Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4vSKHPzhRcz6KS305PdoSoTWLk.roa
File: F4vSKHPzhRcz6KS305PdoSoTWLk.roa (raw, json)
Hash identifier: cZ/EK9Cp/YeNhN4KYxNCNizloB+9vODpwnQwUo42yZg=
Subject key identifier: 17:8B:D2:28:73:F3:85:17:33:E8:A4:B7:D3:93:DD:A1:2A:13:58:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2028E74677E9768C56F1C2B672D8D884
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4vSKHPzhRcz6KS305PdoSoTWLk.roa
Signing time: Thu 30 Nov 2023 12:16:40 +0000
ROA not before: Thu 30 Nov 2023 12:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:28:e7:46:77:e9:76:8c:56:f1:c2:b6:72:d8:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 12:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=178bd22873f3851733e8a4b7d393dda12a1358b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:da:bb:9a:f2:91:f8:87:f0:3d:28:97:f0:
7c:a9:4c:44:b1:7a:78:2b:58:d9:89:77:c5:94:f5:
a4:84:65:0c:e3:34:09:a3:e6:09:9f:4c:47:b6:9e:
22:9b:e9:d4:e3:a6:e9:bb:41:9e:e3:39:92:de:6f:
b0:ca:59:3b:43:8c:3b:00:2e:7c:ff:94:5c:80:a1:
14:81:f8:30:86:3f:ea:f9:90:8a:90:bc:43:55:6f:
e5:db:bc:29:81:1b:c2:18:7c:53:7d:28:f7:93:00:
8d:46:17:19:07:88:55:ec:e8:bf:5c:1b:4b:27:fc:
36:96:40:6e:99:37:2b:88:27:a7:67:19:1c:86:93:
72:0c:41:b1:9a:c6:f3:e0:b1:46:41:dd:85:25:37:
38:76:9d:39:08:a2:3a:92:ac:a9:74:17:fe:ab:ca:
db:38:ea:11:cc:09:e9:56:0c:94:31:65:98:32:62:
ca:8b:d9:63:c1:82:4b:48:e2:34:0f:23:e7:98:19:
14:9d:b6:71:d2:0e:b0:23:ed:b9:68:fb:32:70:f5:
96:9d:be:bc:e8:31:99:0a:40:5d:60:2b:86:13:55:
a7:4c:15:1b:d8:91:26:cb:de:91:c9:41:55:71:73:
99:f9:39:a5:14:35:a7:78:13:16:82:8d:8f:e3:c8:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:D2:28:73:F3:85:17:33:E8:A4:B7:D3:93:DD:A1:2A:13:58:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4vSKHPzhRcz6KS305PdoSoTWLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:4b:f2:0d:79:2e:fe:61:92:cc:a9:23:c5:25:7f:65:3d:0a:
5f:9c:c3:7c:7c:0f:aa:78:e6:a6:9b:01:d9:8e:4d:9c:01:8d:
4f:7c:9a:0d:39:a6:59:77:e3:ba:c0:1e:27:75:66:58:4e:3e:
cb:b0:7a:50:03:3e:1f:90:86:9c:58:28:ed:bd:78:2c:d1:4d:
d1:26:30:9c:5d:9d:cd:f4:fe:de:f1:03:26:39:04:e0:91:42:
d6:12:ad:8f:71:d6:58:f9:1b:38:47:fe:6b:14:f3:24:35:67:
f8:14:2d:d6:48:b5:d7:28:95:1d:d8:d7:ce:5d:f5:e4:1e:3c:
5d:7c:43:09:89:e6:2c:2a:ec:ea:58:82:f3:42:d8:34:d5:a3:
45:ab:64:05:c2:b9:6c:90:3a:5d:c3:eb:23:63:d0:2e:e0:d7:
4d:10:d6:b6:6e:2a:a3:1c:79:f2:bb:80:1b:cd:d5:ae:93:26:
32:78:f0:b0:fb:06:81:7a:34:c4:c5:cf:2d:30:48:ff:95:83:
17:64:2e:14:27:2b:06:b3:f0:88:cb:14:23:dc:c8:0f:39:2b:
07:c4:6a:2a:07:c1:89:0b:1b:5f:33:60:56:99:86:16:46:62:
9f:0f:3f:c5:a3:5a:37:fe:f9:00:52:1f:24:98:3c:0e:22:09:
32:39:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:06:51 2025 by rpki-client