Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FPQno2s9L3vSBB125-087123sK8.roa
File: FPQno2s9L3vSBB125-087123sK8.roa (raw, json)
Hash identifier: 5L/Bk5dIaiGQsJIrxJMUJlV8avdNswk6QfoYrMGue1Y=
Subject key identifier: 14:F4:27:A3:6B:3D:2F:7B:D2:04:1D:76:E7:ED:3C:EF:5D:B7:B0:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B476D991888953F56DCBD5E195835A4F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FPQno2s9L3vSBB125-087123sK8.roa
Signing time: Thu 19 Oct 2023 10:14:06 +0000
ROA not before: Thu 19 Oct 2023 10:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:6d:99:18:88:95:3f:56:dc:bd:5e:19:58:35:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 10:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f427a36b3d2f7bd2041d76e7ed3cef5db7b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:50:52:c2:70:a9:7e:fe:21:06:fc:06:1d:
62:8d:0d:53:79:4c:c9:0b:44:fd:74:6e:16:3e:22:
78:ed:de:77:2b:42:82:34:e2:5d:cc:fa:93:39:88:
ed:7e:75:cb:6f:76:52:34:11:0e:99:f2:47:44:1d:
e5:f0:3c:d0:fe:4d:d1:5e:9b:4a:a5:04:63:d4:5d:
e4:4e:22:6a:18:f9:e0:22:eb:31:f8:25:0e:58:8f:
40:cd:1e:20:8c:f7:4b:8b:50:d8:d7:91:ef:61:34:
70:de:bf:a9:1f:69:cc:ab:29:0d:3f:44:b9:9f:68:
c0:73:54:0b:86:e4:74:6d:f8:c3:45:fe:0a:81:1e:
73:4e:e9:88:04:34:4f:1a:9a:0b:1b:d8:4b:08:8d:
a9:70:e4:a6:8b:3a:6b:17:6f:47:a4:64:24:48:40:
9b:87:4e:7f:62:df:9b:67:4c:6a:e9:35:ee:be:da:
a5:31:51:17:e4:e3:be:b9:2e:4e:b6:ac:1b:80:9c:
2a:9f:7f:e8:24:62:30:a0:e2:d5:31:0f:18:48:dd:
34:15:eb:78:17:6c:2d:07:55:0e:6c:d8:61:f8:a8:
f9:e8:b4:27:1e:eb:05:b0:17:e8:50:4c:ae:3a:30:
a0:5b:5b:33:7e:a0:b2:04:a6:b0:5c:b0:4c:e4:38:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:27:A3:6B:3D:2F:7B:D2:04:1D:76:E7:ED:3C:EF:5D:B7:B0:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FPQno2s9L3vSBB125-087123sK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:f4:84:1f:9a:80:5c:2e:bb:9c:3c:18:83:de:3a:f6:df:58:
f6:5b:b1:d8:c6:6c:70:29:1e:74:6b:1a:9b:42:04:b7:99:b2:
9f:40:1f:e8:e5:a4:53:48:36:70:b0:d9:8a:9b:7e:6a:87:6d:
58:48:57:f0:0c:5f:2f:7c:a0:0a:b3:84:c9:68:e9:46:33:44:
2e:92:6f:f5:51:1f:79:5c:4f:e4:e3:1c:57:5e:50:b5:a9:e3:
5c:27:3e:55:df:3c:0b:ec:6d:0b:c3:c4:a6:94:e2:56:97:9f:
b3:08:ca:28:49:8f:3c:7a:06:31:a9:7c:4a:0e:50:b2:4e:93:
0b:ca:21:2d:28:e8:2e:c9:95:de:c3:65:6a:7b:61:82:e8:46:
b5:83:82:8c:a5:37:9a:c5:a7:f8:02:cf:d9:77:9a:c9:4d:fd:
eb:b2:e7:fb:d0:4e:d1:c8:24:17:6f:7b:dd:09:18:ce:f7:5a:
22:18:83:3c:3c:c7:e3:56:cf:f8:95:20:85:4c:05:f6:45:b9:
22:13:97:58:7d:03:98:07:37:83:d4:0c:0e:bd:84:55:f1:31:
9f:a7:32:9a:16:54:d5:e2:03:f4:22:6c:03:59:88:eb:4a:ef:
04:40:0d:f8:86:16:75:f6:77:e3:a9:dd:0c:ed:d0:d7:22:ce:
c2:d0:aa:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtHbZkYiJU/Vty9XhlYNaTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MTAxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGY0MjdhMzZiM2QyZjdiZDIwNDFkNzZlN2VkM2NlZjVkYjdiMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrNQUsJwqX7+IQb8Bh1ijQ1TeUzJ
C0T9dG4WPiJ47d53K0KCNOJdzPqTOYjtfnXLb3ZSNBEOmfJHRB3l8DzQ/k3RXptK
pQRj1F3kTiJqGPngIusx+CUOWI9AzR4gjPdLi1DY15HvYTRw3r+pH2nMqykNP0S5
n2jAc1QLhuR0bfjDRf4KgR5zTumIBDRPGpoLG9hLCI2pcOSmizprF29HpGQkSECb
h05/Yt+bZ0xq6TXuvtqlMVEX5OO+uS5OtqwbgJwqn3/oJGIwoOLVMQ8YSN00Fet4
F2wtB1UObNhh+Kj56LQnHusFsBfoUEyuOjCgW1szfqCyBKawXLBM5DivDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBT0J6NrPS970gQdduftPO9dt7CvMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRlBRbm8yczlMM3ZTQkIxMjUtMDg3MTIzc0s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADn0hB+agFwuu5w8GIPe
OvbfWPZbsdjGbHApHnRrGptCBLeZsp9AH+jlpFNINnCw2YqbfmqHbVhIV/AMXy98
oAqzhMlo6UYzRC6Sb/VRH3lcT+TjHFdeULWp41wnPlXfPAvsbQvDxKaU4laXn7MI
yihJjzx6BjGpfEoOULJOkwvKIS0o6C7Jld7DZWp7YYLoRrWDgoylN5rFp/gCz9l3
mslN/euy5/vQTtHIJBdve90JGM73WiIYgzw8x+NWz/iVIIVMBfZFuSITl1h9A5gH
N4PUDA69hFXxMZ+nMpoWVNXiA/QibANZiOtK7wRADfiGFnX2d+Op3Qzt0NcizsLQ
qh8=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:14 2025 by rpki-client