Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQdBxt3nyD3F6HFYrSHceED1WKM.roa
File: FQdBxt3nyD3F6HFYrSHceED1WKM.roa (raw, json)
Hash identifier: H34gXR+66Um0CHEzEuKnR6w9iEeo5jeUTqZGTyFPufE=
Subject key identifier: 15:07:41:C6:DD:E7:C8:3D:C5:E8:71:58:AD:21:DC:78:40:F5:58:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850B6036F3ACBA5F73188913E14FFCE58C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQdBxt3nyD3F6HFYrSHceED1WKM.roa
Signing time: Tue 13 Dec 2022 12:05:33 +0000
ROA not before: Tue 13 Dec 2022 12:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:b5f:b51c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:60:36:f3:ac:ba:5f:73:18:89:13:e1:4f:fc:e5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 12:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=150741c6dde7c83dc5e87158ad21dc7840f558a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:2f:5c:88:65:29:3a:4e:90:6a:61:75:2c:
b4:85:00:83:49:41:72:01:93:9d:70:e9:70:79:11:
b6:76:fb:d3:9b:23:f4:1d:ad:21:59:2e:ad:bc:dd:
0a:52:38:d5:a1:f9:1c:67:12:92:56:14:1d:05:8a:
a6:8e:4f:58:bf:48:f6:fd:6b:4a:81:76:c4:87:3f:
b5:5d:4c:ff:d3:b9:12:49:49:7d:b0:0d:86:89:d3:
79:5f:cb:4d:8e:43:e3:50:35:ff:b4:5c:e4:64:e2:
90:8f:c4:d7:94:29:80:48:16:95:e0:cf:d7:89:19:
76:55:37:d1:5c:10:e7:bd:67:7e:9c:85:c5:31:26:
04:9e:48:b7:ae:4b:dd:c5:b6:08:76:6b:fc:16:a1:
f2:e6:e6:f0:62:84:2b:cb:0e:2b:7c:90:d4:9a:ec:
43:10:6c:ea:69:82:c5:fa:db:6d:fc:12:31:c0:36:
4b:0b:c1:b1:60:d9:1d:08:14:e5:6b:77:5e:24:6b:
18:f7:7b:75:d2:b0:62:b8:0b:bb:b2:79:d9:5a:1c:
3b:f9:13:76:40:df:7b:b7:87:34:13:ff:c2:dd:64:
5c:0b:df:20:c7:79:74:a2:69:4a:da:d3:27:6f:df:
d6:97:2e:55:ec:6d:50:40:e0:8a:8e:71:8d:8c:75:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:41:C6:DD:E7:C8:3D:C5:E8:71:58:AD:21:DC:78:40:F5:58:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FQdBxt3nyD3F6HFYrSHceED1WKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:6b:a2:ab:d2:10:d2:db:37:3c:8a:f3:bf:84:14:09:04:51:
d6:2b:b6:dc:87:66:47:95:e1:e2:77:e5:f4:95:ac:4f:cd:60:
ae:53:71:de:40:8c:32:f9:28:f1:17:71:1e:fa:af:49:99:79:
98:9c:be:0d:0a:f2:7a:b1:92:a9:ed:b9:99:d1:f0:ba:a9:92:
ee:39:09:22:80:bc:d0:d2:d2:a6:ad:54:17:29:6b:e3:da:83:
6c:d9:e2:ef:de:d8:36:f2:77:04:09:bc:53:2a:44:90:3f:e6:
e7:99:2d:d9:a6:d1:da:5d:b9:54:fd:86:bc:55:db:70:0c:a3:
96:f7:3c:45:72:0d:9b:22:d8:df:4e:99:49:1b:c4:19:4d:0e:
18:53:1c:8b:74:d9:23:4f:d5:aa:8b:67:be:6d:8c:8a:c8:20:
db:a7:7d:a6:55:15:95:00:87:72:c9:1e:a8:27:e7:18:75:ea:
36:4a:79:44:7c:3b:0e:bf:ae:9b:24:45:2b:2e:b4:8d:e4:16:
b6:e4:55:21:16:4c:f7:67:64:4c:7f:08:7c:2c:b8:9f:3a:38:
ac:72:c1:a1:d4:2d:9d:c9:e7:b9:f6:a7:c8:d2:af:f5:72:62:
4a:60:d4:80:f6:fb:c0:5b:56:2c:41:65:fa:0e:80:d8:0a:ec:
97:4e:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:01:43 2025 by rpki-client