Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FKHnPCthqoj5NlBc-FU2lIVZIvE.roa
File: FKHnPCthqoj5NlBc-FU2lIVZIvE.roa (raw, json)
Hash identifier: 1AvCTR3ECRrbAA5yfLTHqoxbEEneMPTFuLX4KHtHvrs=
Subject key identifier: 14:A1:E7:3C:2B:61:AA:88:F9:36:50:5C:F8:55:36:94:85:59:22:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7AE9AB939692EE3361ECC44923AA8650
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FKHnPCthqoj5NlBc-FU2lIVZIvE.roa
Signing time: Sun 29 Oct 2023 10:10:16 +0000
ROA not before: Sun 29 Oct 2023 10:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7a:e9:ab:93:96:92:ee:33:61:ec:c4:49:23:aa:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 10:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14a1e73c2b61aa88f936505cf8553694855922f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:b1:a0:da:6d:36:9f:0a:b6:5d:15:d8:77:
5d:b6:28:68:f6:75:c1:79:22:3d:cd:0d:4b:fe:74:
ca:54:33:05:3b:4d:18:c1:59:55:86:42:d7:5d:cd:
a0:82:43:7c:f3:0b:4c:59:a2:eb:16:f9:cb:8f:30:
dc:c0:3a:a7:a5:81:b9:6d:54:29:3f:6b:ff:db:2c:
df:e2:5c:86:b0:13:9b:b1:67:1f:4b:cc:ad:90:06:
cc:94:bb:41:2f:b4:c3:71:06:f4:f1:65:09:c5:32:
a4:45:3b:64:17:ba:61:82:74:a0:fe:5e:b8:ab:bc:
4e:9a:0e:3e:5e:b1:7c:ef:09:e9:44:24:45:f0:e6:
fe:5e:b0:fa:24:1b:4d:02:db:9f:8d:b5:e8:44:bf:
bc:e6:ed:b8:83:45:48:bc:4f:7e:70:24:3e:b3:0a:
ab:49:8d:5d:33:46:47:f4:cc:ea:11:3d:bb:ac:29:
55:2d:ae:5d:19:6e:ad:3c:a5:fc:52:c7:43:62:e2:
0e:35:99:54:a6:65:d1:82:f1:7f:a7:ec:c6:48:63:
b6:02:e4:5e:e6:5d:20:75:bd:b5:60:2a:cd:49:2d:
bd:f5:71:c7:9b:e5:c2:48:53:6a:12:da:47:80:8c:
e0:1b:6b:24:e5:72:76:73:70:e7:14:6c:96:0e:f8:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:E7:3C:2B:61:AA:88:F9:36:50:5C:F8:55:36:94:85:59:22:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FKHnPCthqoj5NlBc-FU2lIVZIvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:2e:dc:54:03:c3:8c:58:ab:53:bb:c9:74:b0:01:7a:7c:c8:
bf:c8:54:2b:7d:0f:b6:a1:67:ca:09:5b:1e:cf:b9:7f:8a:f4:
68:7c:65:54:00:32:29:67:36:f2:13:3e:ba:a2:50:72:bd:6c:
d4:6f:68:b6:e9:e5:22:41:f4:bb:bd:0a:b0:77:21:36:01:e2:
c9:78:fd:5d:e3:94:7b:f3:d9:c9:ec:0c:d0:48:09:72:62:83:
0d:57:cd:7f:34:de:09:df:94:e7:f5:88:4e:e4:cc:cd:61:a4:
aa:82:44:9e:57:58:21:79:a1:a8:e3:6b:1d:bc:3b:dd:de:64:
42:62:cf:fe:c6:ed:e8:3f:87:6f:6d:20:e2:19:af:93:41:98:
b0:3a:36:7c:c6:c0:59:ee:e9:5d:3d:bb:8c:52:72:c6:85:bd:
1b:d1:9a:0f:ea:30:a4:ac:5d:89:0e:fa:49:47:40:f7:fe:a6:
9b:d3:43:a6:7a:65:ea:86:c5:37:4c:7d:f6:66:a5:15:6f:f0:
17:4e:ab:87:de:0d:53:97:74:e5:4b:f0:b2:39:f4:b2:97:ac:
fa:6a:0a:12:38:5f:86:af:a0:e5:bf:01:13:0d:ae:61:23:a5:
d8:6c:7f:5f:2a:8a:c3:3a:e9:7d:69:d3:d7:a9:c6:24:60:f3:
8b:6d:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:33:10 2025 by rpki-client