Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwgEzfAfnzWPRbQpaRcNOJkdCwA.roa
File: fwgEzfAfnzWPRbQpaRcNOJkdCwA.roa (raw, json)
Hash identifier: 3nyJ8kXpsYzhYvRVcAk4mbODympc9ROAICgyHbclkVc=
Subject key identifier: 7F:08:04:CD:F0:1F:9F:35:8F:45:B4:29:69:17:0D:38:99:1D:0B:00
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD131A84CE281B9326C3E5B8462414EC0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwgEzfAfnzWPRbQpaRcNOJkdCwA.roa
Signing time: Tue 26 Sep 2023 11:13:27 +0000
ROA not before: Tue 26 Sep 2023 11:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:31:a8:4c:e2:81:b9:32:6c:3e:5b:84:62:41:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 11:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0804cdf01f9f358f45b42969170d38991d0b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:44:a1:c7:12:1d:3f:29:b1:af:3c:36:06:
2f:c2:66:52:ac:9b:e4:83:93:85:e8:e0:2c:07:fb:
75:36:66:27:18:10:49:3f:7f:1a:4b:7f:bf:78:f2:
7e:0e:83:74:e8:92:6f:3c:8d:f4:7a:31:09:ee:e8:
c5:bc:84:19:40:f6:46:3b:d5:f9:50:d6:14:5c:7f:
48:66:03:da:41:55:54:2f:01:49:68:72:78:94:e5:
ae:f9:10:a4:84:78:83:90:e0:67:38:e6:bc:7d:2a:
32:ff:fe:69:12:5d:b7:02:c2:d7:40:dd:dd:96:8a:
7c:67:b1:a5:4b:66:7e:30:bf:c6:0e:e8:be:8a:e4:
76:8f:7e:02:6e:b6:8f:31:14:15:8f:ec:51:8f:36:
d0:ba:91:1c:ab:f0:a5:9d:57:84:77:c3:5f:7e:6e:
b3:5b:ad:24:7b:d5:aa:78:80:5a:9a:0f:67:c5:11:
fd:7d:ec:13:9a:7f:a3:c2:43:f9:e3:13:fe:7f:18:
a8:f2:92:6d:7f:3c:71:6b:ca:42:af:0c:97:a0:6f:
a0:5d:35:df:8f:2b:f8:fa:f6:35:fe:79:17:b6:bd:
56:17:be:be:2b:dc:b8:69:5b:c3:1a:83:02:ea:fb:
0c:68:16:14:62:8e:e6:23:7e:26:fb:a6:17:36:c7:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:04:CD:F0:1F:9F:35:8F:45:B4:29:69:17:0D:38:99:1D:0B:00
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fwgEzfAfnzWPRbQpaRcNOJkdCwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:5b:de:ee:10:e8:9a:95:0f:50:8a:87:21:06:dc:13:13:a2:
79:c3:f6:8c:b4:41:0d:2b:c4:e4:70:45:1b:88:e0:59:9c:13:
68:19:61:a1:cd:11:e3:44:94:cd:ae:11:52:19:9c:f4:b2:ef:
e1:53:48:1f:31:a6:6e:45:0b:a2:09:84:0f:98:f2:01:e3:f0:
16:da:e8:6c:a8:d7:01:4c:d1:8a:20:79:f7:83:55:24:db:12:
db:62:75:de:17:0e:7b:6f:7f:ff:a5:74:28:ef:40:55:57:11:
f8:38:28:f7:fb:85:d9:30:70:00:0f:ed:f7:60:46:af:23:9f:
5b:73:f2:17:8c:81:22:ae:ad:c2:fb:d7:1e:ce:6a:28:f4:00:
80:15:88:bf:c3:10:2d:91:e7:a2:ab:5a:51:70:3b:ea:6b:0e:
b5:f5:86:ab:95:27:ff:e3:6b:06:f3:dd:34:ee:9f:80:20:13:
b4:ab:bd:49:73:ff:48:71:e4:7c:5c:ee:fc:d6:e8:96:e1:48:
26:24:e7:bf:d9:d6:de:d0:40:48:7d:73:4d:cf:05:db:b8:c2:
c2:dc:2a:59:40:6e:bb:1b:5b:ff:86:0d:fe:3e:97:7a:55:2e:
36:78:6f:0e:81:6a:8a:8b:8d:74:a1:5c:30:40:40:a3:30:01:
9c:b5:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:35:54 2025 by rpki-client