Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FTaRFjUTalb36uBwqGMfQbYXsTg.roa
File: FTaRFjUTalb36uBwqGMfQbYXsTg.roa (raw, json)
Hash identifier: ohXUZn6VcQEzfy/2vmmEWNeSkyW5Lk5kY3oWrdtWJu4=
Subject key identifier: 15:36:91:16:35:13:6A:56:F7:EA:E0:70:A8:63:1F:41:B6:17:B1:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD9C09F421A8D1F6B1F7A0C39EE98D8CF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FTaRFjUTalb36uBwqGMfQbYXsTg.roa
Signing time: Thu 16 Nov 2023 20:09:21 +0000
ROA not before: Thu 16 Nov 2023 20:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:c0:9f:42:1a:8d:1f:6b:1f:7a:0c:39:ee:98:d8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 20:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1536911635136a56f7eae070a8631f41b617b138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:88:bd:3c:b8:9f:51:f3:75:c9:08:dd:c4:
23:8a:45:5f:55:f3:77:6a:cd:30:97:7f:90:dd:03:
59:91:99:13:96:76:de:56:2f:0f:d1:bc:f8:db:61:
18:e5:48:52:25:35:5b:d4:70:cd:09:4e:86:98:68:
74:ca:2f:07:6d:2f:78:24:93:3e:a2:4d:9f:44:8a:
64:2d:07:c1:be:64:b2:bc:3b:b4:09:d0:14:c4:5f:
f3:44:67:35:97:26:1a:b3:22:9b:67:8d:e8:2e:a3:
13:4d:57:48:ca:69:e1:63:75:88:45:08:d2:20:3b:
c3:4d:52:7a:2f:de:2d:29:bd:7e:69:6b:d9:b1:ed:
8d:c7:c6:93:43:91:33:4a:04:20:96:9b:f6:8d:a8:
8e:27:82:79:53:66:c2:04:c9:9c:10:38:e6:88:11:
5d:9a:f1:b8:25:17:db:be:f2:55:14:b5:97:40:64:
f6:a1:db:bd:a6:30:17:0c:3c:b9:ca:29:8f:ba:d5:
c3:7d:c4:2e:08:64:41:ad:85:db:28:98:41:07:4f:
7c:16:0f:9e:df:0f:60:bc:5c:cb:0f:7b:0b:cb:56:
39:1d:9f:ed:2b:28:c9:43:b1:53:be:e5:87:1b:73:
4d:48:a6:8f:81:28:7b:05:c7:9a:f3:6e:0b:de:21:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:91:16:35:13:6A:56:F7:EA:E0:70:A8:63:1F:41:B6:17:B1:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FTaRFjUTalb36uBwqGMfQbYXsTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:03:0e:35:d4:04:67:60:09:3b:a6:71:55:0a:85:76:1b:04:
ed:4f:fb:56:81:ee:10:d9:04:43:f4:95:00:b8:d6:11:5c:1a:
df:48:74:2d:ba:48:e6:9a:07:55:69:91:71:f3:20:89:55:f8:
df:9f:6f:de:1d:85:d2:6b:99:de:22:a8:83:94:8b:4e:e8:c6:
ac:84:5c:b3:5e:81:0b:ce:22:6a:5f:c7:59:50:e3:40:1f:7d:
b7:55:f7:6a:97:94:c6:c5:4d:2e:09:6b:ae:12:80:2d:56:03:
bf:f7:e5:98:ab:17:94:13:97:7e:64:bc:6b:45:81:7b:81:53:
79:44:3e:c2:bd:10:16:63:e2:1d:98:d0:c0:5f:79:f0:af:fe:
8d:76:f5:5b:70:8d:48:d9:42:bb:fa:79:7e:56:dd:66:6e:c4:
21:09:53:04:14:d6:99:8c:9b:f0:d1:dd:1d:ea:84:ab:4b:00:
bb:36:19:4b:19:dc:7b:54:98:87:67:47:9c:7c:2e:43:85:a7:
74:5f:89:99:40:c0:5a:13:c4:4c:00:16:2b:92:ca:4d:29:23:
a1:11:9f:22:44:65:bd:c7:13:21:d4:fe:3f:46:33:27:7b:51:
e6:8e:ba:34:9c:2b:7d:49:9c:c8:80:55:c9:6d:0d:1d:8c:04:
da:6f:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:44 2025 by rpki-client