Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FDXson41C8T6_E3WpoIq7O10tZo.roa
File: FDXson41C8T6_E3WpoIq7O10tZo.roa (raw, json)
Hash identifier: 22pi7iuNSimVacCzqt4bZiOYe/zwy8aM+E4Gn0+SXbo=
Subject key identifier: 14:35:EC:A2:7E:35:0B:C4:FA:FC:4D:D6:A6:82:2A:EC:ED:74:B5:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871DD5DA826DC41547C68BA2B356F92702
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FDXson41C8T6_E3WpoIq7O10tZo.roa
Signing time: Sun 26 Mar 2023 12:12:47 +0000
ROA not before: Sun 26 Mar 2023 12:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1d:d5:da:82:6d:c4:15:47:c6:8b:a2:b3:56:f9:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 12:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1435eca27e350bc4fafc4dd6a6822aeced74b59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:f3:2e:13:54:20:75:da:a2:39:cb:19:52:
1a:67:1f:8e:73:86:2a:63:a9:64:07:40:4a:27:8e:
ac:f3:83:0b:d8:d5:f2:4f:df:a9:65:de:0b:1c:6c:
53:87:2e:4c:6e:9f:52:90:bb:ad:77:1a:cd:22:e5:
21:2d:94:46:ad:91:20:d1:21:e4:d1:a7:12:f6:93:
f8:db:8e:4c:0a:08:b9:6f:73:d0:6d:1e:0a:c4:23:
8a:2a:18:cc:f8:74:4a:70:61:54:e4:2d:cb:13:53:
76:d3:02:f6:05:94:0c:94:0f:de:52:9a:b2:97:a9:
62:1f:7a:cd:81:56:8c:f9:4b:7d:4e:3d:3f:f2:1b:
cb:9b:a0:36:b8:7d:83:c8:c6:e1:9c:77:b9:c4:04:
8b:17:6f:47:7a:6a:14:9d:02:11:31:50:d0:e2:37:
f0:f6:dc:c7:75:b9:01:37:b4:97:02:75:cd:48:a9:
a4:64:68:04:20:d8:fb:38:86:e6:a6:f0:93:fc:74:
32:2f:ab:63:46:7b:a8:21:3c:09:e6:ab:f7:72:3a:
27:a5:ec:b5:b1:28:47:53:77:58:d4:e2:16:f9:57:
f3:2e:f4:5e:75:10:10:f2:30:c1:2a:ab:0a:20:78:
8a:57:a9:1a:d8:e1:40:58:ff:99:e3:07:ea:af:7e:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:EC:A2:7E:35:0B:C4:FA:FC:4D:D6:A6:82:2A:EC:ED:74:B5:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FDXson41C8T6_E3WpoIq7O10tZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:e3:ae:c8:93:46:bb:c9:16:70:ab:35:22:de:43:7f:26:05:
29:d1:69:a7:86:37:a1:31:18:8c:3d:58:6a:30:e1:35:f4:4b:
7e:75:83:5d:f9:13:94:99:ca:2c:11:06:d3:0a:95:a5:55:41:
f2:b7:63:b0:e4:1b:66:6a:e3:8c:be:80:8e:6c:23:b1:fa:79:
ff:20:34:b8:c9:3a:3c:f3:09:d1:1e:ef:e3:30:20:50:ae:e0:
70:b3:67:13:6d:13:e0:af:23:38:36:ba:9d:52:af:54:7c:58:
75:d6:2f:a9:b3:9f:10:e3:cc:9c:ca:39:56:0c:b3:b3:64:b7:
8a:5b:d6:f7:f3:4c:1d:5c:2e:39:91:4e:05:28:01:5b:24:ef:
2b:d1:56:c4:bb:73:af:0d:42:42:d5:c1:45:fa:99:9f:3a:25:
39:73:26:85:b3:ba:f5:83:14:bf:c0:37:3d:15:49:3a:7a:b8:
44:3c:e5:03:9b:e8:0d:4f:c5:74:8f:c5:1b:85:1d:23:b7:0b:
23:ed:af:e3:69:46:19:c3:12:31:e7:fc:e1:07:f8:fa:0c:b4:
8c:5e:8d:d8:e6:da:be:7e:74:9a:91:1f:70:07:a3:6e:be:3a:
31:c7:59:ec:ee:72:d8:9e:a4:36:dd:19:2c:49:1c:86:e7:4d:
27:0c:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:29 2025 by rpki-client