Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FRx0Eo-s-xYs5klxDeWFqQHBmco.roa
File: FRx0Eo-s-xYs5klxDeWFqQHBmco.roa (raw, json)
Hash identifier: xFv72/y1LU2egkoZ3kr2A5DPnw9Lt8u6LvK1DYMdjXo=
Subject key identifier: 15:1C:74:12:8F:AC:FB:16:2C:E6:49:71:0D:E5:85:A9:01:C1:99:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B16801975ABF1FAE08D6A95B19857F383
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FRx0Eo-s-xYs5klxDeWFqQHBmco.roa
Signing time: Mon 09 Oct 2023 22:12:55 +0000
ROA not before: Mon 09 Oct 2023 22:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:80:19:75:ab:f1:fa:e0:8d:6a:95:b1:98:57:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 22:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=151c74128facfb162ce649710de585a901c199ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:4e:49:21:06:35:3e:41:cf:b2:e3:68:cc:
39:39:96:d0:18:15:86:5d:b6:9e:6f:30:54:6f:e1:
cb:77:9a:66:36:10:2d:8c:9e:5e:28:16:43:08:e9:
1a:9d:04:7b:8e:96:12:de:0c:46:ca:67:08:97:02:
7a:82:f6:1c:e1:fb:33:59:bd:e0:38:f8:4f:0c:52:
5f:4b:5f:2b:15:f6:9b:68:18:6f:be:44:9a:9f:18:
19:1b:95:bc:15:0e:f1:67:54:74:4b:0c:97:c7:96:
1e:21:35:3e:3e:67:fc:0e:db:c9:4b:ce:d5:98:74:
39:4d:3b:3e:03:ca:0f:b5:5d:cd:00:7b:a1:61:4c:
bf:65:3e:5d:fa:99:18:2a:57:85:59:41:34:9b:e4:
19:5a:40:36:b5:ff:71:34:cf:c1:51:35:7a:9a:8d:
33:ea:0e:eb:88:99:47:bf:ae:0a:a7:17:e0:b4:50:
d8:2c:5b:ed:09:38:f5:2a:91:ba:6c:4c:6b:b1:49:
37:39:83:2d:80:8c:07:0c:9d:66:f4:4f:0b:b1:c0:
1a:3b:28:97:01:0d:3e:dc:62:45:64:2e:f0:6e:13:
7a:1e:bc:60:80:01:5e:7e:17:94:79:6a:47:3c:4b:
77:b8:a0:ac:6a:cf:8f:58:77:7b:e7:ee:9f:aa:82:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:74:12:8F:AC:FB:16:2C:E6:49:71:0D:E5:85:A9:01:C1:99:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FRx0Eo-s-xYs5klxDeWFqQHBmco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:ea:d5:49:bb:01:2e:b0:ba:50:52:f0:61:b9:1b:0a:b5:21:
96:5a:fd:74:e9:0b:c8:51:e2:24:fa:eb:e0:70:41:ce:45:ef:
0b:05:ac:6b:33:e9:7b:f1:ac:a6:c1:1b:14:ac:77:94:cb:3d:
24:e1:81:59:ae:af:0c:d5:25:ba:62:63:1e:3e:ab:8d:a0:f9:
f4:8e:8b:ac:ce:63:75:7d:b3:c1:31:ad:c9:f6:fb:7c:02:33:
8e:c3:6e:30:7f:59:64:f5:6b:ca:56:2d:0e:6d:c1:da:8b:74:
b3:dc:24:84:64:ca:cf:c7:64:ad:75:8f:a2:b8:1b:31:1c:e8:
48:9b:35:f2:90:13:a6:1e:f1:fc:b0:be:1b:e0:ed:c9:d5:25:
73:5c:c4:a4:9f:7f:26:fc:e8:b0:d3:c8:50:63:ad:06:c7:1e:
80:af:21:66:89:ad:c7:c1:eb:50:56:43:0a:a6:fb:57:d5:e7:
2b:74:9f:28:ea:a5:16:d3:5a:6f:3d:f8:8a:a6:cd:80:92:ce:
2e:7b:ef:c0:d7:4c:5d:c6:12:85:4d:a0:16:cc:c2:54:43:65:
a3:e7:40:7f:16:5f:6b:ee:72:e1:e5:94:df:c6:3b:c9:fd:b6:
af:fb:5b:a1:5f:2f:19:98:98:3e:58:78:16:82:13:95:6d:63:
94:3e:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:42:15 2025 by rpki-client