Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FneTATEp608vjt9DmWTW8SYSWW4.roa
File: FneTATEp608vjt9DmWTW8SYSWW4.roa (raw, json)
Hash identifier: MhjdZtFJEgX0nFSA6iS4yVolREN1SiyAJMfveRLvNMo=
Subject key identifier: 16:77:93:01:31:29:EB:4F:2F:8E:DF:43:99:64:D6:F1:26:12:59:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEE29038D982A5A6D9CBE8E98B860E40C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FneTATEp608vjt9DmWTW8SYSWW4.roa
Signing time: Mon 02 Oct 2023 02:12:59 +0000
ROA not before: Mon 02 Oct 2023 02:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:29:03:8d:98:2a:5a:6d:9c:be:8e:98:b8:60:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 02:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=167793013129eb4f2f8edf439964d6f12612596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:f5:b8:9f:f2:00:3b:4a:a7:58:fe:66:26:
3e:ab:0e:ee:a0:21:ee:c4:3c:21:7a:9d:13:c7:ab:
ae:c2:60:6c:78:7c:e9:e4:91:4c:8b:72:2e:2f:d1:
c6:5a:27:f8:b3:28:7c:18:80:1e:1c:66:68:15:65:
93:81:e0:15:98:f8:f0:7b:79:f1:32:ca:7f:b4:a0:
79:81:f4:f3:8d:44:2e:9b:65:14:e2:1e:2e:dc:5d:
a8:9a:a1:91:1d:ca:60:89:93:73:e2:ab:4a:b8:4f:
93:64:ae:08:b2:a4:82:28:4c:e5:b4:17:c8:4b:c9:
36:82:f2:33:8e:29:57:ba:53:f6:c1:a1:df:24:15:
7a:4d:9a:ab:0b:45:a8:ee:6b:c4:32:59:a8:df:28:
50:6b:a0:90:32:b7:1b:13:6a:41:e0:db:87:db:27:
68:e0:22:76:55:e3:4d:b6:4f:c2:b9:fd:bc:d8:37:
32:19:24:15:e2:fa:dc:2e:9d:d9:21:f8:a1:b6:fe:
d1:fe:86:f8:fe:d4:07:01:8e:06:cd:63:c3:28:38:
38:72:81:d1:79:af:fc:ea:a4:03:8a:a4:8c:0b:f2:
84:0c:80:d0:e3:b9:4b:62:64:1c:f4:ea:41:9e:bd:
81:4a:8d:66:b6:ae:0a:26:90:c1:cb:0e:7c:24:3d:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:93:01:31:29:EB:4F:2F:8E:DF:43:99:64:D6:F1:26:12:59:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FneTATEp608vjt9DmWTW8SYSWW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:93:ad:19:a5:84:15:2e:e8:70:1a:de:53:71:7e:4c:98:00:
04:61:40:8c:1a:f9:3f:1a:04:dc:4e:27:f8:12:c2:cc:90:a2:
86:50:54:87:38:7e:e1:ff:22:64:cc:03:9f:6f:c5:c4:5b:e9:
8c:34:1e:80:40:5b:96:14:3c:ce:b9:04:30:a1:fe:57:ba:71:
06:70:2a:4d:ab:2c:d8:a7:bb:2f:14:be:0b:53:bb:1a:77:31:
e0:0f:36:ee:4d:45:b2:95:fb:79:ec:ab:73:76:1a:1d:8f:dd:
54:37:0d:f2:c6:fb:3f:d9:ad:5c:19:cc:8e:ce:d4:21:37:b4:
00:a4:f6:f8:73:34:7c:aa:5c:5e:d0:61:49:bf:19:be:a2:a8:
4a:1d:3c:a1:b7:af:20:3b:84:dd:32:02:25:4c:01:9c:8c:d5:
0a:03:b3:d8:b5:f2:8e:ec:c4:97:f3:ac:b5:a2:da:5f:a4:cc:
e5:8c:ca:f2:d8:e4:c9:36:64:b6:17:1d:00:6d:97:1f:2a:41:
b2:43:5c:16:52:4b:d3:88:86:fe:b3:20:8d:6e:a2:cf:bb:a1:
a1:15:b7:d3:0a:45:8c:62:1d:66:d0:9a:a1:16:91:8a:70:6d:
d6:ef:bc:e1:90:9c:1d:0d:c4:0f:24:46:11:4b:fb:a9:bc:14:
6e:9b:41:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYruKQONmCpabZy+jpi4YOQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAyMDIxMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjc3OTMwMTMxMjllYjRmMmY4ZWRmNDM5OTY0ZDZmMTI2MTI1OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2er1uJ/yADtKp1j+ZiY+qw7uoCHu
xDwhep0Tx6uuwmBseHzp5JFMi3IuL9HGWif4syh8GIAeHGZoFWWTgeAVmPjwe3nx
Msp/tKB5gfTzjUQum2UU4h4u3F2omqGRHcpgiZNz4qtKuE+TZK4IsqSCKEzltBfI
S8k2gvIzjilXulP2waHfJBV6TZqrC0Wo7mvEMlmo3yhQa6CQMrcbE2pB4NuH2ydo
4CJ2VeNNtk/Cuf282DcyGSQV4vrcLp3ZIfihtv7R/ob4/tQHAY4GzWPDKDg4coHR
ea/86qQDiqSMC/KEDIDQ47lLYmQc9OpBnr2BSo1mtq4KJpDByw58JD3+CQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBZ3kwExKetPL47fQ5lk1vEmElluMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRm5lVEFURXA2MDh2anQ5RG1XVFc4U1lTV1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHiTrRmlhBUu6HAa3lNx
fkyYAARhQIwa+T8aBNxOJ/gSwsyQooZQVIc4fuH/ImTMA59vxcRb6Yw0HoBAW5YU
PM65BDCh/le6cQZwKk2rLNinuy8UvgtTuxp3MeAPNu5NRbKV+3nsq3N2Gh2P3VQ3
DfLG+z/ZrVwZzI7O1CE3tACk9vhzNHyqXF7QYUm/Gb6iqEodPKG3ryA7hN0yAiVM
AZyM1QoDs9i18o7sxJfzrLWi2l+kzOWMyvLY5Mk2ZLYXHQBtlx8qQbJDXBZSS9OI
hv6zII1uos+7oaEVt9MKRYxiHWbQmqEWkYpwbdbvvOGQnB0NxA8kRhFL+6m8FG6b
QZY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:01:53 2025 by rpki-client