Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKGBu3dKk21sTRFN7AFLnU2Wwjo.roa
File: FKGBu3dKk21sTRFN7AFLnU2Wwjo.roa (raw, json)
Hash identifier: akpDT1HlHn20NlvUr2MFEYcA0cEDfZ/M4wbgqyvF/C8=
Subject key identifier: 14:A1:81:BB:77:4A:93:6D:6C:4D:11:4D:EC:01:4B:9D:4D:96:C2:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81AFB44E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKGBu3dKk21sTRFN7AFLnU2Wwjo.roa
Signing time: Fri 06 May 2022 15:10:23 +0000
ROA not before: Fri 06 May 2022 15:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175775822 (0x81afb44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 15:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14a181bb774a936d6c4d114dec014b9d4d96c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:09:3c:94:79:99:13:63:ce:69:b3:1e:5a:
49:12:ac:1b:ee:8e:37:a4:bf:1b:7d:12:d7:c7:f7:
bf:d4:8a:85:d0:98:12:72:91:f6:8f:bc:f7:8f:e6:
59:68:7d:8c:14:bb:18:7e:52:ab:be:39:41:a5:51:
3f:6c:1d:7a:a3:b0:19:c5:cb:a0:7c:70:3c:54:8a:
a0:f5:95:c0:ca:b1:8f:b3:33:45:f4:62:71:37:6f:
37:06:b8:98:43:ac:3e:4f:c1:89:69:8e:50:a4:2c:
61:60:a8:2f:f2:c5:65:c7:66:31:a3:e8:bc:4a:0d:
82:34:0b:2c:2d:6f:8b:1c:63:3e:11:ca:79:45:fb:
ac:31:cb:c2:5f:15:92:8a:10:ae:43:0c:d2:29:69:
e5:f6:51:ab:08:e7:22:b3:9f:3b:f1:56:65:e4:49:
a8:56:76:11:59:17:1a:7e:79:82:4f:d6:36:2d:c5:
1c:4c:8a:57:e4:18:53:35:3a:b2:ec:d5:a1:e3:39:
44:47:8a:72:42:b7:50:17:f2:cc:ed:65:d6:98:0f:
14:08:e6:e5:72:42:0a:be:be:51:cd:33:ac:15:3c:
56:fe:fc:9b:8d:cd:19:06:33:e6:4f:90:31:6e:19:
1e:1c:49:db:67:9d:81:c9:eb:bd:ca:08:93:a0:cd:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:81:BB:77:4A:93:6D:6C:4D:11:4D:EC:01:4B:9D:4D:96:C2:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FKGBu3dKk21sTRFN7AFLnU2Wwjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:39:9c:7d:a8:17:ff:6e:52:3f:5d:af:62:f0:df:9e:02:56:
f6:79:2f:f4:6c:a0:28:05:e3:12:35:f4:28:4b:49:6f:e3:5a:
b8:13:ef:50:4e:1d:27:67:9a:ce:93:bb:e5:1c:66:e1:1d:a6:
70:fa:d3:c3:4a:37:4f:39:bd:bf:7f:b6:5d:35:92:af:b6:0c:
4d:8f:e5:59:2a:71:9d:7b:c1:58:6d:99:64:b1:70:f7:97:ad:
18:0b:11:c7:ea:58:b8:a6:17:1c:d5:dd:c7:e5:25:5d:d9:fd:
fb:23:8e:e3:11:e9:4f:87:82:f7:b9:f3:c3:5a:60:e6:0d:e4:
fa:1d:45:5b:6d:14:76:a3:d9:9d:e7:2c:62:23:9b:f8:c7:22:
4a:e2:3d:cf:60:82:0e:6d:ff:e6:f9:5b:4b:15:e1:dc:73:05:
93:5d:96:1a:b4:e3:53:32:5d:0c:40:07:98:1a:cf:a9:01:ae:
ff:09:48:65:10:a5:5c:94:e0:8b:10:1a:7e:fe:0d:85:b3:dc:
8d:bd:92:42:f3:62:cf:de:9c:41:0d:e1:2f:37:31:1e:95:93:
19:29:a2:56:cb:09:10:c3:43:4b:12:39:f3:65:a9:f0:d4:52:
f0:c7:16:3c:dc:f5:42:52:1f:33:bb:93:fa:2a:d1:df:cc:4f:
b1:8e:a0:46
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIGvtE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDYxNTEwMjNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE0YTE4MWJiNzc0
YTkzNmQ2YzRkMTE0ZGVjMDE0YjlkNGQ5NmMyM2EwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCkwk8lHmZE2POabMeWkkSrBvujjekvxt9EtfH97/UioXQ
mBJykfaPvPeP5llofYwUuxh+Uqu+OUGlUT9sHXqjsBnFy6B8cDxUiqD1lcDKsY+z
M0X0YnE3bzcGuJhDrD5PwYlpjlCkLGFgqC/yxWXHZjGj6LxKDYI0Cywtb4scYz4R
ynlF+6wxy8JfFZKKEK5DDNIpaeX2UasI5yKznzvxVmXkSahWdhFZFxp+eYJP1jYt
xRxMilfkGFM1OrLs1aHjOURHinJCt1AX8sztZdaYDxQI5uVyQgq+vlHNM6wVPFb+
/JuNzRkGM+ZPkDFuGR4cSdtnnYHJ673KCJOgzQM3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUFKGBu3dKk21sTRFN7AFLnU2WwjowHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9GS0dCdTNkS2syMXNUUkZON0FGTG5VMld3am8ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAHzmcfagX/25SP12vYvDfngJW9nkv9GygKAXj
EjX0KEtJb+NauBPvUE4dJ2eazpO75Rxm4R2mcPrTw0o3Tzm9v3+2XTWSr7YMTY/l
WSpxnXvBWG2ZZLFw95etGAsRx+pYuKYXHNXdx+UlXdn9+yOO4xHpT4eC97nzw1pg
5g3k+h1FW20UdqPZnecsYiOb+MciSuI9z2CCDm3/5vlbSxXh3HMFk12WGrTjUzJd
DEAHmBrPqQGu/wlIZRClXJTgixAafv4NhbPcjb2SQvNiz96cQQ3hLzcxHpWTGSmi
VssJEMNDSxI582Wp8NRS8McWPNz1QlIfM7uT+irR38xPsY6gRg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:33 2025 by rpki-client