Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXcaHwPrDMHNgBqNy9s1tmWFtoA.roa
File: FXcaHwPrDMHNgBqNy9s1tmWFtoA.roa (raw, json)
Hash identifier: VVm7xjzARHVCGW6bKECWwyzqL7OxKJBFuXaFJjNOTfM=
Subject key identifier: 15:77:1A:1F:03:EB:0C:C1:CD:80:1A:8D:CB:DB:35:B6:65:85:B6:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DCD3D34ED1B4EF739FA797E59C6CCA6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXcaHwPrDMHNgBqNy9s1tmWFtoA.roa
Signing time: Mon 13 Mar 2023 21:15:15 +0000
ROA not before: Mon 13 Mar 2023 21:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:d3:d3:4e:d1:b4:ef:73:9f:a7:97:e5:9c:6c:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 21:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15771a1f03eb0cc1cd801a8dcbdb35b66585b680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:46:ca:cb:78:a4:78:ec:9c:11:03:6f:a2:
f9:bc:a8:de:56:31:16:35:07:88:24:b2:38:d5:f0:
09:4b:16:68:a6:5c:62:dc:3f:28:b4:3c:cc:e4:19:
c8:4a:05:72:d1:ba:96:46:c6:66:37:49:1c:d8:c7:
2f:5a:35:77:02:e5:6f:d3:5b:0b:76:a7:22:96:50:
5c:0a:68:ef:81:3e:e2:0f:29:0e:3e:ec:49:c2:4e:
5b:09:9a:d3:23:6a:8c:d4:e1:7c:a9:77:69:d7:2c:
88:d5:ff:cd:0d:3b:58:f6:ed:61:2b:34:d4:26:9c:
0a:1d:27:f1:dc:f6:03:8f:8b:67:83:45:a8:46:0c:
5c:b9:7c:44:2e:66:29:88:24:4b:44:1f:2f:fa:65:
eb:64:5e:0a:1e:24:91:ce:9c:c9:2c:e1:92:54:a2:
ae:2e:b8:1a:76:1b:ac:48:e9:b8:a5:32:8d:7d:e8:
11:98:08:2a:2a:47:12:d5:83:ad:37:63:bf:51:e5:
a7:87:7e:8b:f5:24:0d:43:72:01:94:d6:e2:75:03:
53:10:03:4d:2a:84:c8:f0:e9:88:80:d4:7f:df:d4:
81:bc:44:dd:23:f9:80:e6:07:f2:3e:51:94:0a:63:
74:92:b5:ad:b0:9c:cc:4b:24:c0:03:b6:01:5e:52:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:1A:1F:03:EB:0C:C1:CD:80:1A:8D:CB:DB:35:B6:65:85:B6:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FXcaHwPrDMHNgBqNy9s1tmWFtoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b4:2f:17:1f:c9:80:63:54:ab:c4:f5:c8:f5:94:40:c3:d0:
5e:35:e5:df:4a:ca:31:47:81:f1:a6:9b:34:39:48:f6:8e:ab:
d2:1c:7c:0d:5d:27:1d:af:f8:bf:78:64:86:2d:da:55:71:39:
ee:66:b0:dc:58:46:59:0c:44:77:5a:4e:46:87:68:4f:3e:58:
d3:aa:16:52:c7:af:4b:51:81:d5:b0:f1:65:1c:64:a9:25:51:
8f:a8:a8:4f:ec:8f:b0:2c:95:82:d8:f0:44:ec:24:d1:6f:0a:
e8:cf:89:be:17:62:70:9b:36:3f:a3:18:77:5d:cf:d4:27:b0:
95:ae:c4:60:8f:0a:8b:ef:2e:88:06:39:a3:1e:27:3b:24:9f:
b8:67:a9:e6:80:35:6d:4a:86:ef:24:31:87:35:f6:ed:64:4f:
1c:a5:ba:f0:9e:ee:7b:a4:6f:b9:a2:55:d2:64:45:ee:c2:3a:
cc:85:ef:e5:8c:7d:bf:01:b1:c6:ba:f2:68:e2:db:f4:c9:8c:
f1:7e:a2:50:59:d8:c9:c6:77:9e:1f:9d:2b:25:91:03:cc:41:
09:8a:33:a4:61:ae:1a:44:21:de:4d:5c:41:c9:26:4c:ee:66:
39:47:b6:99:72:e7:a5:a5:c6:ba:24:58:b1:47:3c:55:ff:2f:
44:fc:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:33 2025 by rpki-client