Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCj2x73raSeSi1t12ryRrUPiRWI.roa
File: FCj2x73raSeSi1t12ryRrUPiRWI.roa (raw, json)
Hash identifier: lLrXXUEObfgE6gxj4pPMdSrYtsbNrUEBLmbwQcJ+hvw=
Subject key identifier: 14:28:F6:C7:BD:EB:69:27:92:8B:5B:75:DA:BC:91:AD:43:E2:45:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018510C216AE6923D369D47E879A70C86662
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCj2x73raSeSi1t12ryRrUPiRWI.roa
Signing time: Wed 14 Dec 2022 13:10:33 +0000
ROA not before: Wed 14 Dec 2022 13:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:c2:16:ae:69:23:d3:69:d4:7e:87:9a:70:c8:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 13:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1428f6c7bdeb6927928b5b75dabc91ad43e24562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:72:00:a1:87:e7:fb:bd:aa:1c:dc:eb:6f:
4a:ac:d1:6b:25:fb:6d:4a:4d:1e:f2:62:3c:84:95:
e9:34:23:f3:9a:b2:d5:f1:fa:ec:0d:81:df:90:f7:
d9:b5:45:25:fd:4e:f4:4c:e2:f9:3d:cc:70:5e:d1:
5a:68:11:fe:bb:d4:0a:60:b8:2b:60:77:c5:6d:b4:
f7:59:e1:6f:1a:91:4c:f9:5e:3f:37:be:6d:11:13:
a8:b0:ab:7c:d6:f9:18:ef:7e:94:78:62:5e:be:83:
7e:26:1c:d6:6f:22:2e:b4:2e:fd:ed:83:55:4f:a1:
90:71:43:67:9c:8a:54:1a:d2:68:ae:dc:81:03:c9:
3e:8a:e9:58:c0:c7:fa:e7:64:8a:b5:e5:ed:08:0f:
27:43:55:06:93:53:f1:da:a3:ca:d0:1b:d3:0b:22:
01:a9:1c:b7:c0:b3:f7:00:d2:87:d1:3c:46:6d:a8:
94:b1:55:ab:43:43:6e:a8:ea:91:43:0d:26:0d:17:
c7:b9:9d:65:e6:e7:72:78:98:ce:19:cf:fc:26:ae:
06:6e:a6:a7:24:5f:03:48:43:d7:db:0a:57:d9:d1:
d0:f4:6b:39:8c:d4:41:28:84:5c:40:83:2f:14:36:
17:b6:c9:c6:e6:3d:9a:a9:01:32:f8:ca:ad:cc:5c:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:F6:C7:BD:EB:69:27:92:8B:5B:75:DA:BC:91:AD:43:E2:45:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FCj2x73raSeSi1t12ryRrUPiRWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:77:2e:16:5e:b1:7d:ee:ba:d8:f6:eb:f5:7c:a2:82:ce:f1:
55:7a:25:ba:86:95:dd:19:25:29:8f:88:0a:d5:5f:c6:51:01:
db:9a:6b:4f:e4:06:96:9b:87:eb:a0:bd:65:92:d4:a0:7d:78:
9c:ec:76:5d:29:21:ca:2f:7e:66:ac:3e:9f:91:95:28:4b:d5:
57:a9:3a:7d:30:6f:87:30:36:d3:1a:a0:40:af:03:5f:3b:e7:
84:cf:ba:3c:cb:de:4c:97:a6:fb:fe:1a:4b:62:b5:d6:7d:0a:
6f:ab:cf:67:26:d1:2b:79:3c:22:30:ff:c2:de:c5:77:65:18:
74:f7:8f:93:a9:ff:80:ab:eb:a7:71:bc:fc:54:7e:da:a7:63:
57:c2:87:b9:60:c4:cf:d2:f3:98:23:72:46:20:fc:f2:b3:d8:
46:69:f4:0d:14:11:a1:9e:84:7b:ed:5b:df:ea:5f:34:4c:ad:
ba:c5:0d:3d:e1:a9:91:5a:c4:d1:e5:55:c4:a3:d2:dd:4d:a2:
81:fd:c1:9b:fa:52:ae:33:19:0f:47:c2:ad:bf:bb:55:61:9b:
9d:45:da:65:24:35:8c:5e:f5:1f:1c:ae:4b:59:40:c1:1b:50:
aa:da:c3:15:75:fe:db:a0:ce:8f:0c:71:d8:29:0c:b0:1d:89:
4e:10:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:51 2025 by rpki-client