Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FP7ZPrtg7EZZr0S2ele_Kz-cHAQ.roa
File: FP7ZPrtg7EZZr0S2ele_Kz-cHAQ.roa (raw, json)
Hash identifier: 7JqSS8Ihn4Ey+JM6l+JPuqBKIRjWvBkwzUNezSaUPWQ=
Subject key identifier: 14:FE:D9:3E:BB:60:EC:46:59:AF:44:B6:7A:57:BF:2B:3F:9C:1C:04
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBAA5E92D97DAC47C3444169A6118B0C4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FP7ZPrtg7EZZr0S2ele_Kz-cHAQ.roa
Signing time: Fri 10 Nov 2023 19:11:57 +0000
ROA not before: Fri 10 Nov 2023 19:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:a5:e9:2d:97:da:c4:7c:34:44:16:9a:61:18:b0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 19:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14fed93ebb60ec4659af44b67a57bf2b3f9c1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:b4:92:e8:47:fd:78:60:0b:7d:1c:fb:84:
5d:37:cf:51:6f:79:3e:47:51:22:32:8f:71:fa:b0:
74:06:b0:44:11:f2:05:bb:be:79:b1:b3:cf:29:24:
3d:56:9b:28:a3:c5:ce:5b:b5:1b:73:c3:2b:46:38:
84:3c:c4:c4:99:b4:0f:c7:40:8a:58:fa:81:03:ea:
6d:b2:bf:76:ef:e2:90:68:65:05:d5:dc:24:9d:2d:
fd:dc:2f:fc:ee:6e:fb:5b:c8:0c:71:00:47:11:ba:
09:7e:4a:53:bc:7d:4a:05:68:53:bc:8f:ac:46:b5:
dd:ae:e2:79:e0:b3:ad:ae:39:f0:0f:e2:58:da:30:
34:57:32:e9:89:b6:30:35:77:e2:74:d5:0b:58:52:
b4:45:de:56:6e:e6:ce:30:df:e6:73:4d:02:8e:d2:
7b:85:65:00:87:44:bc:d2:84:61:e7:57:6a:0b:98:
36:f9:90:1e:08:0d:ab:05:5f:f0:37:bb:01:93:5c:
37:4c:0e:2b:4d:8b:4c:fb:2b:2d:cc:f0:7d:24:b2:
14:a9:12:b6:fd:94:9a:e3:8b:58:da:c3:33:1b:69:
ad:b8:51:60:b7:b7:e3:75:40:93:51:39:4c:bd:8b:
85:6b:06:cd:a2:24:2e:02:48:b2:b2:37:72:fb:49:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:D9:3E:BB:60:EC:46:59:AF:44:B6:7A:57:BF:2B:3F:9C:1C:04
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FP7ZPrtg7EZZr0S2ele_Kz-cHAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:26:30:6b:37:3f:9b:b3:c3:cf:a1:c3:03:74:95:57:f5:36:
5a:37:2c:2b:6a:9b:4a:5e:80:e5:46:62:a8:ca:64:b1:40:02:
45:0f:6d:2d:e6:81:7d:c6:51:a5:c5:11:09:d9:9e:31:1e:cb:
1c:62:36:d0:70:59:c9:5a:e8:70:94:ff:ec:ec:f2:5f:81:2d:
65:cf:de:75:f5:7c:83:c7:ae:01:98:a7:9d:e1:85:50:e5:75:
7f:d4:4d:a3:48:aa:79:9a:2c:57:f1:01:5b:bd:1c:3d:05:b2:
e3:74:5d:30:01:25:9f:30:17:25:e7:63:9d:db:5d:e6:e7:da:
f0:ee:cc:d0:f7:77:9b:e2:51:1f:25:10:e6:0c:76:ac:8a:fb:
72:c9:71:02:d0:20:53:b4:73:9e:ac:57:51:92:38:c9:ae:e3:
a1:02:87:29:1c:2a:df:50:7a:a2:43:3c:3f:b2:5a:2b:da:0d:
c3:28:e4:f9:af:13:a6:b0:f3:e0:72:88:af:7c:6d:de:de:bd:
a0:21:2e:cb:88:8b:9f:89:39:34:cd:83:24:02:aa:ff:e3:29:
8a:01:6e:52:98:83:5b:f3:67:12:52:88:d6:e3:22:e8:23:97:
f8:07:97:84:d2:f0:dc:8a:e3:f3:3e:4b:88:56:98:0b:79:44:
ff:38:d5:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu6pektl9rEfDREFpphGLDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMTkxMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGZlZDkzZWJiNjBlYzQ2NTlhZjQ0YjY3YTU3YmYyYjNmOWMxYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHi0kuhH/XhgC30c+4RdN89Rb3k+
R1EiMo9x+rB0BrBEEfIFu755sbPPKSQ9Vpsoo8XOW7Ubc8MrRjiEPMTEmbQPx0CK
WPqBA+ptsr927+KQaGUF1dwknS393C/87m77W8gMcQBHEboJfkpTvH1KBWhTvI+s
RrXdruJ54LOtrjnwD+JY2jA0VzLpibYwNXfidNULWFK0Rd5WbubOMN/mc00CjtJ7
hWUAh0S80oRh51dqC5g2+ZAeCA2rBV/wN7sBk1w3TA4rTYtM+ystzPB9JLIUqRK2
/ZSa44tY2sMzG2mtuFFgt7fjdUCTUTlMvYuFawbNoiQuAkiysjdy+0m+FQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBT+2T67YOxGWa9EtnpXvys/nBwEMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRlA3WlBydGc3RVpacjBTMmVsZV9Lei1jSEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALkmMGs3P5uzw8+hwwN0
lVf1Nlo3LCtqm0pegOVGYqjKZLFAAkUPbS3mgX3GUaXFEQnZnjEeyxxiNtBwWcla
6HCU/+zs8l+BLWXP3nX1fIPHrgGYp53hhVDldX/UTaNIqnmaLFfxAVu9HD0FsuN0
XTABJZ8wFyXnY53bXebn2vDuzND3d5viUR8lEOYMdqyK+3LJcQLQIFO0c56sV1GS
OMmu46EChykcKt9QeqJDPD+yWivaDcMo5PmvE6aw8+ByiK98bd7evaAhLsuIi5+J
OTTNgyQCqv/jKYoBblKYg1vzZxJSiNbjIugjl/gHl4TS8NyK4/M+S4hWmAt5RP84
1ds=
-----END CERTIFICATE-----
Generated at Mon May 12 18:52:59 2025 by rpki-client