Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fyOszZ3Wm5DlEBAe8P5Cm2Ba2Z4.roa
File: fyOszZ3Wm5DlEBAe8P5Cm2Ba2Z4.roa (raw, json)
Hash identifier: daIxzJ5MF+sO0AJgBhUc6nysh+7uCgrZ9qsWxadiv9I=
Subject key identifier: 7F:23:AC:CD:9D:D6:9B:90:E5:10:10:1E:F0:FE:42:9B:60:5A:D9:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1909CC2FB053B90A439EB80A7B23127E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fyOszZ3Wm5DlEBAe8P5Cm2Ba2Z4.roa
Signing time: Wed 29 Nov 2023 03:05:21 +0000
ROA not before: Wed 29 Nov 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1909:c44f/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:09:cc:2f:b0:53:b9:0a:43:9e:b8:0a:7b:23:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f23accd9dd69b90e510101ef0fe429b605ad99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:24:eb:e8:80:d6:16:93:24:79:1a:69:b8:
c3:fd:43:b9:dd:57:e8:44:f8:5d:76:34:84:82:16:
0e:2a:01:70:02:0b:86:8f:09:88:b9:80:fe:d2:eb:
dd:dc:86:84:90:15:ee:a6:23:35:a0:42:94:6a:fb:
84:ab:a9:a0:1b:e0:83:77:24:24:59:d6:35:4a:8f:
31:ba:48:c5:0d:7e:f7:58:b8:51:26:67:be:c8:d9:
4f:a4:ca:c7:d6:40:9b:10:d2:a9:43:23:6d:d9:37:
b6:a2:f7:08:f0:c0:ce:fc:ba:e3:25:91:81:e9:e2:
1a:c9:48:2f:5f:96:7d:91:7c:06:17:73:53:0d:b3:
e5:dc:a7:1b:c5:98:a6:f0:3d:33:69:81:d6:d2:e7:
16:8e:26:88:2f:bf:74:95:96:33:2b:b3:06:a7:c6:
5e:74:fd:14:9d:d7:d0:aa:76:49:40:b7:4b:f9:27:
f2:ce:97:07:6f:38:0a:39:a5:2f:bb:6a:b4:e5:00:
6d:4b:c9:52:e6:51:96:87:d2:98:40:07:a8:6a:d7:
13:b6:5f:16:04:b0:96:09:98:e6:69:b0:bc:a6:d0:
6f:a4:8d:7a:ed:4a:32:1c:f5:68:c4:e7:b7:42:af:
9f:b2:72:e5:12:e2:80:bb:33:6b:cf:58:b7:7e:a2:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:AC:CD:9D:D6:9B:90:E5:10:10:1E:F0:FE:42:9B:60:5A:D9:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fyOszZ3Wm5DlEBAe8P5Cm2Ba2Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c6:06:51:48:3d:db:55:a0:fa:47:bb:87:a4:5f:d5:9d:61:
68:0b:15:71:6b:7e:4d:30:2e:89:ae:bb:93:c1:29:fb:fd:1a:
37:3b:97:7f:d2:73:f7:42:1b:28:fc:e6:0e:a2:5a:0e:00:fc:
c1:13:85:09:23:f8:94:2a:96:bd:fb:3b:b0:c5:9b:6f:85:ca:
95:67:b5:00:e4:1a:77:54:23:48:88:f0:e7:d0:ef:db:06:c2:
77:20:b0:b3:f7:e2:42:a8:86:3d:1c:02:aa:7c:47:e4:39:ab:
01:d0:cd:f9:01:1b:65:ac:2f:ab:79:d6:64:da:9c:b8:88:e2:
ca:73:a4:ac:2b:83:9f:1e:60:da:92:e6:c4:d1:7a:32:5a:d8:
8b:23:e9:9a:13:19:c1:4b:f3:a8:c8:b2:04:ab:9b:6f:91:1a:
df:5b:66:83:51:76:74:39:cf:fa:85:09:58:da:e2:55:37:bb:
29:6a:64:98:a5:60:3d:e3:0c:97:09:9e:a1:b1:af:60:26:b5:
14:95:b4:b8:8a:e4:38:21:b3:dd:72:aa:8c:ed:01:94:c3:4c:
d8:79:fd:ad:cb:eb:c1:28:a3:54:a8:48:b6:9d:7a:e3:7b:9f:
10:83:72:89:2d:8e:82:67:85:7a:29:16:8b:e6:4c:d0:b4:09:
7c:97:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:47:47 2025 by rpki-client