Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fi0QION1mzmHjqOD1dTjX7Ja6u0.roa
File: fi0QION1mzmHjqOD1dTjX7Ja6u0.roa (raw, json)
Hash identifier: 7+MDk7wcnwAdIk85sTouCAJ48uIwBil28oG/tS1FL/Y=
Subject key identifier: 7E:2D:10:20:E3:75:9B:39:87:8E:A3:83:D5:D4:E3:5F:B2:5A:EA:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCDF0441D11703CC7CE652D6EA1A7B0D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fi0QION1mzmHjqOD1dTjX7Ja6u0.roa
Signing time: Tue 14 Nov 2023 13:05:57 +0000
ROA not before: Tue 14 Nov 2023 13:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:cdef:7b46/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:f0:44:1d:11:70:3c:c7:ce:65:2d:6e:a1:a7:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 13:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2d1020e3759b39878ea383d5d4e35fb25aeaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:2c:0d:fa:9b:83:cf:e2:50:19:f7:30:90:
5a:50:45:c0:d4:ae:49:39:a0:df:71:7d:14:d6:bd:
dc:2d:e3:f1:32:c3:5c:2c:f6:bb:a0:03:a8:d1:aa:
85:d3:18:65:62:15:7d:58:58:0e:7b:0c:e3:51:17:
32:a7:2e:6c:fc:b6:a8:3b:00:90:42:e1:6e:e2:82:
b2:9c:92:55:f4:42:10:de:a1:f9:89:79:a5:fd:19:
b7:64:2c:9b:e8:78:5d:ed:a9:41:6f:5d:3b:40:a1:
da:0d:e8:20:3b:e1:ed:69:0a:55:6d:09:87:34:1e:
99:23:ee:53:de:e5:1a:0e:37:86:a7:0c:86:b1:f0:
d2:02:e7:97:50:14:41:80:85:78:9e:b6:5e:12:51:
27:31:a4:b3:6b:84:70:cc:83:39:8a:49:10:46:a0:
b7:37:cf:f5:58:f6:4a:25:aa:65:82:31:94:eb:76:
f1:35:6a:94:bd:9f:d4:f2:7d:e5:77:73:97:eb:a9:
af:87:3d:09:82:51:b9:33:d6:83:00:ba:2d:2e:0b:
4f:d9:18:c0:57:73:c7:46:9f:3f:8e:32:e5:12:ca:
b3:b1:bb:b4:84:69:ed:5a:53:0a:2a:c1:af:5a:53:
ec:a1:a1:6f:f0:92:ad:ee:a3:79:13:55:d4:22:0e:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:10:20:E3:75:9B:39:87:8E:A3:83:D5:D4:E3:5F:B2:5A:EA:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fi0QION1mzmHjqOD1dTjX7Ja6u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b4:48:95:17:61:26:05:22:df:d9:26:20:8d:8e:0f:5c:b9:
02:4a:45:86:03:bc:81:a8:15:2b:49:c7:22:46:8c:66:4f:c7:
ae:91:09:98:a6:90:25:1e:6e:c3:3f:60:43:45:9e:88:8d:eb:
a1:43:f9:ee:cf:a0:5c:37:c2:f9:fb:b5:ed:44:4c:8a:48:00:
8b:3e:8e:a5:c5:5b:6b:98:ad:89:5a:bb:f6:46:0b:6d:36:3a:
cd:67:33:8e:d2:a1:95:c6:ca:c9:a9:0c:d9:5f:b4:e3:8d:ce:
f6:4c:1e:9b:ae:3f:4e:6d:31:32:4c:4d:3c:bd:67:96:58:66:
e2:a0:7b:af:20:71:f2:a2:a5:59:1e:06:e0:68:5f:ca:0c:8a:
81:55:cb:7c:ee:00:e5:63:b6:68:8e:f2:50:51:47:00:ec:02:
8e:32:6c:7a:ba:6f:04:85:48:3e:8a:e8:3f:4f:ec:33:ea:5a:
d7:8e:78:00:3a:22:de:2a:5f:ac:4a:2e:a3:63:77:cb:bd:96:
40:54:8d:56:d9:e3:d0:81:3a:52:20:db:b1:a1:a5:bb:b7:0c:
ae:fa:0b:dd:eb:79:67:f3:29:49:46:16:68:09:0c:6f:27:66:
b7:bc:b3:a5:78:fe:c3:09:73:39:d9:f5:0d:aa:79:18:bf:dd:
ae:0f:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:25:23 2025 by rpki-client