Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FnFVnVQTKUkddgUxfxuriivq7ys.roa
File: FnFVnVQTKUkddgUxfxuriivq7ys.roa (raw, json)
Hash identifier: 7p1WEhfM/8QAq2uILuAnmuCyW4VSi58FqL9pyQUc85o=
Subject key identifier: 16:71:55:9D:54:13:29:49:1D:76:05:31:7F:1B:AB:8A:2B:EA:EF:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6EAF21A0161F3F5CD73F7858F19E3E2C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FnFVnVQTKUkddgUxfxuriivq7ys.roa
Signing time: Fri 27 Oct 2023 01:10:53 +0000
ROA not before: Fri 27 Oct 2023 01:10:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:af:21:a0:16:1f:3f:5c:d7:3f:78:58:f1:9e:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 01:10:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1671559d541329491d7605317f1bab8a2beaef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:1d:c6:2b:72:1e:06:90:52:e5:9b:c3:ac:
8b:fa:54:3b:9f:c3:2e:37:17:22:59:85:ef:92:f1:
d7:f5:6c:f1:6e:57:64:63:16:c4:05:2b:10:05:f5:
e1:37:02:79:a7:a2:e5:0a:9b:0a:89:2f:a4:0f:9e:
06:c4:30:3d:18:6c:3e:12:41:f1:5c:a5:6c:e2:db:
62:09:5e:e2:a9:97:51:8b:29:c6:06:33:57:7a:0a:
1a:af:41:9e:ba:c9:bb:de:69:0e:40:83:b8:e1:44:
7a:02:c5:ad:f6:e9:c2:76:c2:9c:e2:4e:25:8f:2f:
53:74:ed:20:84:53:a0:ea:87:9e:7b:69:ba:87:a9:
69:9d:83:64:67:09:d1:82:a1:73:14:18:5b:e5:2f:
96:ba:99:60:10:82:e5:38:8e:ed:e2:df:39:6a:30:
32:2a:cb:b4:d0:d9:14:50:03:cd:64:38:d1:fd:44:
e8:a7:fb:3e:3a:2f:0a:4f:21:24:bc:25:30:c8:3b:
f5:8d:c3:a7:a3:af:4b:30:69:41:77:20:30:04:72:
27:c9:0e:6f:85:ca:bf:90:b8:18:f1:ba:ff:f8:4b:
a1:fd:87:44:e4:1e:07:23:e7:fa:34:3a:1c:4c:c8:
d1:13:33:b9:67:5a:83:d9:65:19:ae:4d:bc:eb:ec:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:55:9D:54:13:29:49:1D:76:05:31:7F:1B:AB:8A:2B:EA:EF:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FnFVnVQTKUkddgUxfxuriivq7ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:0f:30:62:b6:fe:fb:77:13:57:64:c5:65:fb:58:ae:14:4c:
bb:a3:f2:d3:2d:ec:ac:6d:85:90:17:74:ea:bc:c6:48:c1:51:
22:45:bf:e7:17:3c:4a:e4:57:5d:27:d6:ca:0a:74:b4:f7:25:
d0:4c:3f:cf:cb:e3:a2:f0:d1:62:24:51:59:9f:75:72:8f:a7:
52:7a:93:27:57:80:22:44:a1:af:73:fc:7f:e6:bc:7e:80:1c:
94:15:e5:dc:23:b7:75:d7:f6:c7:7c:50:65:4a:5e:95:1a:89:
e9:89:ea:c7:17:53:85:ae:f6:c5:4a:4d:69:a4:93:68:4a:d0:
58:c0:27:e4:ff:b0:ed:54:61:16:98:69:47:e1:2a:b0:26:15:
46:36:0c:40:7b:73:2c:a6:2a:e3:ec:5c:c2:97:a2:45:f7:17:
6c:25:ba:1d:51:75:97:20:70:a9:61:cb:e9:da:37:99:de:24:
4f:6f:cb:78:63:38:a2:be:30:2f:d4:fa:58:08:2a:42:1b:ee:
e5:72:a7:5e:22:b0:75:8e:9c:cd:08:1e:09:f7:f3:33:8a:08:
e4:df:5e:de:1c:51:3d:76:2c:cc:21:8f:12:6d:89:ef:e3:7c:
c6:67:e3:bd:f7:32:fa:4e:92:ed:b8:dc:a0:44:bd:ba:49:c6:
56:94:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:32 2025 by rpki-client