Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FI4GEHFGpagf1G1IXS6RAcZ0Ank.roa
File: FI4GEHFGpagf1G1IXS6RAcZ0Ank.roa (raw, json)
Hash identifier: 9q/8mPGIEBydV3MLqnqC3EHgsG8buBbtgJuhRLo8Vco=
Subject key identifier: 14:8E:06:10:71:46:A5:A8:1F:D4:6D:48:5D:2E:91:01:C6:74:02:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B807DE41E53D78CC2A3496B09E84FCF16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FI4GEHFGpagf1G1IXS6RAcZ0Ank.roa
Signing time: Mon 30 Oct 2023 12:10:15 +0000
ROA not before: Mon 30 Oct 2023 12:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:7d:e4:1e:53:d7:8c:c2:a3:49:6b:09:e8:4f:cf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 12:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=148e06107146a5a81fd46d485d2e9101c6740279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:a6:a5:be:1b:65:dc:14:ec:c2:76:a5:57:
1e:be:a7:60:62:5a:98:58:e3:bb:1c:dc:54:b7:71:
86:f8:f9:f2:c6:23:c1:56:ee:ab:fe:e2:12:3e:fe:
2d:47:6d:4b:e3:9e:6b:73:a7:4b:b3:52:ba:67:72:
91:78:5f:e4:c9:9b:7c:e8:3a:06:9c:e0:e0:ca:93:
e8:25:e6:e3:0d:49:1d:4b:ff:85:af:0a:02:96:9c:
14:d5:b7:1a:96:05:73:30:33:5a:b2:65:21:63:e1:
4b:b0:80:71:44:fd:48:18:24:c4:83:d9:ff:9d:67:
10:2e:7d:2f:75:ec:1b:bc:e6:9d:60:1d:00:ad:22:
3c:a7:f0:11:31:4a:4e:ea:af:42:3c:d6:e5:13:0a:
25:23:68:89:eb:9d:0c:67:62:10:46:9a:69:b4:f9:
60:dc:ae:96:cc:70:e1:6f:4e:e7:f5:5f:7c:98:08:
02:c9:34:c9:ec:f5:a0:55:d1:72:d6:7c:7c:1a:54:
33:76:11:10:b4:d8:67:b5:de:55:fb:8a:36:4f:e6:
f2:73:d9:c7:71:d3:74:12:46:aa:83:06:c7:4a:b0:
68:d6:b4:90:f3:41:17:4a:25:59:a3:f6:1f:9a:65:
9d:8c:16:6b:e5:bc:9b:a3:19:87:bb:69:fc:8e:e3:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:06:10:71:46:A5:A8:1F:D4:6D:48:5D:2E:91:01:C6:74:02:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FI4GEHFGpagf1G1IXS6RAcZ0Ank.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:e9:dd:eb:a8:5b:e8:9a:60:cb:23:3d:dc:92:a3:fa:b5:a8:
ed:fc:cd:7a:b8:01:55:e1:4c:d5:0a:bf:34:13:94:45:65:aa:
9b:db:a5:f4:26:11:94:4c:d8:1c:44:86:b5:7e:3f:2b:eb:cd:
dd:7c:24:9a:99:0f:11:5c:56:fe:65:e6:58:a6:9c:0a:51:3c:
83:a6:1e:e2:2c:2d:4e:ae:5f:11:2d:be:a4:02:5f:25:71:76:
8a:37:d6:73:26:99:c8:e4:81:44:02:f2:a9:03:30:bf:95:12:
6b:3f:0e:14:ad:56:86:cc:20:c4:dc:3d:2d:8d:20:57:67:e9:
93:39:31:d9:ac:75:ed:dc:0d:11:b8:c5:00:82:93:a5:77:50:
80:ff:48:d6:d2:49:20:8d:9f:bb:fb:a8:13:d9:98:64:0b:8a:
0a:1c:bb:b8:d7:ce:38:38:37:24:a7:8c:e9:4e:49:99:82:1c:
e6:33:8b:8e:96:52:26:78:f3:58:84:ec:7f:57:f7:10:09:40:
e8:a2:e5:24:51:8e:db:f3:cc:60:79:e1:a9:6b:17:8f:4d:e7:
6a:ef:9c:f7:09:65:da:79:6b:e8:16:e4:65:f6:46:b6:56:5f:
4a:70:b8:aa:e7:d9:29:ad:e3:5e:7f:82:86:36:b4:b8:c4:4c:
f5:fa:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:02:13 2025 by rpki-client