Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fxVRNyFThLKht8AN1tGTaduOfUo.roa
File: fxVRNyFThLKht8AN1tGTaduOfUo.roa (raw, json)
Hash identifier: LCZjbDCV6dSgyh0/cTo9mt4ckGWvZTAHGk5Fr7qFhro=
Subject key identifier: 7F:15:51:37:21:53:84:B2:A1:B7:C0:0D:D6:D1:93:69:DB:8E:7D:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE594AB9C4FD637F12B29F56A32108595
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fxVRNyFThLKht8AN1tGTaduOfUo.roa
Signing time: Sat 30 Sep 2023 10:14:00 +0000
ROA not before: Sat 30 Sep 2023 10:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:94:ab:9c:4f:d6:37:f1:2b:29:f5:6a:32:10:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 10:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f155137215384b2a1b7c00dd6d19369db8e7d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:70:3c:c4:cf:49:b7:7d:b2:40:9a:ba:c5:
5c:4a:11:e6:29:fd:cf:f0:21:dd:7b:36:37:14:f0:
47:55:9b:0d:07:bf:e5:40:19:79:8f:34:07:57:ef:
09:ec:9a:95:f5:7b:1e:1b:0b:b6:ac:21:0c:4b:90:
81:22:79:9c:fb:43:61:ed:82:39:dd:fc:b1:28:39:
27:20:a4:cf:19:2b:c3:93:7a:26:43:fc:73:e5:ac:
4c:01:ed:79:df:9c:f9:07:44:60:a7:b3:c2:e5:90:
4b:a3:51:60:fb:8c:fd:1b:3f:e8:5b:38:4b:6b:b4:
bf:a9:55:72:19:62:94:ec:af:d2:c3:8b:fa:dc:da:
88:93:21:80:0e:f9:ee:18:20:7d:dd:25:d4:aa:9d:
26:76:55:a4:80:f6:31:11:a2:03:b8:5c:93:27:a0:
0a:a0:82:70:ad:b2:78:90:86:ea:ef:eb:76:26:f2:
4a:49:e0:df:20:a8:a1:aa:b1:26:50:18:b2:d2:ea:
15:eb:4d:b4:44:d3:f5:b3:80:61:fb:c6:f6:1d:d4:
bf:2f:e4:8d:9c:81:4b:dd:d3:e6:13:c9:91:c2:49:
43:27:82:2c:00:38:6e:f8:e3:b9:54:9b:4d:ab:79:
53:e6:20:26:c0:8e:9a:26:67:70:99:0b:39:e7:fe:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:51:37:21:53:84:B2:A1:B7:C0:0D:D6:D1:93:69:DB:8E:7D:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fxVRNyFThLKht8AN1tGTaduOfUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:3b:4f:74:37:14:0b:c3:bd:00:cb:75:d4:6b:83:4d:29:39:
03:35:ef:3d:c3:ab:db:76:4a:f8:dd:8a:27:44:41:92:3d:fe:
85:97:ac:bd:2e:0f:ef:08:7f:1a:71:58:1e:60:bf:6b:70:c0:
32:67:a1:6a:f7:09:cd:3a:cd:4e:4c:62:51:3e:b7:04:3b:f6:
e3:c7:a7:69:fa:2d:3e:ba:f0:83:64:f6:db:f8:52:46:37:97:
b1:a8:3f:58:14:01:59:00:ee:e3:7b:75:09:ca:5c:fb:8b:55:
18:0a:5f:f0:9c:1a:e9:97:ae:ce:06:38:0b:18:f1:76:31:b8:
af:29:68:ba:ee:43:f1:6b:41:be:2b:b9:3b:49:80:e4:e2:8f:
19:4c:e5:17:95:2d:82:30:4e:1b:93:cb:18:7d:f7:e0:1d:7c:
66:aa:1b:37:1c:9d:86:e3:fe:6b:60:b4:73:84:43:6e:4b:0d:
cc:b0:f8:d8:6f:8d:81:b9:2b:78:5d:e5:33:a7:89:d3:15:46:
12:57:0b:24:c8:9f:71:1b:bd:21:45:9b:a6:f5:99:c6:d0:16:
be:cc:ef:96:64:62:a1:fd:be:39:bd:29:23:00:cd:ec:f4:d1:
17:e9:86:68:53:21:73:6d:de:33:e6:5e:1d:a8:d4:fd:32:5a:
5b:9e:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:54 2025 by rpki-client