Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F3ntClHd7RGwS6zTqMnfsgd0QBM.roa
File: F3ntClHd7RGwS6zTqMnfsgd0QBM.roa (raw, json)
Hash identifier: MpDDO/VKsruSRDfhujMIxh2rJwqS2nmGT4wB80pRT7Q=
Subject key identifier: 17:79:ED:0A:51:DD:ED:11:B0:4B:AC:D3:A8:C9:DF:B2:07:74:40:13
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA67F337D9EE01880C7F4DFE822D2AD2D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F3ntClHd7RGwS6zTqMnfsgd0QBM.roa
Signing time: Mon 06 Nov 2023 21:17:15 +0000
ROA not before: Mon 06 Nov 2023 21:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:7f:33:7d:9e:e0:18:80:c7:f4:df:e8:22:d2:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 21:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1779ed0a51dded11b04bacd3a8c9dfb207744013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:42:73:ba:74:89:a7:68:ae:ba:48:6b:ee:
7f:a5:99:10:94:49:52:1c:d8:5a:69:22:b2:4c:6d:
05:9c:e3:da:3b:a1:7b:fa:81:9d:81:a0:14:ea:1c:
bc:d0:c2:29:6e:c1:70:62:77:54:12:5e:41:73:73:
12:67:6b:3b:d7:b0:b2:83:0a:a8:0a:16:62:57:ed:
70:35:cd:96:6d:45:98:ea:40:33:90:a9:54:32:79:
c3:44:d0:c3:33:86:8f:cb:c7:42:b9:e0:07:70:b4:
32:87:47:90:8d:e5:19:83:b2:e1:63:55:9d:53:46:
dc:e9:8d:6b:f3:4d:a6:33:88:d9:0b:a3:82:d0:f1:
85:cd:d1:71:7f:d4:27:8e:6f:75:b1:31:72:8f:57:
a0:fe:3f:78:fd:b8:c6:68:b2:6b:38:44:76:3d:29:
16:73:3d:32:c7:92:73:dc:33:a5:c3:d9:3e:d0:e6:
6c:b3:d0:ee:7c:3c:95:a8:03:a6:9e:af:bf:fe:8f:
85:77:72:8d:5f:e4:92:55:44:22:fa:f1:40:6b:d7:
16:f2:f8:c3:09:ae:fa:c4:da:f8:6f:7a:dd:59:d1:
1c:1a:8a:62:de:82:78:9a:4b:b8:f6:9f:c1:97:89:
68:ef:60:8e:1d:33:c2:44:2d:0e:46:11:de:23:50:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:ED:0A:51:DD:ED:11:B0:4B:AC:D3:A8:C9:DF:B2:07:74:40:13
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F3ntClHd7RGwS6zTqMnfsgd0QBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3d:4a:d4:84:6e:01:9b:0c:b2:c1:50:79:a0:98:a2:6a:5e:
48:b5:fa:40:93:a7:a8:d5:1c:6a:be:65:46:67:39:28:38:49:
f3:b4:c3:db:17:f4:8c:e2:96:3b:12:90:9d:99:e8:70:79:86:
0b:b9:36:96:ec:d8:55:b8:f8:68:5f:11:6c:00:93:74:76:c4:
97:e6:12:4c:29:f3:19:ee:22:8b:87:ee:32:d9:76:5f:44:bb:
b8:e2:ae:6e:00:50:5f:2e:a1:1d:f7:fa:1b:4a:da:1c:81:ac:
e6:c4:4f:f3:0e:f7:21:48:94:04:c7:d7:77:fc:29:42:c8:db:
a4:fe:40:d3:95:84:e1:3f:5a:4e:69:4c:a8:82:00:e5:83:b4:
a2:1b:77:79:c2:00:07:68:2d:e6:f3:19:b8:e3:50:e5:4b:28:
75:37:bb:a1:25:43:52:57:eb:bc:a0:5f:6a:83:34:8c:52:48:
c6:d8:c6:fa:58:2c:f6:6b:18:5b:47:3c:d6:6e:72:67:f3:f6:
09:63:e2:c3:b5:f2:bf:e5:ce:42:1b:3a:8c:7c:b6:aa:9b:49:
7d:40:ff:31:82:d8:c3:0b:5d:00:1c:85:ec:10:03:cb:45:42:
f5:43:22:bd:e2:fd:68:46:54:14:7a:2d:86:24:a1:c3:02:8c:
09:92:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:54:29 2025 by rpki-client