Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FC6efgkYwyJpAxT2Ey9xmBV69BY.roa
File: FC6efgkYwyJpAxT2Ey9xmBV69BY.roa (raw, json)
Hash identifier: MclpCk42V62ZLhnzdlpH+pIaiJbJV+5stFc28FAMd/g=
Subject key identifier: 14:2E:9E:7E:09:18:C3:22:69:03:14:F6:13:2F:71:98:15:7A:F4:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFFF954935676AC2E5DFF19F7A617E92E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FC6efgkYwyJpAxT2Ey9xmBV69BY.roa
Signing time: Fri 24 Nov 2023 06:16:52 +0000
ROA not before: Fri 24 Nov 2023 06:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:f9:54:93:56:76:ac:2e:5d:ff:19:f7:a6:17:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 06:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142e9e7e0918c322690314f6132f7198157af416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:61:9a:95:3c:07:d9:ef:43:c9:7a:92:68:
48:ed:43:17:22:5b:fd:ab:b0:2a:df:69:d2:c4:c2:
3d:53:f4:dd:6a:58:6f:a6:2c:46:c8:e5:cb:42:21:
11:c8:98:37:df:08:73:93:cc:94:a1:23:d9:f4:57:
95:2c:87:1c:d4:ba:fc:ae:15:4c:76:a5:9f:e8:25:
c1:54:71:46:ce:ab:b5:44:1c:3e:d3:84:32:d5:f0:
59:2b:da:8c:4c:d2:df:7b:96:f6:6d:4d:32:a3:b3:
06:99:6f:ed:e7:56:54:be:0a:89:a9:34:ab:c3:0f:
6a:1c:af:86:cb:5c:06:c4:87:7c:9d:9b:22:e8:49:
5e:bd:20:6c:88:74:d2:1c:dc:63:dd:0a:cf:91:5b:
c7:b3:7a:0c:92:92:b1:42:a9:de:a0:bc:8a:9f:4b:
21:73:36:6c:73:83:4a:5e:5f:43:c9:0c:29:6f:39:
26:36:bf:00:fc:ad:7a:e1:87:a5:9e:db:53:a6:61:
eb:5e:da:51:02:df:72:b9:34:49:85:98:28:b5:59:
a0:ab:d1:1a:da:c0:2e:60:9a:98:ae:db:c7:4b:bc:
d3:78:01:40:4e:a6:73:1a:3b:7b:11:6b:6a:a8:2a:
a2:6e:d4:70:12:26:15:10:a0:b1:dd:25:f2:3b:ce:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:9E:7E:09:18:C3:22:69:03:14:F6:13:2F:71:98:15:7A:F4:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FC6efgkYwyJpAxT2Ey9xmBV69BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e0:29:f6:06:98:c0:eb:15:9c:c4:6f:e3:07:f9:18:97:20:
25:bc:f9:26:d3:49:ce:4d:7d:09:d0:48:0d:fd:0b:f0:2d:79:
75:0e:71:65:19:f7:67:73:47:33:8f:f5:df:6c:22:6c:ac:14:
33:1b:7d:33:54:cd:b7:33:e2:ca:57:cb:93:24:6c:39:94:89:
df:74:59:27:4d:22:b8:bd:7f:79:30:c5:5b:76:aa:1f:a1:f5:
11:4e:c3:27:18:df:09:76:c6:fa:5f:1e:de:5f:d1:3a:db:c9:
d3:5d:12:c1:1f:83:75:5b:d9:59:b5:04:7b:8c:3e:1c:26:4f:
20:52:a8:ef:4b:81:03:52:98:81:c3:6e:42:b4:b5:ae:bc:f6:
e9:fe:0d:ad:41:db:77:94:1b:62:2a:e6:1b:38:24:35:0b:b1:
a3:a0:ab:a1:20:f0:83:02:6f:09:b0:a3:12:8d:3c:0e:7e:dd:
a4:65:4e:d0:20:a0:86:d1:0d:eb:7d:b3:b7:07:99:8d:2a:92:
f2:8a:1c:a2:95:2a:dd:5c:ca:33:80:5b:11:e9:0a:db:8b:cf:
5e:f6:70:cc:88:7a:a5:af:70:5e:87:48:8b:88:12:1f:1d:35:
c5:8f:d6:82:21:7c:a3:cb:55:32:c6:fe:48:8f:ec:63:a3:12:
38:df:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:00:33 2025 by rpki-client