Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FOKnT6N0Ti_fJVqnwVrJq50kIwk.roa
File: FOKnT6N0Ti_fJVqnwVrJq50kIwk.roa (raw, json)
Hash identifier: RZ/aj9knebYQRR8lZ2kwDZl8vKv13IAcAFjP7dCRv9Q=
Subject key identifier: 14:E2:A7:4F:A3:74:4E:2F:DF:25:5A:A7:C1:5A:C9:AB:9D:24:23:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B66FC5985708147CBCC4CD5129E60AA46
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FOKnT6N0Ti_fJVqnwVrJq50kIwk.roa
Signing time: Wed 25 Oct 2023 13:18:15 +0000
ROA not before: Wed 25 Oct 2023 13:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:fc:59:85:70:81:47:cb:cc:4c:d5:12:9e:60:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 13:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14e2a74fa3744e2fdf255aa7c15ac9ab9d242309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:ac:fc:de:b4:a5:c4:ad:b8:67:50:ec:67:
48:ee:be:70:1c:1e:16:f7:c3:d1:76:ad:95:70:55:
4d:3b:10:7b:c2:ae:b2:df:64:a7:10:e2:f7:14:a3:
bf:13:9b:7d:b4:f4:e3:96:a4:de:c7:e3:9d:49:18:
98:e1:5f:40:ba:aa:35:17:d5:59:cd:4d:96:5d:7c:
92:68:61:e0:13:76:81:2e:3c:d8:c9:99:a1:58:a3:
a1:29:66:2e:03:a0:06:aa:11:21:87:c8:55:03:a5:
6b:9d:12:dd:6f:1e:50:2e:ef:85:82:cf:71:e0:99:
5e:6f:b3:d5:a3:41:30:30:e9:b0:c4:a7:ad:cf:19:
08:82:34:c7:d5:fa:c2:c7:15:6f:79:7a:02:62:f3:
30:bd:8c:4c:e9:91:b1:9a:98:13:98:66:c4:93:65:
67:f0:6f:b1:e5:5c:d4:05:b7:5a:70:69:71:c3:1c:
e4:b9:aa:8e:85:b7:38:30:f7:58:c9:50:f3:83:3d:
48:ef:3a:ef:74:8f:95:51:83:b2:5e:0b:ad:cc:fb:
f5:d6:84:7a:45:ab:3f:09:4e:e8:35:cf:45:62:2e:
18:e9:ca:ac:09:73:ed:ce:ff:3e:05:12:0a:35:9c:
1d:a5:30:9c:db:28:74:f4:03:61:a0:68:d3:ec:ae:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E2:A7:4F:A3:74:4E:2F:DF:25:5A:A7:C1:5A:C9:AB:9D:24:23:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FOKnT6N0Ti_fJVqnwVrJq50kIwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:16:ec:42:bc:83:eb:38:9b:2a:e6:10:07:a3:46:7f:a4:b1:
20:8f:8e:3b:ce:34:c6:b2:16:eb:ea:38:a3:57:c6:c3:15:61:
49:0d:db:7f:1e:45:f8:e7:a4:b0:91:7e:90:1d:1f:62:06:3c:
31:6f:cb:ff:dc:39:a1:f7:21:b7:de:3b:b1:5f:2b:fa:53:fe:
36:f3:c9:3b:75:52:d7:b4:03:28:19:b0:4b:27:7a:15:3d:9a:
7a:26:78:33:84:f1:c5:56:a4:ba:e4:aa:7d:2c:ee:f1:41:7a:
94:7c:ce:db:48:04:b8:42:9f:5d:28:fa:2a:bd:a6:f5:26:da:
84:80:0e:64:d8:e4:91:1c:b1:04:39:df:3e:55:03:e7:1c:91:
7a:20:69:ff:47:d1:e2:59:44:1d:5e:4a:c5:36:60:18:e2:61:
8a:2f:a0:7f:03:19:94:07:ee:98:19:b0:73:72:5c:57:03:b2:
94:07:25:d0:6b:ae:36:15:3c:9b:8d:b2:81:f9:6c:5a:a6:a0:
34:49:97:74:59:e7:6f:5f:61:0c:d9:cc:ec:88:e4:b8:05:35:
1f:f7:09:f6:e4:81:75:22:5f:a7:67:3e:b5:30:e1:9d:5f:ee:
8a:cd:13:e6:54:2f:fb:8a:77:8f:28:0c:0f:c2:1e:cb:12:a4:
be:04:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:31:31 2025 by rpki-client