Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FfYN7MjNL7wmAIdM0uPdaPs2fu4.roa
File: FfYN7MjNL7wmAIdM0uPdaPs2fu4.roa (raw, json)
Hash identifier: 0bP7TOqUu4JxeaG5rEbscFaO7PTWeqqh6wdU477F6Qo=
Subject key identifier: 15:F6:0D:EC:C8:CD:2F:BC:26:00:87:4C:D2:E3:DD:68:FB:36:7E:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C49C51171BFCB1CC2D887A93B5537C944
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FfYN7MjNL7wmAIdM0uPdaPs2fu4.roa
Signing time: Fri 08 Dec 2023 14:11:40 +0000
ROA not before: Fri 08 Dec 2023 14:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:c5:11:71:bf:cb:1c:c2:d8:87:a9:3b:55:37:c9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 14:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f60decc8cd2fbc2600874cd2e3dd68fb367eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:6a:8f:1c:ba:a9:af:05:a8:e1:0e:a7:01:
07:26:f2:8c:e0:af:fe:0e:c5:b8:3b:65:99:53:b6:
3a:a4:d7:60:6a:fd:ce:53:9f:28:78:1b:77:56:99:
04:65:7f:21:bb:dc:00:30:f6:56:b2:e2:37:1e:f3:
89:4e:ff:dd:be:43:0a:69:d9:7c:0e:05:de:3e:7b:
8b:01:ad:80:fd:d2:64:35:12:79:2a:62:e9:48:ba:
07:ca:cc:f0:a6:33:be:c8:30:cd:aa:f2:bd:36:79:
d5:8e:a1:31:92:de:cd:e8:9c:54:8b:c5:e0:a5:89:
c9:c5:5b:39:2c:a5:5e:3d:d0:28:e6:54:11:e6:40:
05:35:9a:8b:51:0e:73:3a:6b:a0:0c:cb:38:da:8f:
c9:5f:9d:da:24:a1:a8:cc:27:1b:e4:25:e1:89:f2:
6d:2d:1b:4f:59:e8:5c:84:0c:07:b1:52:ab:fb:76:
09:71:2a:81:6d:a0:cf:52:13:3a:54:03:50:f9:22:
9a:20:21:b5:d5:ae:7e:b0:02:0b:be:3d:7b:b4:2f:
8b:a1:f7:56:6e:e9:8b:2e:36:72:11:42:29:91:6d:
ab:32:f0:80:0e:81:fc:48:4c:53:40:c2:95:58:54:
74:b2:0b:c9:6f:03:4a:7c:6a:70:0c:35:09:80:d9:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:0D:EC:C8:CD:2F:BC:26:00:87:4C:D2:E3:DD:68:FB:36:7E:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FfYN7MjNL7wmAIdM0uPdaPs2fu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:d6:c4:b0:88:91:41:5e:57:34:c5:f4:84:f9:65:ba:7f:99:
33:a6:6c:2b:e4:f9:db:49:ed:5f:bc:1c:d5:b6:ec:54:67:e6:
53:8b:42:42:f1:8c:53:02:50:40:b9:35:23:79:09:ca:31:e3:
f2:2b:c2:e2:f4:af:ea:54:ea:7f:b5:05:e8:2f:33:12:63:e7:
a9:39:b2:44:91:26:1b:10:d6:6a:8e:f8:66:b6:c7:0b:7f:27:
2e:8b:50:56:45:72:ff:00:5a:f3:cf:87:5e:8d:e8:cb:ec:91:
41:08:cb:cf:5a:d5:e2:b7:41:14:92:f8:e4:ad:29:d4:91:08:
33:6a:55:1e:5e:b0:d2:82:41:b9:0b:dc:17:26:f5:20:41:8d:
28:fa:cd:65:e9:18:c4:09:ef:0d:3a:c2:af:ee:4a:65:ac:d7:
f1:47:ca:0d:ed:ac:32:53:d7:94:ad:20:19:ec:3b:80:13:1e:
78:08:42:db:c0:97:f5:a6:05:64:6f:b4:cc:fe:12:9a:d0:a5:
d0:f4:b6:25:db:24:cf:1c:b1:68:fb:10:35:5f:f9:ec:aa:1e:
19:96:a1:07:10:f2:8a:4b:da:6a:e1:22:8a:ed:bf:a7:a9:7f:
33:e3:9a:fc:a0:03:41:d3:17:f9:3f:78:f3:27:0a:70:9c:9d:
ad:01:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:09:04 2025 by rpki-client