Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCIabXYctNBhLnobx15tmUXPVUk.roa
File: FCIabXYctNBhLnobx15tmUXPVUk.roa (raw, json)
Hash identifier: R+jCCewlScm8GGrTER1qsbgyCDdHUsupb20fyWFCid0=
Subject key identifier: 14:22:1A:6D:76:1C:B4:D0:61:2E:7A:1B:C7:5E:6D:99:45:CF:55:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843A9C90A854BC735EE16BC24D9044A492
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCIabXYctNBhLnobx15tmUXPVUk.roa
Signing time: Wed 02 Nov 2022 23:10:49 +0000
ROA not before: Wed 02 Nov 2022 23:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3a:9c:90:a8:54:bc:73:5e:e1:6b:c2:4d:90:44:a4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 23:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14221a6d761cb4d0612e7a1bc75e6d9945cf5549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:e4:a4:da:7f:6e:07:e0:e4:f5:f0:87:99:
13:5a:85:7d:32:a2:07:09:56:2b:62:0e:85:05:a6:
3a:b7:c2:4e:33:e9:bf:52:c5:f0:26:89:d6:c1:78:
69:fb:1a:c0:07:51:0a:eb:45:ca:cc:78:d4:d0:2b:
0d:b5:9e:98:4c:9f:a9:a7:23:c0:45:f9:3a:ae:ca:
38:e8:2d:35:7a:4a:11:a8:1f:d3:51:4a:48:2f:dd:
03:c8:06:f6:2f:b9:b1:36:ca:77:6d:dd:18:0c:52:
e7:d6:44:2a:10:58:80:5d:e0:11:c8:01:bd:37:c3:
3b:c2:76:39:4f:fd:35:65:b0:60:2e:58:a6:f8:34:
cc:23:fe:fa:39:1e:5a:13:7d:ee:85:bc:b1:60:12:
71:c8:af:4a:80:7e:99:ad:95:29:1f:45:69:3f:15:
04:38:54:33:2b:2d:62:82:5a:99:ae:3a:22:50:70:
1e:af:f9:e8:be:a6:5d:82:3a:47:4c:0d:fc:76:1b:
9f:c5:1c:91:6d:67:5b:ee:15:50:0c:e0:75:55:ca:
11:0c:b9:9f:d5:90:b6:43:ed:25:13:c4:ad:3b:7d:
54:df:57:6d:d8:24:49:da:70:ac:0b:0c:4f:1a:00:
5f:57:95:b7:0a:4e:54:56:1b:6d:c8:99:ec:03:51:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:22:1A:6D:76:1C:B4:D0:61:2E:7A:1B:C7:5E:6D:99:45:CF:55:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCIabXYctNBhLnobx15tmUXPVUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:f5:d0:d7:b9:28:41:7e:ec:d6:56:0d:df:fa:6f:12:36:91:
78:de:86:66:47:bd:65:4e:64:0f:a7:05:20:13:a6:7d:9c:1a:
f5:fa:72:75:a0:39:6f:89:f5:cc:79:b5:37:a5:4b:64:0b:dd:
ce:70:86:bb:a3:94:86:7c:dd:f0:34:45:20:4d:6e:d7:3a:96:
3a:cb:55:ba:4a:e8:15:d6:8b:b1:db:69:de:45:43:36:2a:1b:
42:91:fe:d2:a6:31:e2:0e:71:79:31:9a:0e:ad:c5:86:10:8a:
21:39:22:27:c9:42:74:6c:55:38:46:fd:1a:c5:49:88:25:77:
fb:e6:4b:c7:36:b6:b4:8e:f1:ae:1c:42:a5:4f:c8:25:97:8a:
9c:63:a5:a7:89:12:15:63:85:a5:83:85:1e:dd:9e:23:cf:c9:
55:fa:3c:69:aa:c3:c7:5f:ff:e5:55:5b:fc:b3:14:06:9b:36:
00:1f:5c:d4:91:e5:cc:c8:16:d9:cd:db:7a:66:86:41:42:7f:
da:95:0c:b3:a4:bb:c9:0f:94:12:7a:73:51:a5:fd:fa:1d:f4:
10:b4:6a:29:32:e1:95:e8:e0:ea:b3:38:08:d7:54:f0:01:e7:
61:f1:e9:f9:9c:c5:fa:c8:38:76:54:4f:aa:73:1c:7b:8c:9f:
3e:34:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:47 2025 by rpki-client