Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fzkKjjdoEwc7OwyM-qinl76BU24.roa
File: fzkKjjdoEwc7OwyM-qinl76BU24.roa (raw, json)
Hash identifier: xzTVmRB3Io2OU7BLg/oo4cgNfIZHWWOGgQXnBbmGfs4=
Subject key identifier: 7F:39:0A:8E:37:68:13:07:3B:3B:0C:8C:FA:A8:A7:97:BE:81:53:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5BD2132BD42348DFC5C665A45FA9F649
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fzkKjjdoEwc7OwyM-qinl76BU24.roa
Signing time: Mon 23 Oct 2023 09:16:15 +0000
ROA not before: Mon 23 Oct 2023 09:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:d2:13:2b:d4:23:48:df:c5:c6:65:a4:5f:a9:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 09:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f390a8e376813073b3b0c8cfaa8a797be81536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:a1:3d:f3:8c:e8:63:2a:1b:57:32:28:02:
f8:29:a1:f4:34:fc:ae:65:da:05:c3:32:47:25:81:
ba:21:a6:ff:65:c8:aa:92:60:fd:f2:1a:02:2a:d1:
23:78:68:21:a0:0f:e1:83:9d:97:6c:c6:0f:08:41:
80:b6:63:87:26:83:43:99:07:19:b7:ec:b4:ab:ec:
ff:cd:1c:f9:11:62:3d:97:84:51:70:20:5c:5a:dd:
c0:ed:71:6e:80:76:de:75:23:bc:cc:25:1a:71:bc:
fd:1d:71:96:95:d9:b6:58:82:46:d8:71:97:6e:e4:
47:90:5e:fa:32:8d:7a:9a:c1:81:49:3f:ef:44:d6:
fd:55:26:bd:56:df:da:dd:eb:27:b3:a1:a5:e0:01:
10:0c:bd:3a:ff:a8:d8:b6:75:ef:e8:73:76:52:dc:
01:fb:b7:b8:a4:3d:84:1c:07:ae:7b:04:5c:22:3d:
a5:7c:0b:a4:ca:46:69:a3:63:ce:84:68:bb:67:8f:
1c:e2:40:3f:21:6d:cb:00:cb:f6:82:0f:da:9b:35:
41:5a:4a:b7:34:6c:5d:06:c2:46:78:a0:93:53:f8:
42:01:78:b2:85:a5:21:38:4d:ff:f4:28:b3:24:7d:
dd:ee:e7:67:f7:1c:80:83:0b:da:85:b4:38:7b:52:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:39:0A:8E:37:68:13:07:3B:3B:0C:8C:FA:A8:A7:97:BE:81:53:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fzkKjjdoEwc7OwyM-qinl76BU24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3f:5e:f3:37:81:5d:b0:c4:81:d9:84:3d:04:af:7b:09:02:
5c:f1:a5:2a:35:1f:c7:2a:49:b9:99:82:d9:46:4b:10:9b:b2:
74:4c:28:e5:65:79:7f:e4:1a:78:9e:62:b7:00:ec:ff:45:eb:
a2:9e:2b:f0:4f:b5:40:e3:a9:d7:6b:fe:3a:27:aa:fe:d7:a9:
26:78:d1:43:2c:1b:06:22:35:dd:d5:44:cf:30:39:19:cc:99:
3f:f1:98:74:d9:77:55:87:a1:84:4e:ea:c2:c3:39:cb:af:19:
a5:74:9f:37:90:ce:fc:44:fb:07:bc:10:13:ec:50:5b:f4:b6:
1e:87:05:f7:86:43:9d:72:50:14:40:5f:cd:64:12:67:29:4b:
f0:c3:e4:36:1a:a2:da:e0:a2:38:f3:a4:df:17:a3:29:84:0c:
7e:54:52:14:28:85:be:c2:df:2a:77:05:bc:8a:e1:27:e3:9a:
f3:b0:42:1e:d7:db:73:8f:55:9f:91:85:73:14:03:ea:83:43:
13:87:03:7b:c2:fd:48:01:fc:53:e8:be:a2:54:67:b0:4c:d8:
2b:ae:88:a0:01:3f:d9:04:51:5c:ba:6a:d9:f4:4b:f0:38:f4:
85:4e:af:83:53:e0:ca:ae:1b:d6:99:a5:79:20:4e:7d:c7:4a:
96:1c:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:14 2025 by rpki-client