Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFCB5tDhkvUEOBOE973dcohqOu4.roa
File: fFCB5tDhkvUEOBOE973dcohqOu4.roa (raw, json)
Hash identifier: 6vweg0SQ2QXW8JZixjtISdXBgkmzKRhMvwDq/pBUM4U=
Subject key identifier: 7C:50:81:E6:D0:E1:92:F5:04:38:13:84:F7:BD:DD:72:88:6A:3A:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE4B9DA42C5CDCDD3A43ECC109FFEB64B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFCB5tDhkvUEOBOE973dcohqOu4.roa
Signing time: Sat 30 Sep 2023 06:14:59 +0000
ROA not before: Sat 30 Sep 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e4:b9:da:42:c5:cd:cd:d3:a4:3e:cc:10:9f:fe:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5081e6d0e192f504381384f7bddd72886a3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:61:49:99:04:9a:bf:db:b9:e0:4a:3f:52:
39:e5:b0:6b:51:c0:df:2e:ab:4e:e6:56:90:1f:1d:
34:fb:74:2b:17:58:fd:f6:e6:c1:85:96:82:ff:5e:
37:48:43:c3:ab:cf:3f:aa:d3:36:7d:4b:9e:1a:35:
04:d0:5b:95:ac:7b:67:95:7a:41:f9:98:3f:dd:f1:
b3:fa:a6:e7:7f:b2:f3:dc:42:fb:d3:11:86:c1:f3:
24:e9:ad:46:73:9c:32:49:80:22:e9:eb:fb:59:3b:
04:8f:f9:8a:41:45:44:63:ed:9b:b5:7c:98:b7:18:
4e:d2:49:6c:af:b9:9f:c4:83:f3:42:07:13:b4:5f:
43:53:bd:25:e5:a2:08:79:2e:88:26:47:11:37:43:
8c:4b:e3:66:0a:d3:9a:8e:05:e2:ba:0f:bd:5d:42:
da:78:f2:74:b9:2b:0b:02:50:c0:24:56:ca:01:31:
8d:48:1c:8c:58:1c:8f:d8:fb:b0:f3:de:e8:82:5d:
50:44:03:96:8e:44:01:4f:ca:43:e5:79:ed:c2:cc:
00:ee:1a:c9:22:ac:55:94:e7:b2:d8:f1:72:0c:5b:
b4:21:7e:06:93:4c:ea:79:a3:a3:59:35:36:aa:e5:
c8:94:0b:bd:28:b5:a6:5f:5e:94:7b:0b:d7:64:c9:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:81:E6:D0:E1:92:F5:04:38:13:84:F7:BD:DD:72:88:6A:3A:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFCB5tDhkvUEOBOE973dcohqOu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:b1:47:b4:62:21:fe:46:37:1c:92:fd:e0:0d:6c:98:be:d6:
6a:9c:d5:33:d8:dc:02:dc:ec:a7:c3:d1:08:86:1d:4e:4e:9f:
0b:69:6c:fd:44:de:c3:ef:ea:3d:5c:1c:61:ea:7b:09:42:91:
aa:19:78:ac:10:61:bb:73:1c:ac:70:ff:ff:dc:c8:da:80:77:
7c:e0:49:cb:67:5b:f8:12:9d:6a:7a:4a:aa:30:1b:da:b3:61:
90:12:97:74:99:88:56:92:20:ca:9a:5e:73:d5:df:f2:a7:89:
06:ab:8e:89:77:0b:da:fc:35:a4:6d:22:dd:13:04:34:ac:ab:
ea:98:3b:dc:dd:90:05:a3:5f:4c:ba:df:68:46:f2:08:02:9e:
3e:f8:3e:51:1e:d8:92:df:c9:ba:38:46:7c:75:14:02:f5:ba:
89:75:f5:23:8f:45:80:63:e8:ac:2b:0c:37:10:73:06:a9:7b:
ff:9a:32:1b:d6:26:9f:30:9f:29:e5:31:e1:55:9f:81:c3:87:
a2:1b:84:fe:94:8d:69:28:66:46:b9:15:16:d7:8c:3d:46:0d:
3a:8d:55:5f:b9:5b:10:ec:de:e5:c6:64:33:9e:c9:be:88:00:
8f:4d:bd:25:49:8e:9d:84:b8:6b:11:ed:ca:40:33:c8:a4:bf:
2e:32:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:34 2025 by rpki-client