Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNGw9zL4zF96aXpE_kgMRyJ2w8Y.roa
File: fNGw9zL4zF96aXpE_kgMRyJ2w8Y.roa (raw, json)
Hash identifier: dGYBOwScBcciGRhxLrJ6z1Q8iBUza1fHjHdr2ZdgYcY=
Subject key identifier: 7C:D1:B0:F7:32:F8:CC:5F:7A:69:7A:44:FE:48:0C:47:22:76:C3:C6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEE61C6A3D04ED7A6DA6BF46B44FAF69A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNGw9zL4zF96aXpE_kgMRyJ2w8Y.roa
Signing time: Mon 02 Oct 2023 03:14:59 +0000
ROA not before: Mon 02 Oct 2023 03:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:61:c6:a3:d0:4e:d7:a6:da:6b:f4:6b:44:fa:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 03:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd1b0f732f8cc5f7a697a44fe480c472276c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:b5:44:32:6e:5f:5d:3f:d6:ab:44:3f:94:
2a:bd:bc:fa:46:28:f9:58:74:75:a8:cd:a4:27:4d:
61:23:82:02:6e:46:3a:87:e3:3f:12:e9:c7:73:ec:
fe:ca:b5:b6:a8:63:7d:8f:06:4f:85:72:34:36:d3:
13:84:bc:da:11:9c:72:7f:76:b1:ae:55:23:96:47:
ab:c1:27:81:48:0d:0a:96:d6:0d:74:20:a2:f4:03:
8d:cf:46:9c:dc:92:71:7f:e9:ce:58:08:df:4c:b0:
67:3e:24:37:3b:ff:9f:ec:70:6a:c9:2c:ed:9d:6d:
7a:5b:f6:72:3d:de:f0:30:1a:6b:ef:b2:ce:d4:b4:
f2:29:a3:fe:42:34:4f:d1:fe:1d:50:fb:da:0c:d3:
46:b1:df:c2:9a:9a:90:c0:ff:a7:48:ee:45:e4:78:
51:a2:4c:2c:e2:3b:3a:a3:08:19:76:3a:19:85:33:
f0:98:e9:d1:31:bb:ee:26:4f:8b:3d:6e:b9:79:68:
5a:b1:fa:57:58:4e:a1:97:60:ff:aa:77:5a:2e:ea:
33:1e:1d:c3:21:a6:d1:36:dd:cb:10:0b:f7:59:4b:
20:36:c3:11:7e:8e:3e:82:d5:b5:f5:7f:4b:4e:b7:
c3:87:e1:2d:e8:ee:f0:4a:fa:51:51:e8:86:5b:16:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:B0:F7:32:F8:CC:5F:7A:69:7A:44:FE:48:0C:47:22:76:C3:C6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNGw9zL4zF96aXpE_kgMRyJ2w8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:9b:85:a5:fb:15:cc:c6:f3:92:a2:1b:a8:07:84:c8:c0:88:
06:ca:17:8b:51:07:78:d8:36:47:dd:0b:bc:6e:01:5e:c2:1a:
df:a3:62:80:8a:df:e8:e9:9a:d1:b4:d6:fd:c5:cf:0a:19:3d:
92:47:fb:71:05:98:d8:21:b3:07:30:d3:8a:41:13:f3:d6:e5:
7e:e2:f4:95:07:bc:68:e9:65:86:77:33:34:3a:0b:3b:c6:9d:
33:32:2c:57:e0:f8:3a:10:90:48:14:6b:95:ba:d4:99:55:2a:
ce:2e:48:6e:ea:e4:66:c9:79:2f:c9:51:ad:7b:01:d9:0a:d1:
dd:96:16:db:c0:39:a4:d2:bc:9a:3d:aa:0d:de:1b:65:96:c9:
c7:68:f0:66:e5:72:cd:18:d5:3e:d1:6b:58:24:85:35:26:d8:
41:49:65:a1:1d:f7:62:49:20:f2:2b:b3:54:ca:17:05:0f:84:
4a:ad:39:cc:d0:d2:c5:f3:50:75:39:ec:44:be:7c:05:f7:c5:
3d:a3:91:12:10:0b:34:7a:75:b8:6a:0b:91:ab:63:ae:15:b9:
44:59:2c:2b:ca:0d:b2:1f:01:8e:af:39:e3:70:ea:e8:30:3b:
50:08:9d:84:c9:08:de:c3:c8:28:71:e3:b4:b0:50:cc:0f:f3:
a3:64:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:41 2025 by rpki-client