Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FO68VDnTYT0_9QhM7x53w3Ti3sA.roa
File: FO68VDnTYT0_9QhM7x53w3Ti3sA.roa (raw, json)
Hash identifier: fQjGCdDuS5H9Hk6jKfQi7asutwBmJQeJmXIaWcszWqY=
Subject key identifier: 14:EE:BC:54:39:D3:61:3D:3F:F5:08:4C:EF:1E:77:C3:74:E2:DE:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF618EED3C2D013CB72376D71BF961EE5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FO68VDnTYT0_9QhM7x53w3Ti3sA.roa
Signing time: Tue 03 Oct 2023 15:12:23 +0000
ROA not before: Tue 03 Oct 2023 15:12:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:18:ee:d3:c2:d0:13:cb:72:37:6d:71:bf:96:1e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 15:12:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14eebc5439d3613d3ff5084cef1e77c374e2dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:df:bb:e7:3a:dd:a2:da:b0:7d:66:24:1e:
b8:df:23:10:64:5f:81:27:73:d4:ab:23:c7:96:28:
2e:87:9a:7a:f0:a8:bb:18:3b:22:b5:77:ae:3f:ab:
ad:37:1e:bb:5d:39:cd:59:b4:85:7d:fb:7c:9f:1d:
b6:45:e1:bc:13:ea:19:25:d4:b3:17:50:7a:ff:e7:
0d:53:54:68:d0:ab:87:4a:6f:a7:27:bb:ee:32:ac:
6c:29:68:70:71:eb:cc:f9:15:87:ba:56:66:6e:dd:
aa:a9:a7:74:2d:b3:4f:3a:e0:cf:77:cf:40:a0:98:
55:a2:86:4b:1a:da:7d:37:0e:c1:96:ec:f2:d5:4d:
1c:ff:4b:0b:be:10:08:14:5f:57:8a:66:11:20:51:
7c:e2:89:d4:61:0e:c0:d1:98:e0:b1:d8:2a:8c:94:
ca:18:63:f4:65:df:10:51:2a:16:df:bd:13:21:54:
2a:0b:3e:d0:57:bb:93:3d:a3:21:de:f4:68:b5:a5:
5d:7e:77:ee:a3:bb:17:ee:d6:2d:64:82:7f:46:44:
60:56:02:51:87:3f:11:48:bb:0a:c1:1c:20:4b:c2:
87:02:e6:97:8b:42:fc:10:94:a6:bb:15:b6:56:24:
58:bd:59:73:2f:bd:6f:72:22:4a:1b:fa:cd:68:ac:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:BC:54:39:D3:61:3D:3F:F5:08:4C:EF:1E:77:C3:74:E2:DE:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FO68VDnTYT0_9QhM7x53w3Ti3sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:be:f3:60:59:7b:47:cc:e1:b3:c7:be:c4:9f:a2:19:c8:73:
b9:e4:72:4c:93:18:bb:53:e5:13:95:cf:b7:47:16:8c:1c:34:
68:35:8d:08:72:39:31:1b:5a:6d:98:bf:0b:db:42:06:1e:c3:
17:2e:db:46:44:e2:71:ed:cc:65:40:1a:f5:a1:ae:f4:14:d0:
ba:8c:cb:3c:b0:2b:4f:02:43:df:64:e2:4e:d6:1b:fe:8b:0c:
74:b1:69:c5:df:7f:20:4a:dc:63:96:3a:2e:7f:a5:8e:4e:fd:
95:58:25:d6:d2:65:16:6d:cf:e7:b4:e8:5d:3e:3f:62:28:7d:
5c:d5:be:31:6e:1f:0e:32:04:b2:ee:6d:37:a1:47:49:ed:96:
84:33:73:3a:83:9a:02:21:27:88:52:9a:7c:79:9a:bb:6b:8d:
d7:c5:07:ac:eb:be:87:51:25:68:6d:48:a9:db:97:3c:86:03:
6b:32:30:c5:a1:2e:7f:17:50:29:af:d3:74:5f:fc:c5:2c:5c:
4a:ef:9c:1a:24:65:d8:57:31:15:9b:cd:f6:fa:e6:7e:14:68:
95:45:a2:b0:93:2a:b1:26:07:a9:48:c3:25:97:39:2d:3e:ce:
1d:5e:bb:fd:88:1e:67:c5:75:ed:c9:b7:65:1b:19:1b:82:3e:
41:7f:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:40 2025 by rpki-client