Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fXgAAHmAsL4vAhu-gQXjDd-ZNso.roa
File: fXgAAHmAsL4vAhu-gQXjDd-ZNso.roa (raw, json)
Hash identifier: /O2u2DIhCtJgbc/g7wBIT7ESJ/zTeNEt6dnQftGdIVg=
Subject key identifier: 7D:78:00:00:79:80:B0:BE:2F:02:1B:BE:81:05:E3:0D:DF:99:36:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2E1781AAC8BB664E295BC1B0EA1AD24E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fXgAAHmAsL4vAhu-gQXjDd-ZNso.roa
Signing time: Sun 03 Dec 2023 05:12:21 +0000
ROA not before: Sun 03 Dec 2023 05:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:17:81:aa:c8:bb:66:4e:29:5b:c1:b0:ea:1a:d2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 05:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d7800007980b0be2f021bbe8105e30ddf9936ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:22:e2:71:0b:92:8f:91:49:a0:2f:3d:01:
ae:06:65:8b:ed:ff:ee:13:51:48:e4:5f:89:09:4f:
f9:bb:6c:2d:bc:5b:f8:bf:46:f9:ee:25:89:9d:62:
3e:38:bb:28:84:69:bb:1e:92:40:ce:09:2b:81:c8:
6e:e7:ca:b3:4c:e6:68:2e:38:1b:c6:fd:a5:2b:b6:
27:d8:0b:5f:ff:1a:f6:10:c8:5b:96:df:0a:35:88:
19:80:79:83:81:44:fc:93:a1:b0:6c:1f:b0:0b:61:
d9:b4:bc:3f:83:bc:18:b1:69:62:02:3f:ee:f9:84:
20:e0:25:9c:d4:71:24:23:83:a8:b8:73:9d:e8:4b:
92:63:3b:a0:22:3a:b9:98:39:a7:df:1d:85:5f:d8:
71:4d:40:ec:28:07:6b:84:6c:ff:8c:b3:af:17:d3:
ad:0f:42:51:59:6d:1e:44:9a:83:11:8e:3e:09:5d:
fe:ba:62:42:0c:93:4f:b3:ce:58:87:e0:0e:0c:39:
b2:97:b0:be:2d:5d:78:7d:a4:8b:5a:f6:b0:67:de:
c4:44:78:bb:87:48:11:3c:61:88:af:d4:f2:ed:73:
ae:37:40:42:0e:72:63:82:0f:71:a9:d0:68:c8:e9:
dd:25:b6:4d:e7:ed:ad:4b:af:c0:ff:fc:55:19:3d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:00:00:79:80:B0:BE:2F:02:1B:BE:81:05:E3:0D:DF:99:36:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fXgAAHmAsL4vAhu-gQXjDd-ZNso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:52:e7:96:f9:b4:7a:0b:48:0d:21:6c:60:48:a7:14:3e:bd:
e0:b6:07:03:11:ba:db:72:aa:ca:e1:14:77:58:e1:68:ad:f5:
4b:2c:aa:4d:4e:67:85:0c:24:35:b5:ec:3b:f2:73:20:85:f3:
83:54:a2:94:b4:88:3a:93:26:4f:e7:47:7b:79:36:1c:43:91:
0f:2f:b8:58:e0:51:dc:fa:be:51:63:aa:d4:c6:b7:09:81:a4:
18:3c:4d:14:07:b8:45:9c:90:27:a1:85:25:0f:30:f1:cd:16:
7c:3b:04:63:cc:66:2a:7e:22:c6:33:6d:47:c1:80:a5:cf:ae:
47:f3:33:8c:fe:41:7a:84:22:9d:7d:e4:67:e1:8c:db:65:35:
aa:7b:db:8b:c0:52:9f:e5:9b:8f:d7:66:cd:76:60:8c:6a:68:
42:36:a7:00:d7:25:15:63:68:dc:30:74:a3:4e:12:cb:cf:d3:
ef:87:41:be:7b:c5:96:cb:f5:28:77:b9:d6:99:1f:5d:e0:22:
c5:9f:21:90:61:02:79:ee:db:35:08:00:b6:29:6e:35:e7:0a:
19:bb:83:cd:f6:cf:9d:fb:bc:33:39:64:44:5e:db:74:47:83:
7f:68:59:aa:de:0e:3e:c0:28:87:8c:df:b6:c3:10:f7:d4:06:
c9:96:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:32:28 2025 by rpki-client