Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjYLm-J2fnfU4Y5gp670QQ6AWbA.roa
File: FjYLm-J2fnfU4Y5gp670QQ6AWbA.roa (raw, json)
Hash identifier: paFDjV2IEyz/yNGlzIwTW3Kpim2eVioGQO9vQ/Wqol8=
Subject key identifier: 16:36:0B:9B:E2:76:7E:77:D4:E1:8E:60:A7:AE:F4:41:0E:80:59:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD4D2A7C2004B6DC770A33F17DA97EFBD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjYLm-J2fnfU4Y5gp670QQ6AWbA.roa
Signing time: Wed 15 Nov 2023 21:10:57 +0000
ROA not before: Wed 15 Nov 2023 21:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:d2:a7:c2:00:4b:6d:c7:70:a3:3f:17:da:97:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 21:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16360b9be2767e77d4e18e60a7aef4410e8059b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:89:f1:24:ff:af:1c:27:7c:79:0b:8b:c1:
3c:67:19:f9:dd:bd:60:7d:b6:8e:70:9c:0f:13:b4:
7a:77:60:d0:25:64:03:09:41:54:5c:e1:2d:86:2c:
63:a2:e5:25:15:71:ae:53:17:80:51:32:c2:42:f1:
ec:4b:c7:ed:a8:b4:6e:5a:3f:0d:00:cf:c8:dc:3d:
54:ce:6f:b9:49:1b:84:46:fb:f4:7b:46:e9:b6:1b:
f6:8e:5c:7f:a1:a9:f0:1c:30:8c:61:f0:da:76:0a:
bd:2d:74:f2:d2:ce:44:13:4f:1a:5d:03:44:31:dc:
f7:92:d1:89:9a:bd:f9:be:25:28:c9:3e:c9:7d:96:
e8:86:a5:2d:f6:d0:00:88:c4:78:ed:90:6d:75:8f:
6d:53:94:bc:44:b3:ce:5e:d0:b3:3d:af:16:a9:e4:
d8:f3:7a:f9:c8:bd:44:d5:6c:b6:86:b5:c7:2b:61:
77:d0:97:7e:c9:bf:17:3f:0a:e4:35:6c:c8:84:76:
0e:57:f5:21:91:20:28:ed:54:3f:28:6b:ca:c7:53:
df:41:f2:9b:61:9e:1e:64:08:9c:94:24:83:3e:c9:
e8:57:fe:99:f1:a0:ad:c8:c8:4d:ee:b1:c6:8d:b5:
67:e1:8c:d3:3b:1a:46:81:42:52:e8:d7:85:97:d3:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:0B:9B:E2:76:7E:77:D4:E1:8E:60:A7:AE:F4:41:0E:80:59:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FjYLm-J2fnfU4Y5gp670QQ6AWbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:37:e0:43:ec:b3:2f:b1:82:6d:23:96:7f:8d:d6:74:67:fa:
93:94:c1:77:2e:6c:cb:00:73:a4:e9:de:8a:af:44:d6:db:96:
05:7c:87:04:d3:d9:ba:97:4a:d8:7e:00:12:14:a8:ca:60:4d:
18:ff:1a:17:ca:d2:93:62:45:e8:76:ca:41:fe:62:b9:3e:d1:
09:05:0a:71:19:6a:ac:40:5f:66:18:87:30:69:c4:e4:22:36:
0d:27:9a:fe:33:07:b0:5e:25:8a:db:7d:c9:e4:8b:ab:45:2b:
25:7b:0e:d1:a7:85:13:e5:55:dc:b2:fe:ef:a9:7c:c7:dc:4a:
a2:6a:79:db:0f:cf:c1:a1:77:b8:89:8c:67:b2:18:1d:19:db:
3b:c2:f3:73:d7:89:be:6f:16:81:fe:70:68:d0:c3:ba:05:62:
f1:85:e7:52:4d:a3:41:a0:80:fe:fa:33:33:17:b6:ef:4e:f1:
eb:72:c3:35:09:a9:cc:d6:de:a0:f2:54:59:7a:c8:2b:08:a9:
07:51:17:76:29:e0:b3:6c:d2:bd:02:08:bb:e1:ba:55:1b:7c:
ac:a4:23:41:f6:2c:af:5d:53:82:6e:7b:82:e5:39:36:5d:a5:
4f:be:57:da:5a:34:6e:4c:f1:ff:07:5e:62:fb:47:18:e2:56:
66:1c:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:55 2025 by rpki-client