Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FW0Gckp3-dbgdJUVw2Ta_XCn0Gg.roa
File: FW0Gckp3-dbgdJUVw2Ta_XCn0Gg.roa (raw, json)
Hash identifier: 75oxNjo3ZG8fMrFrj3Wii7KINgJ8m6rUIstNCDfa8zA=
Subject key identifier: 15:6D:06:72:4A:77:F9:D6:E0:74:95:15:C3:64:DA:FD:70:A7:D0:68
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AA7F6E4E40CD9F1488743198CE1AC0C3C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FW0Gckp3-dbgdJUVw2Ta_XCn0Gg.roa
Signing time: Mon 18 Sep 2023 11:04:50 +0000
ROA not before: Mon 18 Sep 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:a7f6:5941/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:f6:e4:e4:0c:d9:f1:48:87:43:19:8c:e1:ac:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 18 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156d06724a77f9d6e0749515c364dafd70a7d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:cb:92:7a:99:8f:4e:51:de:2b:45:75:cb:
bf:40:02:34:53:71:1a:f6:ee:7b:4f:31:de:80:fd:
a1:e6:d9:11:38:3b:fc:de:14:bc:c4:8e:26:70:24:
ce:f2:12:13:4a:cf:32:d0:15:a6:1c:fe:61:6e:bb:
de:9f:ca:c5:25:57:30:72:18:f0:82:d2:91:e3:a8:
43:8c:2d:ef:a0:12:18:29:a1:64:ca:eb:25:c2:73:
49:8b:db:2e:b5:51:58:bf:b7:f9:21:e1:b2:5d:a5:
e7:7c:77:d4:25:7a:9c:45:0b:8f:4e:cc:df:cb:97:
74:a5:89:82:c4:82:c1:63:84:88:02:b5:5e:dc:66:
33:c7:5d:c0:f9:6e:07:0e:51:54:cd:f7:62:e5:1f:
93:11:84:b8:6d:23:bd:70:8c:de:8e:c7:4f:aa:0d:
1c:d5:db:e3:e0:0a:79:ab:86:18:c2:e5:46:ab:62:
bc:33:f7:a6:df:a6:29:da:0d:64:57:0a:5f:98:8c:
34:68:96:e6:68:c9:19:b0:48:55:41:fb:c7:26:15:
0f:26:4f:8a:2d:98:48:b9:45:7c:3e:ca:ed:ff:71:
15:78:b8:bb:25:0f:46:dc:89:dd:92:72:0b:0c:44:
ee:3d:d1:4a:5e:e6:b0:ec:7a:60:09:d8:ac:cc:c2:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:06:72:4A:77:F9:D6:E0:74:95:15:C3:64:DA:FD:70:A7:D0:68
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FW0Gckp3-dbgdJUVw2Ta_XCn0Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:61:96:69:c3:6b:54:fc:7b:2d:7f:14:2c:10:b7:28:a8:75:
d6:77:11:e7:d6:3c:6d:d3:b9:5c:3d:25:7f:31:bd:60:07:46:
77:09:a8:16:b7:c9:25:59:55:b5:f9:cb:17:3d:99:c7:d9:76:
5f:7e:56:d9:60:72:a1:9d:cb:8e:38:1c:85:b4:75:3f:e4:97:
ac:fa:64:93:b2:91:f2:4c:33:c4:25:45:45:38:2e:e4:4f:6b:
1d:68:28:3a:9f:30:a4:d3:85:fc:67:7a:12:c1:fb:80:44:bc:
f5:1e:e5:89:ef:79:f6:04:2c:1a:e8:3d:3b:c0:83:63:79:43:
30:76:a7:a5:8f:7e:ef:e8:2a:75:06:72:a6:e8:37:42:88:ac:
23:7d:87:21:29:89:ac:54:f1:c4:6e:9f:d1:9a:aa:8d:5b:66:
b4:b1:bc:87:c9:66:a2:09:03:cf:b8:1a:0f:9c:b5:8b:a7:db:
07:9f:78:64:85:3b:43:d3:af:cd:42:b2:f0:7b:5a:54:ef:22:
4c:40:45:35:83:66:17:52:aa:33:20:a4:58:91:33:7d:05:86:
16:bd:c4:7a:36:d8:14:00:06:a2:a3:9b:35:32:06:5b:31:81:
7c:49:80:5c:0e:bd:47:30:c2:48:e6:27:02:98:a5:de:44:95:
d0:3c:1b:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqn9uTkDNnxSIdDGYzhrAw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE4MTEwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTZkMDY3MjRhNzdmOWQ2ZTA3NDk1MTVjMzY0ZGFmZDcwYTdkMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu7LknqZj05R3itFdcu/QAI0U3Ea
9u57TzHegP2h5tkRODv83hS8xI4mcCTO8hITSs8y0BWmHP5hbrven8rFJVcwchjw
gtKR46hDjC3voBIYKaFkyuslwnNJi9sutVFYv7f5IeGyXaXnfHfUJXqcRQuPTszf
y5d0pYmCxILBY4SIArVe3GYzx13A+W4HDlFUzfdi5R+TEYS4bSO9cIzejsdPqg0c
1dvj4Ap5q4YYwuVGq2K8M/em36Yp2g1kVwpfmIw0aJbmaMkZsEhVQfvHJhUPJk+K
LZhIuUV8Psrt/3EVeLi7JQ9G3IndknILDETuPdFKXuaw7HpgCdiszMLFAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBVtBnJKd/nW4HSVFcNk2v1wp9BoMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRlcwR2NrcDMtZGJnZEpVVncyVGFfWENuMEdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAthlmnDa1T8ey1/FCwQ
tyioddZ3EefWPG3TuVw9JX8xvWAHRncJqBa3ySVZVbX5yxc9mcfZdl9+VtlgcqGd
y444HIW0dT/kl6z6ZJOykfJMM8QlRUU4LuRPax1oKDqfMKTThfxnehLB+4BEvPUe
5YnvefYELBroPTvAg2N5QzB2p6WPfu/oKnUGcqboN0KIrCN9hyEpiaxU8cRun9Ga
qo1bZrSxvIfJZqIJA8+4Gg+ctYun2wefeGSFO0PTr81CsvB7WlTvIkxARTWDZhdS
qjMgpFiRM30Fhha9xHo22BQABqKjmzUyBlsxgXxJgFwOvUcwwkjmJwKYpd5EldA8
GxI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:03 2025 by rpki-client