Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FEZUtO33FX4zs5sYQFzNcgVmOvs.roa
File: FEZUtO33FX4zs5sYQFzNcgVmOvs.roa (raw, json)
Hash identifier: JWfuCkrYFuM9JMpZ60dlqcuWRVx9idAUN3eoZqAdlH8=
Subject key identifier: 14:46:54:B4:ED:F7:15:7E:33:B3:9B:18:40:5C:CD:72:05:66:3A:FB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB435F75F29042E35FAAE6AF740B9CCC5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FEZUtO33FX4zs5sYQFzNcgVmOvs.roa
Signing time: Thu 09 Nov 2023 13:11:57 +0000
ROA not before: Thu 09 Nov 2023 13:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:35:f7:5f:29:04:2e:35:fa:ae:6a:f7:40:b9:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 13:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=144654b4edf7157e33b39b18405ccd7205663afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:95:6d:22:17:06:a6:97:a7:62:11:05:82:
6d:66:ff:f2:47:97:ef:07:fe:cc:45:af:54:bd:c8:
4d:09:0b:07:58:8a:80:ae:fc:f3:8c:6d:84:e8:c2:
38:d9:17:c7:d5:1e:18:4d:e0:68:bf:5f:7b:6c:e9:
22:64:0e:e0:65:eb:4e:77:bf:18:53:2c:8a:5d:12:
7d:31:34:c2:3d:20:77:94:28:e9:b5:f7:c1:39:dc:
d8:34:b4:9f:02:76:da:e9:2b:80:8c:69:ad:bb:b3:
db:11:b5:f0:cb:4e:65:51:64:90:27:f9:97:39:c3:
f6:87:c8:5f:b7:1d:cc:28:4d:c4:0d:fb:3d:c8:74:
13:20:e7:10:73:f7:d2:4e:ac:95:ac:7c:2c:1f:60:
26:fb:96:a1:12:61:b0:47:dd:d0:09:ec:a3:5f:e8:
4b:0b:2d:40:f6:02:7b:6f:96:7b:23:58:f7:a8:24:
94:44:b4:99:09:be:8b:26:d9:69:6a:98:a3:9a:18:
21:84:5d:24:c8:46:b0:b8:9d:22:ab:93:cc:6d:5f:
28:0f:ab:c9:6b:36:e6:eb:5b:57:16:5c:f2:5a:0e:
36:30:89:66:44:b6:ee:1f:f6:32:c3:26:de:e7:b9:
21:24:ee:ed:6c:73:03:fb:34:cb:95:f6:42:3d:34:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:54:B4:ED:F7:15:7E:33:B3:9B:18:40:5C:CD:72:05:66:3A:FB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FEZUtO33FX4zs5sYQFzNcgVmOvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:4d:68:3c:9d:69:ef:4a:44:7a:0c:9c:f5:39:01:e1:f6:0d:
41:d7:4b:d6:5e:73:da:8d:72:19:2a:aa:8b:11:28:6a:57:50:
c8:e1:5f:b1:2d:f8:0a:36:94:0b:61:a3:bb:9f:7a:8f:ff:26:
db:6f:54:2d:f6:43:c4:82:6f:33:60:7a:06:28:ad:66:dd:2e:
7e:15:17:bf:8e:ba:73:3a:08:55:f3:37:7b:bd:24:3c:3c:27:
8c:bf:3d:76:5a:88:aa:c9:3a:15:1f:93:d5:b5:6d:36:94:4f:
ef:87:65:8a:74:89:75:b7:af:76:c2:96:67:29:67:ed:a5:e3:
4d:a3:84:99:b7:f3:1b:1e:22:c3:95:69:6f:0a:a9:7b:a4:44:
0f:fe:8c:fd:aa:dc:39:0d:5d:ca:7b:14:ba:ef:ff:ba:b2:10:
35:b6:b9:78:3d:c5:52:8d:1d:6b:6b:6f:6a:0b:51:12:7e:74:
18:05:70:b0:23:82:81:4b:40:02:0d:e2:94:da:2e:62:ed:e4:
d6:c4:3b:c9:e2:9d:ea:d8:26:d4:2e:9f:6c:51:97:37:c2:07:
54:b7:8f:39:80:db:87:73:09:b6:32:31:0a:24:01:77:9d:54:
cc:e5:82:4e:18:07:c0:7d:d4:0c:aa:2c:57:44:eb:ff:7c:0e:
5b:6a:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:20:54 2025 by rpki-client