Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FJOvxJMyOh4T_9fieOr2kVuWTeM.roa
File: FJOvxJMyOh4T_9fieOr2kVuWTeM.roa (raw, json)
Hash identifier: 5SrClO2Ikp5f8g+1uLchl+dZDxa3zIxNp610KK3d/sY=
Subject key identifier: 14:93:AF:C4:93:32:3A:1E:13:FF:D7:E2:78:EA:F6:91:5B:96:4D:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018319FBEC4C09739DA9EE081BF64004596B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FJOvxJMyOh4T_9fieOr2kVuWTeM.roa
Signing time: Wed 07 Sep 2022 22:04:43 +0000
ROA not before: Wed 07 Sep 2022 22:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
2001:67c:64:ffff:0:183:19fb:875d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:fb:ec:4c:09:73:9d:a9:ee:08:1b:f6:40:04:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 22:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1493afc493323a1e13ffd7e278eaf6915b964de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:b0:aa:5b:b2:b0:6c:38:58:d4:1d:fc:a6:
ee:b9:b4:cf:7f:14:48:a8:00:6b:02:76:20:82:0d:
34:28:40:74:00:3a:8c:ab:1e:b8:8d:30:21:88:ec:
1c:4b:35:db:9e:cd:a6:3f:d6:fa:d6:b1:3a:61:2a:
bd:82:a0:67:0f:17:40:e8:b0:81:6b:2e:d8:1a:64:
a3:3e:25:0a:1e:83:13:6b:16:f7:d1:5d:40:d7:5f:
88:3d:cf:4e:c2:0e:73:a7:ca:13:5c:34:96:6d:51:
ff:1a:5f:d0:99:a0:3d:35:56:79:4b:0c:8d:fc:0d:
93:9e:a3:b2:3a:8f:80:32:47:00:b4:81:94:0e:ea:
01:76:dd:78:eb:6f:2a:b5:7d:63:85:f7:b8:cb:fa:
d1:00:6b:88:06:74:d7:50:33:63:56:19:18:ea:ad:
be:25:48:49:75:38:42:33:35:26:ec:2a:ef:57:af:
fa:18:f4:34:77:8d:d6:50:8b:32:c5:70:4f:ee:99:
ba:ba:ef:ab:ae:13:a2:08:53:9c:50:de:98:d5:b9:
60:6a:11:f7:21:7d:9c:7e:22:28:9b:53:82:5e:33:
24:b8:3a:c7:48:c8:70:c2:1d:38:6f:78:35:f0:29:
3c:26:2e:23:72:f9:d3:7e:bd:2a:46:76:95:e2:bb:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:AF:C4:93:32:3A:1E:13:FF:D7:E2:78:EA:F6:91:5B:96:4D:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FJOvxJMyOh4T_9fieOr2kVuWTeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fb:45:52:fb:9f:fb:08:cf:93:8f:b1:41:0b:4d:65:e3:7f:
79:8e:dc:3a:87:07:01:0d:3a:22:7d:e0:d3:05:8a:60:8e:91:
ee:d2:46:6a:99:f5:55:39:53:30:2c:c2:4f:a4:c3:40:7c:26:
a2:d2:f7:68:c4:5c:d1:b8:bb:62:d8:0d:21:22:84:aa:0a:2a:
a7:b5:9c:f0:86:30:28:dc:68:61:57:5d:0b:61:5d:a8:70:ec:
b7:db:01:99:77:dd:7a:74:34:b0:4b:f6:d3:ad:92:72:cd:3c:
46:b7:ff:93:fe:e6:9b:cf:b0:5c:6a:72:c7:3a:2d:d6:fb:8e:
ee:37:e5:57:51:37:6b:62:7c:5a:0b:15:2c:e8:f2:ae:22:74:
79:ff:06:ee:c2:9f:64:4f:51:46:37:e7:28:4f:98:11:1c:c5:
b9:f2:20:f4:44:5a:61:05:5d:84:c8:5f:f5:71:22:f6:21:3c:
39:74:85:7a:69:f2:a6:de:fe:b2:f2:75:37:28:60:8d:61:64:
93:80:14:5e:23:ad:bf:cf:dc:bd:c5:98:93:b2:39:f4:5e:c5:
b4:67:bc:14:dd:30:94:fb:91:cb:4d:8e:86:82:5e:32:e1:dc:
bc:cf:ed:9f:99:36:c5:fb:da:fe:5e:ab:6c:07:22:90:74:c7:
0f:8e:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:11:58 2025 by rpki-client