Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6m_g_fN45ztrNVCcjqLwX77QFs.roa
File: 1-6m_g_fN45ztrNVCcjqLwX77QFs.roa (raw, json)
Hash identifier: FAA+YfggANph/vweCUYtiqPVzK9gPFECGCAybxcy2tI=
Subject key identifier: FB:A9:BF:83:F7:CD:E3:9C:ED:AC:D5:42:72:3A:8B:C1:7E:FB:40:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C28F1251177210756E5A7BFF6567E4446
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6m_g_fN45ztrNVCcjqLwX77QFs.roa
Signing time: Sat 02 Dec 2023 05:12:21 +0000
ROA not before: Sat 02 Dec 2023 05:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:f1:25:11:77:21:07:56:e5:a7:bf:f6:56:7e:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 05:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba9bf83f7cde39cedacd542723a8bc17efb405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:f6:ee:68:38:80:53:6a:11:19:c6:8a:53:
3b:0f:90:aa:b3:c7:30:89:6f:3d:b7:d0:96:f0:ef:
72:3e:23:19:0c:78:b5:55:73:73:2c:b2:36:97:82:
3b:a5:a1:23:c6:be:32:6c:21:ca:ad:5c:b9:68:4c:
f3:b3:98:b5:5b:00:3b:31:ea:47:ab:d1:ab:d7:a6:
09:86:6e:24:81:4c:3b:b1:75:41:cb:cd:db:15:6d:
6d:13:d4:19:f3:49:9f:9f:64:b8:b6:ef:28:83:f3:
d6:1b:ce:35:ee:9e:57:e2:21:74:75:86:52:e0:76:
bd:a3:12:64:1b:4d:ea:09:f7:ca:13:db:63:4b:10:
65:9a:b7:d6:c3:90:40:de:07:25:ef:05:18:a9:88:
aa:29:ec:46:a1:0b:4c:5f:40:d4:36:6c:41:73:b3:
6d:5a:e9:ae:69:0e:b7:9a:36:cc:28:2c:d9:d0:50:
1d:35:41:ea:3f:78:4d:af:f3:6a:1f:1d:da:89:91:
12:59:d7:d0:6c:48:ca:bd:01:69:0e:7e:e4:75:75:
bf:a2:d1:14:bf:0c:9f:d3:ec:9a:1c:84:8d:26:ae:
b4:c7:ae:ab:ca:8d:ed:78:71:a1:24:6c:7a:17:37:
e2:a4:a2:7a:ed:57:8f:92:5f:f0:89:b7:d9:d6:55:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:BF:83:F7:CD:E3:9C:ED:AC:D5:42:72:3A:8B:C1:7E:FB:40:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-6m_g_fN45ztrNVCcjqLwX77QFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:65:ab:c2:5e:c8:51:ef:9b:e0:6f:ed:43:87:b7:e7:3f:06:
f5:ed:58:54:fe:8e:c1:9a:39:b8:37:06:75:e5:a8:70:9f:92:
a8:a5:9b:f5:27:87:1b:ae:91:3b:5f:12:e1:d3:b1:8f:fd:3b:
95:f1:1b:e9:44:0a:6a:a9:4b:1e:18:3d:cc:d3:fc:c6:60:6e:
b1:07:01:95:8c:40:b5:86:b8:0d:a7:b4:7e:34:c5:17:e2:b0:
e0:29:e0:e1:ed:54:8c:d8:ad:34:eb:6d:3a:55:4c:a1:41:d3:
b5:e3:74:33:e5:ad:d1:58:5a:19:48:0e:6f:2e:5d:02:5c:f4:
81:e9:c8:78:0f:25:df:c2:c5:c4:69:2a:a9:96:4f:8b:71:75:
cf:b5:4e:69:cf:bb:a4:d7:93:83:25:ea:0a:18:cc:f1:1b:29:
87:a5:43:78:64:74:b1:72:f4:a5:c1:64:00:a7:bb:63:a5:f5:
7b:98:d8:0c:44:03:d5:2a:37:76:7d:bc:e1:d8:71:2f:99:24:
7a:e1:fb:c3:3b:02:78:cf:bc:e6:27:42:8a:3d:a6:bd:9d:b7:
e2:79:21:a2:6d:ee:06:ba:7b:a8:0d:da:9a:d5:e7:ef:40:bf:
b3:a9:df:cc:90:2c:f2:da:f6:6f:b3:97:10:ac:09:56:45:32:
70:97:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:26 2025 by rpki-client