Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1--gFf195zSwMrEE4jZ_n6_Bd9bc.roa
File: 1--gFf195zSwMrEE4jZ_n6_Bd9bc.roa (raw, json)
Hash identifier: wb/mytOVkkEKWvSb4b8s632SdO0XUVhSk97SVMilW1c=
Subject key identifier: FB:E8:05:7F:5F:79:CD:2C:0C:AC:41:38:8D:9F:E7:EB:F0:5D:F5:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8A5DAA8B260564FCFE36567009E6FF2A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1--gFf195zSwMrEE4jZ_n6_Bd9bc.roa
Signing time: Wed 01 Nov 2023 10:11:16 +0000
ROA not before: Wed 01 Nov 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:5d:aa:8b:26:05:64:fc:fe:36:56:70:09:e6:ff:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbe8057f5f79cd2c0cac41388d9fe7ebf05df5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:72:ea:55:57:55:8c:94:c0:18:8d:65:93:
23:0e:e8:5a:8f:3d:40:2a:47:e7:d9:c4:46:d2:b7:
4d:04:c8:51:f2:8c:1a:ce:ed:ab:96:c8:e4:84:a2:
3d:da:46:8c:9f:f9:bb:69:2e:3d:db:29:d3:b3:86:
13:9d:97:37:d5:3f:df:14:e8:ba:b1:d3:bf:cb:4b:
52:fe:93:ad:53:f2:21:e8:7e:7d:d6:f2:55:79:2a:
f4:ea:2e:be:9a:7b:99:25:e5:c5:d5:9e:2e:bb:6a:
62:52:ef:ea:8b:97:22:0b:9f:de:7e:80:ae:3e:8a:
77:38:c5:8a:5e:01:9e:92:6a:d7:94:27:17:dd:df:
56:48:54:d6:c4:a3:cf:56:91:cc:5c:0e:18:4a:2a:
5c:74:a4:76:2e:58:3d:ad:99:a3:b5:e3:0d:cf:a1:
ce:c8:e4:83:ef:b1:ca:6b:ef:0f:a1:c2:f0:a7:38:
2e:3a:ae:e2:e4:ee:5b:07:f0:42:5c:25:6d:37:b0:
d9:bc:d6:e5:3f:eb:82:b4:55:7e:ed:bb:2c:02:7a:
79:9e:44:55:79:c7:5e:4c:b4:07:36:63:9c:fe:cd:
ee:51:a4:36:67:7e:ab:6f:8f:ef:8a:24:75:19:1e:
d1:4f:29:61:03:bf:a7:cd:84:14:b6:db:d7:39:11:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:05:7F:5F:79:CD:2C:0C:AC:41:38:8D:9F:E7:EB:F0:5D:F5:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1--gFf195zSwMrEE4jZ_n6_Bd9bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:39:a2:50:91:af:35:3a:15:6b:47:e9:f8:77:c0:e2:be:3e:
32:81:c9:a2:4d:49:a0:9c:c9:2a:b7:31:1e:ac:8d:53:61:30:
39:e7:c0:9a:79:25:d6:a2:4c:fe:27:b1:98:f1:21:7d:eb:9a:
79:58:de:33:83:d3:fc:6c:5a:91:3c:a2:76:dc:fc:27:b7:1b:
b5:a8:10:ff:fb:96:00:d9:c9:c4:92:a5:f3:e2:eb:f9:6d:ee:
40:87:71:83:0a:5d:e0:52:d1:10:9f:58:11:a7:b0:b2:35:c8:
e4:82:c7:55:ce:4f:dc:ec:ce:31:84:be:38:67:23:d6:ef:4c:
7c:76:9a:7a:f9:5f:41:b1:ca:c0:34:51:43:d0:36:20:be:48:
f1:53:ad:f7:32:13:7d:9b:2b:7d:36:f9:04:32:73:ea:97:4b:
bf:de:3a:6e:31:98:fb:18:1a:c9:19:0b:3d:da:34:32:a3:dd:
6c:3a:2e:b6:58:f7:fc:86:85:47:5c:db:e9:28:1e:01:fb:1f:
d5:e6:33:5d:24:29:89:e3:76:3f:4f:21:89:2d:51:08:1b:90:
7f:b8:8b:90:41:d1:25:98:58:54:61:9c:78:42:41:3e:7f:f7:
ed:08:7d:c2:9c:b9:51:5b:47:30:fd:08:13:d9:85:d7:2c:83:
a4:e7:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:24 2025 by rpki-client