Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fjqnWaORcG4Q6ze3HlesNSfvPQ8.roa
File: fjqnWaORcG4Q6ze3HlesNSfvPQ8.roa (raw, json)
Hash identifier: baqi28BABEs73M0Emm839SZGEo+Vgxc1Pjm/W2PLu60=
Subject key identifier: 7E:3A:A7:59:A3:91:70:6E:10:EB:37:B7:1E:57:AC:35:27:EF:3D:0F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC0ADCCC16CB82DD131F3A80ACBFE4EEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fjqnWaORcG4Q6ze3HlesNSfvPQ8.roa
Signing time: Sat 23 Sep 2023 06:15:30 +0000
ROA not before: Sat 23 Sep 2023 06:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:ad:cc:c1:6c:b8:2d:d1:31:f3:a8:0a:cb:fe:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 06:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3aa759a391706e10eb37b71e57ac3527ef3d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:8e:c0:72:84:44:3d:3f:b3:13:b1:22:c7:
79:6d:17:97:a1:85:cb:ec:74:ff:2a:84:43:35:71:
62:9a:d7:aa:93:b8:eb:d6:cd:24:12:af:fe:3f:62:
34:5b:4b:fb:19:78:66:37:b7:38:37:71:1d:90:08:
7a:6c:f5:85:33:02:97:2b:32:f1:12:49:54:2e:92:
13:93:6f:ac:68:30:f1:12:db:5f:5f:71:43:de:05:
9e:d2:c8:b3:15:d1:16:2d:92:29:ed:dc:e9:26:d3:
15:08:7b:6c:07:0b:b4:eb:94:ce:d9:04:51:48:c0:
df:57:de:a4:a3:46:af:4d:d5:80:0c:ac:08:96:33:
19:f1:14:24:50:46:ce:89:19:b5:42:3d:2c:7f:8e:
04:d0:2f:71:a3:35:a6:83:93:7b:d5:c1:14:90:5a:
d0:8e:03:13:fd:af:9f:22:40:72:d2:17:4e:ea:e5:
86:fd:42:5d:0f:fe:e6:42:3f:08:f2:fb:e1:f5:65:
52:c5:f1:7d:ff:78:fc:3d:ba:01:88:7d:a4:6d:86:
34:4c:29:77:90:4e:15:9b:8b:0f:4f:0d:ed:9a:6f:
2c:e8:b5:b8:8b:d0:85:11:f2:3c:28:27:c1:10:24:
93:7c:ab:d0:8f:ef:ad:a7:84:5e:b4:40:45:00:7f:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:A7:59:A3:91:70:6E:10:EB:37:B7:1E:57:AC:35:27:EF:3D:0F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fjqnWaORcG4Q6ze3HlesNSfvPQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:19:8b:a3:5b:c8:de:79:2a:2b:7f:cc:0f:ef:48:74:07:81:
c1:6c:79:c4:b9:85:d1:73:5a:e6:a4:7e:ef:b2:dc:ef:46:54:
7f:ff:27:2e:39:b1:64:19:48:ef:a4:c4:81:05:40:61:60:c6:
76:d8:e8:71:ea:d1:3f:57:f5:9f:c9:fb:d1:22:ce:14:00:4e:
3d:c0:e7:43:4b:cd:79:88:31:4f:55:50:cb:03:9d:da:b3:35:
15:bc:b0:82:8d:78:5c:1f:45:a6:19:0a:63:4a:ce:65:5a:f9:
a8:d5:36:a6:ad:37:a9:8c:d3:d6:de:32:76:01:d6:52:db:5a:
74:8e:4d:66:44:ce:85:7c:67:60:c7:e6:d8:80:67:0f:d1:52:
84:b4:2c:40:98:f6:32:0a:07:7f:4d:80:be:42:fc:6d:70:d3:
78:b8:75:ad:34:22:e8:9e:44:fa:fb:e0:9c:3e:a7:29:e1:1f:
f1:b8:0d:4a:66:45:e1:0c:09:2a:43:fe:fe:88:20:4c:6b:b2:
08:a2:7d:78:39:35:95:76:8e:ee:31:12:60:ed:f7:16:bd:0d:
47:ef:86:64:fb:da:3e:9b:29:28:b0:85:dd:3b:1f:0f:9f:51:
cb:c8:b6:b4:7e:4b:11:d6:ec:87:75:bb:7c:b5:ae:e7:bf:3d:
3b:cd:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:31 2025 by rpki-client