Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C_FK2j-9r16TuUpSHxXleFoW01k.roa
File: C_FK2j-9r16TuUpSHxXleFoW01k.roa (raw, json)
Hash identifier: /qPuIz+94hlPd0eVD1wggkxoVzDCpmbkn5rrZXrk56A=
Subject key identifier: 0B:F1:4A:DA:3F:BD:AF:5E:93:B9:4A:52:1F:15:E5:78:5A:16:D3:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C830AB5142E52BCC4D11CE723EEFE147F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C_FK2j-9r16TuUpSHxXleFoW01k.roa
Signing time: Tue 19 Dec 2023 17:06:06 +0000
ROA not before: Tue 19 Dec 2023 17:06:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:830a:37d9/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:0a:b5:14:2e:52:bc:c4:d1:1c:e7:23:ee:fe:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 17:06:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bf14ada3fbdaf5e93b94a521f15e5785a16d359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:ab:02:23:e9:ce:c3:26:03:3a:e3:7c:93:
0e:61:0f:90:e8:b1:03:62:be:ff:f9:f2:29:9b:5f:
20:0f:f8:30:ae:b0:1e:e6:2a:ae:a7:1d:0f:68:0a:
57:00:9b:9b:79:97:4c:5e:19:2f:57:17:8c:71:d8:
16:23:8a:94:95:bb:62:9e:77:31:6a:36:fa:95:b2:
50:92:1f:fe:a9:43:32:5c:b2:0e:43:f4:27:aa:f1:
eb:99:d4:d7:9e:47:8c:73:61:d4:c6:fc:2e:67:11:
08:f7:a4:ed:32:ed:d3:7e:41:fd:d8:27:68:7d:4c:
7f:33:2d:bb:08:b7:b6:bf:65:76:b8:bc:4c:45:6d:
09:8e:93:a7:7e:41:60:06:86:57:4e:d3:f8:e3:66:
e7:fa:54:3d:3a:e8:d8:46:8f:91:6f:16:8e:b3:00:
15:da:92:b6:4c:c5:71:65:f7:c3:cd:a0:c0:ea:cd:
6a:36:20:1a:6d:49:f2:3c:30:80:3a:8a:2f:c9:d5:
1e:24:a1:2d:b4:a4:07:06:91:4f:31:52:00:f9:32:
61:12:93:83:1b:30:7c:47:7d:53:06:06:24:30:29:
73:e2:af:e4:65:23:0a:33:c3:96:0e:44:8e:81:26:
40:55:40:d8:98:68:1d:49:0f:2c:19:8d:bf:35:e4:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:4A:DA:3F:BD:AF:5E:93:B9:4A:52:1F:15:E5:78:5A:16:D3:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C_FK2j-9r16TuUpSHxXleFoW01k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:bc:3e:12:aa:70:3d:c1:6d:09:4a:7b:cf:c8:0b:63:fd:4e:
52:39:43:80:26:c8:36:a6:96:0d:ed:c9:80:a8:3e:ac:01:c7:
1f:db:34:f5:78:10:24:76:0a:b0:9c:b1:2a:05:e7:c6:6d:8d:
50:d1:5c:66:38:81:d7:74:1c:d1:00:f2:e2:de:b3:c4:8a:c8:
ce:b5:e0:4f:d8:cb:ae:17:3c:74:a6:87:b8:b2:7e:ad:22:c8:
00:c4:38:23:d2:3c:75:76:3d:a6:d8:83:d4:1b:b8:df:fb:2b:
30:a6:2f:38:d7:a7:a9:ee:58:87:24:bc:37:45:43:97:a0:43:
7b:9d:44:e9:31:9e:85:21:f8:79:86:3f:84:8f:42:be:2b:c2:
fe:5c:1b:be:60:fc:c6:a4:a7:d0:bf:26:cd:d2:a1:3c:56:e4:
75:77:11:f8:5a:1e:08:0b:9b:04:e8:e2:8c:51:e8:92:08:a3:
f9:d9:d5:2e:76:71:b1:a6:b0:b5:79:61:f1:d5:59:95:24:c0:
f1:8a:0f:be:3a:b7:15:0f:3e:08:4c:ec:63:7a:0a:8d:20:47:
f8:b8:53:a5:18:4b:49:f6:91:bf:8f:8c:fe:c5:dc:7f:55:10:
53:29:24:af:08:a8:d1:cb:08:95:d5:1d:9a:2e:70:cd:fa:46:
8a:09:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:54:26 2025 by rpki-client