Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGNTTz41yjQ1kUSZyE0_3dwhMyI.roa
File: FGNTTz41yjQ1kUSZyE0_3dwhMyI.roa (raw, json)
Hash identifier: gGgzlN5uYCAOm5yR4dS42XJobDXFSGLm/6thy81d3u4=
Subject key identifier: 14:63:53:4F:3E:35:CA:34:35:91:44:99:C8:4D:3F:DD:DC:21:33:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825388FE87804A3C7EE72664187070C501
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGNTTz41yjQ1kUSZyE0_3dwhMyI.roa
Signing time: Sun 31 Jul 2022 09:14:23 +0000
ROA not before: Sun 31 Jul 2022 09:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:53:88:fe:87:80:4a:3c:7e:e7:26:64:18:70:70:c5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 09:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1463534f3e35ca3435914499c84d3fdddc213322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:32:3c:11:22:6d:8d:be:f6:38:31:c7:d1:
bd:6a:4c:38:7c:65:4b:5e:f9:ce:a4:de:df:18:9c:
ce:62:7a:be:15:1f:30:0c:bf:dc:cd:f0:1c:bf:f1:
49:6f:5e:e0:a6:08:fd:ec:d8:bb:b6:a6:17:5e:f4:
78:df:5f:9a:27:55:e7:94:0c:9d:fe:a2:f7:24:39:
85:0a:0c:da:c1:34:3c:56:5d:20:20:2c:d1:26:d6:
c8:59:de:7c:40:30:2a:aa:1f:2b:ab:5f:60:75:9b:
1d:d4:23:f0:50:8a:05:9c:52:c7:05:12:33:86:c7:
f1:ad:40:e5:6d:8c:25:8c:c7:78:71:50:d8:2b:26:
74:2f:81:df:c7:3e:7a:ff:1d:3c:1c:c4:c2:c6:04:
e4:78:5d:24:54:4a:10:13:f0:e5:f1:4f:fd:16:cf:
18:c1:55:3d:24:30:9d:0c:90:84:f5:c9:89:cd:63:
72:e0:c4:93:b5:9f:47:9a:e3:c1:bf:27:1d:30:4c:
de:84:5d:fc:90:68:8a:a0:5b:44:1f:bc:f9:6e:f8:
63:ee:db:76:75:69:95:b4:71:da:3b:c1:cd:03:e2:
af:2f:60:6a:14:9d:64:90:73:49:29:93:49:90:da:
d5:14:55:9b:5d:b5:c8:b8:2c:03:11:cd:03:fe:b3:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:53:4F:3E:35:CA:34:35:91:44:99:C8:4D:3F:DD:DC:21:33:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FGNTTz41yjQ1kUSZyE0_3dwhMyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:53:03:b4:39:34:16:af:83:19:bf:f5:81:7a:18:14:83:42:
de:c5:95:aa:28:b6:49:e4:0a:55:ac:94:8d:ea:df:75:40:72:
14:9e:82:9f:85:32:34:32:7b:48:5e:ea:30:2f:49:35:b2:23:
87:fb:71:23:c9:02:60:1f:66:19:23:83:6f:d1:1c:ec:d7:b7:
2a:c8:d2:5b:64:ff:6e:aa:67:e2:b0:fa:6d:df:07:eb:75:2a:
be:8e:5a:f7:bb:37:74:da:d1:c4:b2:6f:42:11:45:08:25:c4:
d8:28:38:cf:a3:d7:32:7a:cf:62:b4:a9:5e:6d:36:75:e4:79:
d5:97:32:9e:ab:71:b2:74:bc:df:9b:bb:0d:94:49:7b:48:9c:
69:fc:e5:32:17:53:89:4b:be:31:a7:3b:fc:69:1f:46:fa:b0:
4c:05:20:55:19:f0:25:23:08:eb:6a:51:53:0f:eb:a5:99:b7:
bf:ff:d2:2f:92:29:78:6a:c5:b2:05:49:50:fe:27:17:df:c8:
98:42:a9:85:de:75:82:c5:3f:11:75:12:78:95:ae:84:a8:31:
fd:cb:e9:0e:83:c7:46:ce:b7:0c:96:fc:94:23:b7:04:97:5d:
ee:04:40:00:4f:ad:f1:17:71:d4:50:08:06:3c:12:db:a0:d1:
12:05:3f:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJTiP6HgEo8fucmZBhwcMUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzMxMDkxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDYzNTM0ZjNlMzVjYTM0MzU5MTQ0OTljODRkM2ZkZGRjMjEzMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpwyPBEibY2+9jgxx9G9akw4fGVL
XvnOpN7fGJzOYnq+FR8wDL/czfAcv/FJb17gpgj97Ni7tqYXXvR431+aJ1XnlAyd
/qL3JDmFCgzawTQ8Vl0gICzRJtbIWd58QDAqqh8rq19gdZsd1CPwUIoFnFLHBRIz
hsfxrUDlbYwljMd4cVDYKyZ0L4Hfxz56/x08HMTCxgTkeF0kVEoQE/Dl8U/9Fs8Y
wVU9JDCdDJCE9cmJzWNy4MSTtZ9HmuPBvycdMEzehF38kGiKoFtEH7z5bvhj7tt2
dWmVtHHaO8HNA+KvL2BqFJ1kkHNJKZNJkNrVFFWbXbXIuCwDEc0D/rMF4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBRjU08+Nco0NZFEmchNP93cITMiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRkdOVFR6NDF5alExa1VTWnlFMF8zZHdoTXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABBTA7Q5NBavgxm/9YF6
GBSDQt7FlaootknkClWslI3q33VAchSegp+FMjQye0he6jAvSTWyI4f7cSPJAmAf
Zhkjg2/RHOzXtyrI0ltk/26qZ+Kw+m3fB+t1Kr6OWve7N3Ta0cSyb0IRRQglxNgo
OM+j1zJ6z2K0qV5tNnXkedWXMp6rcbJ0vN+buw2USXtInGn85TIXU4lLvjGnO/xp
H0b6sEwFIFUZ8CUjCOtqUVMP66WZt7//0i+SKXhqxbIFSVD+JxffyJhCqYXedYLF
PxF1EniVroSoMf3L6Q6Dx0bOtwyW/JQjtwSXXe4EQABPrfEXcdRQCAY8Etug0RIF
PwU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:13 2025 by rpki-client