Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxJiustJrw2-gbbFlYoV7HPCThc.roa
File: FxJiustJrw2-gbbFlYoV7HPCThc.roa (raw, json)
Hash identifier: EsZPWfX0vKN6epb05xhIIx8s1ei6CuyV4B6BT7gOwYk=
Subject key identifier: 17:12:62:BA:CB:49:AF:0D:BE:81:B6:C5:95:8A:15:EC:73:C2:4E:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E596A0914EB3205A4A2DDEB309CF7C6B3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxJiustJrw2-gbbFlYoV7HPCThc.roa
Signing time: Wed 20 Mar 2024 01:11:45 +0000
ROA not before: Wed 20 Mar 2024 01:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:59:6a:09:14:eb:32:05:a4:a2:dd:eb:30:9c:f7:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 01:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=171262bacb49af0dbe81b6c5958a15ec73c24e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:6c:82:e9:8b:52:b7:a9:94:36:e2:7b:cf:
bc:48:f4:41:d3:02:6a:91:10:df:e2:4b:ad:6d:b0:
dd:c9:74:47:47:ee:9f:b0:d4:9c:18:f4:da:04:79:
f3:dc:80:2b:90:e8:8c:83:1a:52:3f:47:3f:0e:04:
d4:85:8c:a5:04:08:87:3b:75:9e:1f:c9:73:7a:6f:
57:e9:31:d0:b3:30:c8:6a:20:a2:d5:28:73:d5:fd:
2d:03:df:e0:10:17:a2:6c:ee:f1:68:6a:2b:58:bc:
85:27:67:9f:9b:c9:27:9e:43:c1:d8:e5:07:1a:90:
f2:53:e2:ff:7a:e3:7a:dc:d8:ee:8d:a3:54:1e:e9:
fe:e7:40:6b:4b:91:a2:89:c9:2f:5c:59:ae:1f:d5:
7d:df:70:72:de:a5:a6:f2:52:c0:bd:7d:5c:f7:a6:
d2:f8:e5:07:3d:99:3a:10:91:d7:53:f9:bc:60:d4:
9d:26:cf:e2:32:07:85:bd:ef:49:4c:a3:c5:97:62:
16:ef:7f:cd:fc:dc:e5:fd:7f:7a:c1:cd:3e:5f:24:
af:3d:98:f7:2b:87:af:73:c7:32:18:52:81:95:54:
8e:e1:df:67:28:94:ba:a1:17:ab:ff:c1:5c:dd:7a:
43:77:7f:95:80:f5:45:29:db:50:3b:eb:d0:6f:64:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:62:BA:CB:49:AF:0D:BE:81:B6:C5:95:8A:15:EC:73:C2:4E:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxJiustJrw2-gbbFlYoV7HPCThc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:ee:f5:68:b0:b5:62:c5:1b:0c:8c:3a:49:79:48:c2:be:f1:
89:59:de:f5:92:fe:d2:6d:d8:cc:16:48:6b:73:3f:e3:03:12:
04:62:01:53:41:b9:ff:48:6a:9a:2e:7d:68:ee:74:ca:08:1a:
35:1e:c3:d1:84:32:e5:e8:e2:2a:a6:2c:3c:2c:71:f4:c4:3c:
d4:22:23:e6:13:2e:2b:31:53:fd:ca:87:e8:9f:d0:f0:8b:16:
2f:36:67:30:29:c3:e0:ef:c5:46:40:c8:f1:f1:b1:76:7d:22:
e7:86:25:25:12:e7:6a:88:29:2e:2a:18:f5:04:fd:c0:48:36:
94:1d:13:77:4e:66:cb:89:c3:d3:eb:c1:1a:03:51:47:59:2b:
2f:ff:b9:ac:0d:44:34:17:7a:ae:08:bc:a1:2a:98:d0:e1:04:
97:0f:ad:47:6c:70:21:a7:6f:90:2d:96:96:c1:cb:54:ab:d5:
94:68:af:e7:8f:b9:c8:ab:e7:4c:78:8b:3f:7e:c9:4b:9a:51:
d9:48:21:e2:0d:2f:73:43:1c:da:42:dd:12:84:2a:af:db:eb:
3f:af:46:b1:bd:c2:6b:f2:35:01:85:4e:79:9c:cb:bb:00:33:
71:20:58:a6:e9:fa:c7:84:4c:a6:5e:b3:84:b2:95:09:f8:61:
d4:10:8e:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5ZagkU6zIFpKLd6zCc98azMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIwMDExMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzEyNjJiYWNiNDlhZjBkYmU4MWI2YzU5NThhMTVlYzczYzI0ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHZsgumLUreplDbie8+8SPRB0wJq
kRDf4kutbbDdyXRHR+6fsNScGPTaBHnz3IArkOiMgxpSP0c/DgTUhYylBAiHO3We
H8lzem9X6THQszDIaiCi1Shz1f0tA9/gEBeibO7xaGorWLyFJ2efm8knnkPB2OUH
GpDyU+L/euN63NjujaNUHun+50BrS5GiickvXFmuH9V933By3qWm8lLAvX1c96bS
+OUHPZk6EJHXU/m8YNSdJs/iMgeFve9JTKPFl2IW73/N/Nzl/X96wc0+XySvPZj3
K4evc8cyGFKBlVSO4d9nKJS6oRer/8Fc3XpDd3+VgPVFKdtQO+vQb2RDvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBcSYrrLSa8NvoG2xZWKFexzwk4XMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRnhKaXVzdEpydzItZ2JiRmxZb1Y3SFBDVGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHzu9WiwtWLFGwyMOkl5
SMK+8YlZ3vWS/tJt2MwWSGtzP+MDEgRiAVNBuf9IapoufWjudMoIGjUew9GEMuXo
4iqmLDwscfTEPNQiI+YTLisxU/3Kh+if0PCLFi82ZzApw+DvxUZAyPHxsXZ9IueG
JSUS52qIKS4qGPUE/cBINpQdE3dOZsuJw9PrwRoDUUdZKy//uawNRDQXeq4IvKEq
mNDhBJcPrUdscCGnb5AtlpbBy1Sr1ZRor+ePucir50x4iz9+yUuaUdlIIeINL3ND
HNpC3RKEKq/b6z+vRrG9wmvyNQGFTnmcy7sAM3EgWKbp+seETKZes4SylQn4YdQQ
jh0=
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:20 2025 by rpki-client