Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_FNWQX1pogGiDxEfXWRvCHX6gaQ.roa
File: _FNWQX1pogGiDxEfXWRvCHX6gaQ.roa (raw, json)
Hash identifier: GgR4uKxCAPVXoA6tyyfb851ujscmXefzbXeWJMl1iII=
Subject key identifier: FC:53:56:41:7D:69:A2:01:A2:0F:11:1F:5D:64:6F:08:75:FA:81:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D9FFDC4AE0F1361879CA2C4D98B64963
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_FNWQX1pogGiDxEfXWRvCHX6gaQ.roa
Signing time: Tue 20 Jun 2023 18:10:03 +0000
ROA not before: Tue 20 Jun 2023 18:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:ff:dc:4a:e0:f1:36:18:79:ca:2c:4d:98:b6:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 18:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5356417d69a201a20f111f5d646f0875fa81a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:44:df:f6:d8:f5:be:06:a4:88:3d:6a:ea:
52:44:48:c0:2a:24:9f:ec:0c:95:78:55:51:bc:b6:
c9:19:96:dc:9a:85:a4:27:88:d5:02:89:1b:a9:02:
1c:7e:bc:69:32:07:b3:5e:d4:67:7f:08:91:a5:b4:
89:c4:0c:f3:e4:d6:ac:1d:5a:c7:ed:62:ff:04:09:
66:b4:78:3f:2c:b1:8a:e2:7c:c6:22:93:06:03:42:
5b:ee:05:3a:19:80:50:50:ec:49:51:cb:a8:67:0c:
01:c8:bb:75:ad:2a:91:87:21:7c:64:03:e5:95:e7:
b5:85:f1:e2:9f:44:2e:4f:2e:5f:da:77:d9:1e:53:
ff:a9:23:25:49:9e:e6:38:d9:84:d3:44:cd:09:58:
54:82:7d:36:42:55:52:85:75:24:30:f7:a1:f7:34:
45:22:36:0e:3a:ea:ca:ed:24:d9:5e:76:b2:f0:32:
3b:e0:4e:b1:8a:66:5d:f3:14:8a:9a:81:94:eb:f8:
44:d8:f9:d0:41:82:d3:0d:53:2e:60:84:0b:f3:1e:
33:1e:69:92:0f:9c:dc:8f:58:ba:7a:4a:f4:44:52:
3e:6e:03:d6:3d:c6:7e:fa:57:e5:7c:2c:0b:fa:4b:
eb:d4:51:2b:a1:e8:0d:1e:50:bf:7f:ec:b1:e7:d5:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:56:41:7D:69:A2:01:A2:0F:11:1F:5D:64:6F:08:75:FA:81:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_FNWQX1pogGiDxEfXWRvCHX6gaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:4c:26:3a:b5:9c:91:74:c7:43:d3:d0:4c:7f:9d:c6:e2:5b:
6c:fd:5d:91:53:ad:a3:5f:5f:af:76:77:7e:2a:d0:3f:fc:32:
7d:55:98:64:ae:07:fe:e8:06:06:48:26:9b:92:f6:45:ea:af:
ba:3c:a8:42:7d:69:52:b0:70:7d:ee:be:e3:7b:d7:94:86:e3:
de:96:f8:cb:0e:ec:29:01:94:98:4d:1d:2d:be:f1:48:d7:af:
4c:ae:74:03:3d:d8:b6:0f:f1:87:a8:3f:f6:ac:27:78:cf:03:
5c:7b:03:7c:d1:3e:af:04:3c:83:8a:ad:bb:60:13:93:f6:00:
32:c1:3e:c3:60:3e:bf:8b:7b:de:d9:03:cf:59:b0:34:7d:9c:
76:a5:6a:76:e5:2a:82:52:f3:a8:13:97:85:b8:70:9e:bb:23:
b2:49:6e:5f:e8:10:53:86:2f:25:52:50:0f:cd:1d:d8:f1:d2:
ed:d3:c3:1d:2d:b4:91:34:be:d3:77:c1:89:b5:e2:a8:e1:6d:
65:07:1e:88:a5:0a:57:ea:96:ed:6c:ad:82:b7:c6:6a:55:c9:
26:22:d7:7a:97:98:3f:a8:b2:5f:08:61:52:be:5c:44:5f:f5:
2b:93:5a:96:44:db:4f:fd:ee:65:74:35:a5:23:50:08:ea:34:
76:9e:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:46:44 2025 by rpki-client