Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fBC3sCInrYO_63GSyn-Uo_15-CU.roa
File: fBC3sCInrYO_63GSyn-Uo_15-CU.roa (raw, json)
Hash identifier: yAoWv6qdlIiyxRmXM/bmBl1dfAV0r4lZx05Zza215ks=
Subject key identifier: 7C:10:B7:B0:22:27:AD:83:BF:EB:71:92:CA:7F:94:A3:FD:79:F8:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC14DB585E6493DC18FBD59CECD20FA58
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fBC3sCInrYO_63GSyn-Uo_15-CU.roa
Signing time: Sun 12 Nov 2023 02:12:57 +0000
ROA not before: Sun 12 Nov 2023 02:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:4d:b5:85:e6:49:3d:c1:8f:bd:59:ce:cd:20:fa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 02:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c10b7b02227ad83bfeb7192ca7f94a3fd79f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:dd:bb:93:39:4b:a8:c2:d4:c5:c2:a4:67:
97:28:e8:31:3d:45:f5:51:2e:04:24:e0:2a:60:b0:
4c:17:a3:eb:48:a1:1f:b7:6a:55:8d:33:0f:1c:5a:
86:5c:ba:86:d0:8c:d0:67:96:2f:eb:4a:0e:d0:96:
93:ae:1f:0a:de:00:7a:9d:9d:8b:7c:76:83:1a:26:
f7:25:20:d1:37:82:1b:44:b4:b2:90:8f:a5:f0:12:
5d:a5:a2:b6:f2:df:93:18:79:0d:1a:73:fd:b7:dc:
b6:8b:bd:e8:0b:88:b9:7a:cf:06:99:53:43:a7:f6:
dd:87:5d:ad:19:3f:ad:b4:23:12:cd:e4:36:2b:1f:
98:76:9d:b2:1e:b3:d2:69:0f:a3:50:b9:85:3a:1d:
5f:98:d0:1b:09:1e:f9:bc:12:05:48:74:76:71:f5:
58:18:a4:7f:70:fe:af:f9:23:64:01:99:94:f4:7e:
47:70:58:99:c5:38:12:8f:73:0d:63:81:e5:2e:7a:
39:6e:f8:ab:47:31:32:d4:54:d5:a9:a5:ac:4b:2e:
f8:c1:5e:d5:d9:c3:31:dd:05:3c:d2:54:ad:9b:85:
76:f0:1b:ae:72:61:9a:26:46:0b:42:93:2c:36:de:
13:b6:6c:e5:95:76:10:67:b1:bf:d0:e0:bb:88:83:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:B7:B0:22:27:AD:83:BF:EB:71:92:CA:7F:94:A3:FD:79:F8:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fBC3sCInrYO_63GSyn-Uo_15-CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:d8:07:25:89:f4:fe:cb:9d:d4:b4:dc:74:57:a1:14:0b:cd:
c9:2e:d8:70:07:a6:2a:19:ec:84:f0:d6:29:2c:07:49:b6:d1:
dc:ad:b1:50:83:68:72:7d:b2:8a:72:77:de:0a:9a:0b:07:9d:
71:17:1f:f7:6c:36:bd:ee:ba:a0:d0:30:66:ba:9c:47:96:5f:
86:d7:3f:72:0d:34:41:f2:ab:4f:c7:a9:62:55:b4:7e:09:07:
d8:5c:a6:0b:0a:b1:57:bb:08:ee:34:7d:8d:c1:78:42:41:8f:
38:3f:86:4c:20:28:19:50:90:11:e7:4f:b0:86:f3:96:da:bb:
0e:6e:ce:38:4a:37:89:4d:8b:e8:cb:5d:13:e3:43:43:5e:fc:
cf:ac:8f:4e:15:34:17:86:aa:91:24:60:43:6c:cd:93:1c:6b:
cf:19:17:15:ed:f5:e4:df:76:75:5e:97:c5:97:f5:81:6e:26:
3d:51:26:34:3d:ae:6d:f8:22:38:4c:ae:dc:13:08:3f:a8:1f:
0a:0e:21:5b:56:ce:ef:ab:d6:d9:f5:c7:64:9f:05:61:e9:e8:
52:60:92:1a:dc:5b:3d:39:82:cd:6f:07:13:66:34:48:b6:35:
3c:59:8b:32:09:e7:ec:aa:9e:c3:33:23:c5:a5:b2:7a:6f:14:
7c:3d:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:30 2025 by rpki-client