:60:80:
1e:22:b9:2b:87:c7:e0:52:74:aa:7b:af:00:ff:8b:
49:85:f5:d5:d0:87:bc:4d:a9:35:39:74:f4:78:20:
47:61:c9:e4:c5:82:29:92:9e:24:92:db:f6:c4:7f:
46:15:4e:4f:cd:91:58:22:53:08:ce:85:dd:d2:d7:
12:e9:cc:b4:5d:a2:a5:e6:16:e1:4e:0b:38:62:d7:
86:45:d3:49:c5:f4:6f:99:27:2e:fb:1a:16:02:34:
70:e8:ae:6a:24:5d:3c:1c:ef:bf:f9:34:3f:17:0b:
ad:7a:f0:8f:b8:05:6d:0a:87:0d:15:cf:79:e8:ca:
8e:3d:18:65:95:0d:01:ff:11:23:81:a4:3c:c0:df:
8e:9a:56:35:24:52:27:69:51:2b:4b:cf:00:59:ac:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:86:FE:04:A9:48:06:AB:F2:12:41:A2:CB:F9:22:97:68:20:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frCG_gSpSAar8hJBosv5IpdoIJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b2:f9:43:bd:bb:e8:26:df:5d:60:1c:b3:8b:03:91:95:28:
7c:4e:c0:99:4b:cc:34:e4:fe:39:50:58:df:08:df:06:d9:50:
93:3e:99:70:d4:23:ec:51:d0:07:43:c0:a1:d3:d5:65:b9:1b:
a3:13:82:19:2c:33:e9:3c:15:0f:64:81:b9:b3:b7:34:74:53:
f1:c1:f1:cb:6c:c3:d2:97:70:f3:29:9d:64:d4:5f:a5:ae:8c:
0c:fb:5f:f4:11:b5:25:ab:2d:44:ce:24:bc:b0:19:cc:bf:5d:
17:8b:b6:cc:c6:b0:a7:d4:f7:3d:5a:67:90:02:1e:a5:f8:99:
7e:5a:44:c4:59:2b:7e:5b:ab:c3:20:69:82:63:df:41:79:cc:
ae:d8:84:c4:28:4a:cb:5d:68:c8:a4:2d:f5:e2:8e:58:1d:01:
b9:0a:fc:8f:50:82:55:9d:21:c3:9f:b2:39:7b:bf:68:8e:fd:
34:28:ab:fc:49:fd:14:d1:fb:05:a8:d9:14:89:d0:ee:2e:91:
c3:41:d5:73:1f:12:93:74:02:53:4d:e3:8c:3a:de:9b:62:d0:
6c:35:bc:86:ea:30:e3:32:b8:29:bb:7d:c1:72:9f:17:ca:f0:
2b:10:fe:f7:0d:a2:bf:95:be:26:22:47:45:1b:97:8c:93:e8:
04:fb:3f:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjeFUpbdGSKzvPz313puyc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIxMTMxMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWIwODZmZTA0YTk0ODA2YWJmMjEyNDFhMmNiZjkyMjk3NjgyMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Nh0qcjnsS1l+OGhnHwNC4Brku5
TQi6WeV+5nLMzGyL330Su8Vac6QNUdCEuxi2IuPfkhzVSELVUvmRBX5hD94ZhxRV
vCGA2aT2gv7gfIKSpGEv9NA8ytSQ/ZD0zrXMHLTvGkjoYIAeIrkrh8fgUnSqe68A
/4tJhfXV0Ie8Tak1OXT0eCBHYcnkxYIpkp4kktv2xH9GFU5PzZFYIlMIzoXd0tcS
6cy0XaKl5hbhTgs4YteGRdNJxfRvmScu+xoWAjRw6K5qJF08HO+/+TQ/FwutevCP
uAVtCocNFc956MqOPRhllQ0B/xEjgaQ8wN+OmlY1JFInaVErS88AWayIWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH6whv4EqUgGq/ISQaLL+SKXaCCSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZnJDR19nU3BTQWFyOGhKQm9zdjVJcGRvSUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF+y+UO9u+gm311gHLOL
A5GVKHxOwJlLzDTk/jlQWN8I3wbZUJM+mXDUI+xR0AdDwKHT1WW5G6MTghksM+k8
FQ9kgbmztzR0U/HB8ctsw9KXcPMpnWTUX6WujAz7X/QRtSWrLUTOJLywGcy/XReL
tszGsKfU9z1aZ5ACHqX4mX5aRMRZK35bq8MgaYJj30F5zK7YhMQoSstdaMikLfXi
jlgdAbkK/I9QglWdIcOfsjl7v2iO/TQoq/xJ/RTR+wWo2RSJ0O4ukcNB1XMfEpN0
AlNN44w63pti0Gw1vIbqMOMyuCm7fcFynxfK8CsQ/vcNor+VviYiR0Ubl4yT6AT7
P+g=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:47 2025 by rpki-client