Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjUAEey5SmCb4T_ABtuq2cUSCd8.roa
File: FjUAEey5SmCb4T_ABtuq2cUSCd8.roa (raw, json)
Hash identifier: JDBfi8DOgsQ89weY55LfwTcGvIpvrEXDrs+3WIOiQDE=
Subject key identifier: 16:35:00:11:EC:B9:4A:60:9B:E1:3F:C0:06:DB:AA:D9:C5:12:09:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C12343A66BDF6FCA62776466AEC0E7FF5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjUAEey5SmCb4T_ABtuq2cUSCd8.roa
Signing time: Mon 27 Nov 2023 19:14:21 +0000
ROA not before: Mon 27 Nov 2023 19:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:34:3a:66:bd:f6:fc:a6:27:76:46:6a:ec:0e:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 19:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16350011ecb94a609be13fc006dbaad9c51209df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:10:68:29:27:f2:26:47:40:2e:5f:5d:81:
b4:fb:ff:43:5d:2b:a6:9d:4d:0d:d2:35:ca:08:fc:
97:8f:c2:96:2f:65:79:02:b0:2b:8e:0b:2b:65:85:
c9:4b:7f:06:e9:d9:60:d0:ba:34:35:76:6a:f2:cd:
82:85:81:c7:d3:ff:2f:67:95:90:18:e4:e7:52:89:
b3:dc:0a:0b:30:d2:a9:24:6b:ef:ee:35:51:2b:32:
d6:78:19:f5:92:e7:01:07:c8:d4:d8:43:21:42:4b:
5e:b7:68:a4:04:39:36:b8:52:72:f6:5a:0a:bf:9f:
69:ad:28:e7:c2:09:a3:1a:a9:f0:58:b0:fa:00:67:
55:fa:14:31:69:3f:99:5d:56:8f:17:d1:ec:67:fd:
e1:a6:25:f6:8c:0d:63:ad:da:1f:fb:55:9f:68:c4:
3b:77:31:49:fc:05:83:9a:8c:bd:e4:4a:ad:7d:84:
fe:43:d1:8b:f5:ec:48:cd:83:15:e5:90:f0:52:21:
aa:c5:ce:0e:08:5e:d9:e8:06:fd:87:44:83:89:ad:
88:65:c6:20:8e:99:48:17:02:32:8c:1c:40:1f:f7:
50:83:21:08:a5:57:41:2f:fa:e4:42:c3:a3:98:75:
52:01:17:da:f2:89:27:17:15:6c:1f:fa:5b:9d:4e:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:00:11:EC:B9:4A:60:9B:E1:3F:C0:06:DB:AA:D9:C5:12:09:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjUAEey5SmCb4T_ABtuq2cUSCd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:39:df:24:c8:38:f5:75:54:d0:88:e4:e8:cb:3f:ec:fb:31:
f4:00:ec:cf:4d:41:fe:c6:e6:06:b7:8f:e6:89:48:a0:84:11:
93:1e:2b:d2:7c:f6:f5:85:40:b3:fa:36:ed:89:8b:dc:a6:b9:
d1:85:0e:1a:50:4f:83:c5:13:95:33:a3:90:47:42:45:1c:bd:
1f:7a:4f:0f:4b:17:bd:00:c9:44:0c:f5:b3:9a:ff:76:79:67:
2d:1e:98:3e:5b:c4:50:c5:78:82:36:03:b3:79:df:5b:24:a6:
a1:d8:16:fe:2c:2e:d2:cc:d5:ff:d4:4f:97:05:3e:fd:d1:ce:
dc:b0:39:00:c8:ac:d8:eb:fb:49:f6:e7:d1:68:85:56:66:52:
91:32:15:6e:1b:5b:19:81:48:14:e5:8e:0a:4f:13:ef:64:a2:
bd:22:dd:d9:8b:84:96:84:36:1a:da:8c:fd:97:c4:b7:a5:25:
f8:24:bf:86:c4:a6:ba:c4:5b:a9:02:8e:32:66:5e:e5:69:86:
a4:30:0f:4f:9f:0b:fb:e1:e1:02:c5:3e:5d:1d:82:12:3f:fc:
07:79:99:65:40:5d:3e:1d:d9:d2:dc:63:c1:f0:4f:b8:53:28:
c0:27:68:55:ad:31:c0:00:1b:0b:8f:07:27:f2:09:28:51:39:
20:34:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:08 2025 by rpki-client