Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FDWLWZfE0DviOm1qp5_f_33L5js.roa
File: FDWLWZfE0DviOm1qp5_f_33L5js.roa (raw, json)
Hash identifier: 3TAn21qfX+tzePqbP3TtdK6FyiEqYSqwF1jnTjBN01A=
Subject key identifier: 14:35:8B:59:97:C4:D0:3B:E2:3A:6D:6A:A7:9F:DF:FF:7D:CB:E6:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B13EF7965518ED6C9B4DED652EAE6B339
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FDWLWZfE0DviOm1qp5_f_33L5js.roa
Signing time: Mon 09 Oct 2023 10:15:43 +0000
ROA not before: Mon 09 Oct 2023 10:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:ef:79:65:51:8e:d6:c9:b4:de:d6:52:ea:e6:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 10:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14358b5997c4d03be23a6d6aa79fdfff7dcbe63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:6f:c4:f8:c6:65:24:a1:6a:21:80:02:d4:
ea:85:5a:aa:31:37:fb:23:3e:fa:a9:97:bc:96:d6:
23:91:37:dd:36:3a:d8:7d:7f:d9:40:a7:91:5e:1a:
20:98:ce:65:72:b2:91:24:ea:56:16:9c:d6:99:f5:
bd:81:f9:1e:a1:48:02:25:2d:4f:fe:6d:e8:bd:03:
ae:e6:d7:fd:87:0e:d8:50:28:cd:11:73:82:6f:03:
c1:f2:55:51:ce:fa:63:43:01:23:6c:c9:43:9b:69:
49:bd:08:fc:e3:9c:ab:cf:75:31:fa:98:ac:38:74:
b2:be:e0:d7:48:e8:a5:2b:6d:57:a7:9a:53:0a:a7:
74:9e:4d:28:92:e6:ed:3d:b4:f4:0d:41:4e:8d:37:
c6:5d:15:e4:d1:cb:1e:14:bb:25:9f:0c:13:15:2e:
7b:58:65:9c:91:6d:83:4a:70:94:53:e2:a5:b8:ad:
c6:5d:7f:cf:58:23:55:3f:97:39:31:59:14:2f:7e:
01:b0:fb:5a:c6:06:12:60:52:6d:39:ed:28:03:bf:
63:87:54:6d:9e:da:77:77:c8:ac:4b:91:bc:40:cb:
81:c2:a5:08:e8:dd:fa:1c:d3:5d:1b:90:9b:5f:43:
97:cd:7e:5c:01:d9:3c:ab:19:3a:ab:8c:28:95:ea:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:8B:59:97:C4:D0:3B:E2:3A:6D:6A:A7:9F:DF:FF:7D:CB:E6:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FDWLWZfE0DviOm1qp5_f_33L5js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:63:3c:f5:d1:07:a2:ab:4f:a5:65:07:a2:9b:c4:9b:e3:cf:
54:af:ee:bf:b0:bd:53:53:51:c7:4d:8f:53:25:e9:10:29:bd:
d1:c7:1d:bc:db:d1:54:59:75:e8:d4:9b:a5:b5:d9:3f:9c:fa:
d2:a6:30:63:9b:1d:d8:9c:e3:fe:e4:eb:d1:a9:b5:2e:44:89:
09:3d:88:f3:3a:78:1d:fb:21:77:79:0c:a7:cf:2e:af:cf:92:
6f:66:18:cc:5e:4f:f2:23:28:75:cf:a8:64:c2:1e:60:3d:9e:
53:c0:f0:f2:8e:1e:1a:2c:e5:36:60:cb:1a:e2:80:ab:a2:47:
bb:67:76:4b:14:3d:d5:db:94:e2:92:a8:c1:a6:2f:ec:bd:22:
9d:25:63:66:c1:4d:28:e9:ae:a0:f9:ac:cb:eb:bf:de:a1:16:
6d:53:c9:f4:f0:c4:a5:12:3f:d6:7a:27:ac:c1:66:f1:bd:7a:
fa:e5:ff:22:cf:92:ef:5f:ee:9c:be:9d:88:e9:ca:24:b8:02:
c0:f2:b2:da:00:49:96:61:b9:05:33:c9:52:b3:f6:2f:6e:44:
72:cc:77:61:e8:f6:8c:66:cb:de:33:d7:7a:ca:04:bd:ba:35:
5c:98:bf:44:d0:3e:5f:05:1a:e2:10:5b:83:ec:bb:63:30:a0:
5a:8f:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:35 2025 by rpki-client