Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FG3iDgSVWb1aGNMnjZZQWdNlMvc.roa
File: FG3iDgSVWb1aGNMnjZZQWdNlMvc.roa (raw, json)
Hash identifier: mrTfzDeCobv2LCjDLSjpKg6iwBGwgdSXuV7c9Wfzwvk=
Subject key identifier: 14:6D:E2:0E:04:95:59:BD:5A:18:D3:27:8D:96:50:59:D3:65:32:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD4CE155ABD4069C4C0388A802B5F9DC6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FG3iDgSVWb1aGNMnjZZQWdNlMvc.roa
Signing time: Wed 15 Nov 2023 21:05:57 +0000
ROA not before: Wed 15 Nov 2023 21:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:d4cd:9e56/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:ce:15:5a:bd:40:69:c4:c0:38:8a:80:2b:5f:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 21:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=146de20e049559bd5a18d3278d965059d36532f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:c1:42:e6:5c:15:03:60:5b:79:4a:61:41:
f9:e4:d1:d8:c7:cd:c7:58:ac:7a:23:65:fd:cb:62:
2d:2b:2a:9c:c9:30:a5:75:a3:bd:34:6c:83:d4:7a:
30:c2:19:21:66:04:a0:46:70:75:37:e3:9f:9c:84:
86:61:6a:df:7b:9c:ed:0e:0e:81:d5:a5:51:ac:ae:
ce:69:e5:f6:2a:27:d1:ca:64:76:b0:92:92:fc:9b:
d8:48:f1:50:39:00:07:2d:ce:47:75:52:42:fd:b2:
53:49:21:c0:6a:5a:60:f9:ed:17:d1:2a:0f:c5:0a:
da:07:d4:11:e5:72:83:76:68:a5:87:56:79:26:9b:
51:51:af:93:aa:28:29:10:58:d8:b7:3b:7a:2e:94:
62:2b:52:d9:63:60:c2:4a:b2:4b:5c:6b:c9:5a:41:
c1:7e:ac:fd:ff:73:ae:08:79:17:74:2c:c4:8c:c4:
ba:fe:fa:50:5d:43:12:13:01:67:55:a3:c5:25:63:
89:13:c0:d4:67:ea:6a:e0:cc:a5:f7:60:db:87:3e:
06:a2:0b:a4:14:6b:ef:70:4d:71:a2:1b:04:65:ba:
ec:90:2a:cc:7e:07:b2:89:d1:4c:42:be:06:42:26:
f3:13:47:de:c0:10:df:28:00:70:e4:a2:a8:7a:47:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:E2:0E:04:95:59:BD:5A:18:D3:27:8D:96:50:59:D3:65:32:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FG3iDgSVWb1aGNMnjZZQWdNlMvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:57:41:bf:77:7d:1f:7c:9c:73:14:09:82:5e:17:10:e3:c9:
55:2f:20:7f:f2:ff:eb:1b:f2:56:be:3c:f5:a1:df:d3:b8:6e:
38:2e:fc:80:94:f3:69:ca:42:53:10:65:77:c9:59:98:7b:2a:
40:16:bc:e2:13:a0:66:46:6b:c1:9b:33:6e:4e:af:e4:c3:a4:
ef:01:1b:0e:4a:bd:22:9a:a9:21:df:e3:95:3e:37:5c:29:b9:
95:1e:87:81:30:00:dd:7c:26:bc:2c:47:83:36:8a:f8:3a:f1:
cf:d7:1b:5a:13:d3:d0:30:7f:72:60:5a:f2:a0:e9:81:a7:3b:
86:34:fe:81:75:aa:b6:5b:df:73:7f:b8:3c:61:cb:e6:e0:e4:
58:4b:71:73:ac:0f:a4:4f:c6:a2:05:20:32:cd:d9:5a:fe:40:
9f:61:c0:0c:ca:c4:1c:8c:c0:b6:91:4e:21:98:53:9c:19:07:
fc:98:4b:20:a3:18:0b:cf:a1:32:4f:ed:8a:76:df:fb:67:6e:
76:29:97:ad:1d:d8:42:b9:0a:f2:82:8a:39:94:ae:e5:8c:2f:
a4:dc:d7:08:8e:4c:68:8c:95:ee:f6:8b:fd:0e:25:d1:9c:0c:
e1:7b:50:cd:01:5f:b9:55:e8:70:2e:25:94:61:86:d0:09:50:
97:d8:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:04:20 2025 by rpki-client