Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fa_b6MssXv4WC6TpFsf9YTYKpNk.roa
File: fa_b6MssXv4WC6TpFsf9YTYKpNk.roa (raw, json)
Hash identifier: agIFlbhm5moTvFlNKxLb3sjHXWNpPu0gUrx5doJHnyA=
Subject key identifier: 7D:AF:DB:E8:CB:2C:5E:FE:16:0B:A4:E9:16:C7:FD:61:36:0A:A4:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B14FEAA456994899C6FD9FF066DC53B6C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fa_b6MssXv4WC6TpFsf9YTYKpNk.roa
Signing time: Mon 09 Oct 2023 15:11:55 +0000
ROA not before: Mon 09 Oct 2023 15:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:fe:aa:45:69:94:89:9c:6f:d9:ff:06:6d:c5:3b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 15:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dafdbe8cb2c5efe160ba4e916c7fd61360aa4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:58:f9:31:c9:4c:13:9b:5c:d1:b3:5c:c5:
b1:b2:1b:01:fc:0c:84:78:14:49:b0:66:a3:57:a2:
b5:93:c0:87:aa:13:de:e8:8d:e4:d8:f4:e5:68:4a:
6d:04:31:b0:2a:af:6d:4f:c3:bf:28:a5:b4:5a:71:
a1:00:58:4d:7c:e4:a3:93:49:a3:d0:84:3c:a9:c2:
07:5b:d0:0c:d4:d0:b2:94:9c:71:a6:82:c0:82:cb:
58:ef:0e:43:7c:96:35:19:b2:d2:69:6a:87:d9:4f:
fc:09:cb:2e:20:1b:4e:4e:eb:0a:29:7d:65:05:57:
f9:66:76:07:94:c7:91:c7:d2:eb:aa:c4:e8:47:18:
30:9f:83:76:36:ba:91:b4:34:d9:e8:fd:c2:87:98:
1f:0f:2b:46:2a:e2:b9:ef:3f:98:41:6e:6d:fc:16:
de:fd:20:ca:33:c4:ee:d1:55:53:47:e0:e5:0e:c4:
03:4a:3c:8f:a9:ef:36:d7:cb:b0:89:8e:78:3c:92:
77:ed:10:3f:b7:4c:22:39:75:f5:c5:60:bf:81:e0:
d0:07:01:a7:71:e6:de:ce:1a:be:86:10:0b:b6:38:
a4:53:c0:4c:f0:cc:6e:12:a7:57:ae:fd:a3:95:b7:
69:23:6f:95:2a:41:14:29:75:bd:54:82:03:5d:ef:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:DB:E8:CB:2C:5E:FE:16:0B:A4:E9:16:C7:FD:61:36:0A:A4:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fa_b6MssXv4WC6TpFsf9YTYKpNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c4:a7:b8:65:95:67:6a:e7:53:2c:8d:ab:be:d1:d4:ba:ad:61:
3c:05:1c:53:ac:a3:46:2c:b7:32:dd:1a:da:df:7a:14:4d:1d:
5d:e8:51:c5:16:f9:70:5c:db:94:61:cb:58:9c:23:07:b8:41:
5a:3a:0c:49:d8:1f:b8:0b:66:8f:ba:dd:7d:e1:be:bc:ee:1b:
05:37:cb:98:17:01:33:77:c1:50:52:e2:b0:e2:0a:53:98:06:
cf:b7:f3:83:ca:ff:93:25:45:aa:f5:71:1b:ba:70:4c:21:8d:
2d:bb:9d:93:23:8a:81:ad:54:49:91:f8:fc:1d:4c:57:c6:5f:
9e:e5:7c:b3:0f:e5:2d:fe:98:6f:b5:7c:a9:7f:b9:dd:26:b6:
e2:55:5e:4b:dd:35:8d:1b:09:71:c8:6e:1f:94:67:0c:3f:a9:
ab:32:7a:e2:0b:50:52:a9:18:c3:b0:2a:8d:06:65:48:db:a4:
b2:7d:6d:43:f9:d1:c5:f6:a5:39:db:02:22:a6:e3:0a:2a:fa:
e4:3d:c0:00:0e:9d:ad:1b:e2:d4:29:b5:2d:c7:e7:de:df:8d:
f0:b2:73:ca:ff:72:47:7b:a8:33:80:d8:29:80:06:dc:c3:f9:
b5:f5:4b:7e:e9:4d:0a:c8:7d:b0:72:51:ac:82:9a:ce:9a:f1:
58:a2:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:24 2025 by rpki-client