Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FUq7TyWsku6oI1DzAWXs0VOdXw0.roa
File: FUq7TyWsku6oI1DzAWXs0VOdXw0.roa (raw, json)
Hash identifier: VZRJY4wWm6MJ0JHe/QIzgubSFc+UDx08EwvuXRMrks4=
Subject key identifier: 15:4A:BB:4F:25:AC:92:EE:A8:23:50:F3:01:65:EC:D1:53:9D:5F:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B262BF1DF537D240928BB130B28333976
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FUq7TyWsku6oI1DzAWXs0VOdXw0.roa
Signing time: Thu 12 Oct 2023 23:14:55 +0000
ROA not before: Thu 12 Oct 2023 23:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:2b:f1:df:53:7d:24:09:28:bb:13:0b:28:33:39:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 23:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=154abb4f25ac92eea82350f30165ecd1539d5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:55:18:8a:b2:83:f1:b0:10:26:0e:da:b2:
56:d0:f7:1a:c7:c2:34:d1:c6:57:56:0a:15:bb:b0:
0d:bc:d7:e8:e6:e8:42:db:d5:cd:7b:26:79:29:da:
3a:b3:5d:bc:34:f0:5b:e6:83:c7:ef:5e:fc:22:77:
9c:77:ce:f6:44:1f:73:31:da:20:4a:bb:c1:b2:ab:
13:db:be:b3:66:62:a5:eb:fa:d3:39:ae:15:6f:59:
d5:53:78:d7:fa:cf:2b:6f:c8:3d:d7:46:d7:70:2e:
cf:8a:0c:6c:b7:55:53:b9:4f:77:b2:8a:79:22:e1:
fb:c7:cb:a2:9f:ab:98:06:3d:92:2c:dc:1b:1a:37:
39:3a:2e:a8:cc:66:99:31:12:40:80:8a:0e:7d:30:
9c:6b:5d:42:64:43:51:8f:51:ab:cf:a3:af:46:f3:
b8:62:44:b8:c0:cd:83:b4:af:34:e5:9b:e7:19:d0:
61:a4:8b:98:e4:3a:ca:43:60:68:d8:97:94:1b:a7:
c3:6c:04:ef:e9:c4:78:bd:cc:ac:c2:0b:63:33:27:
c3:c5:0d:18:48:90:02:ea:b6:e3:d0:92:03:4a:2c:
65:b6:2b:cb:fa:80:37:89:24:68:6a:e7:0f:7b:9f:
25:f3:b1:9b:f1:dc:d0:b3:f3:d5:40:93:1b:0f:bc:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:BB:4F:25:AC:92:EE:A8:23:50:F3:01:65:EC:D1:53:9D:5F:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FUq7TyWsku6oI1DzAWXs0VOdXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:08:e3:c0:44:66:13:44:0a:e2:3f:7f:41:9a:59:11:f0:3c:
df:30:34:0a:12:48:65:92:b0:4a:2e:0c:73:c4:9e:10:c1:41:
c1:dc:62:50:92:24:c0:49:c9:2d:57:d4:80:cd:93:e5:88:32:
2b:12:ab:46:37:72:08:f6:6b:98:23:12:63:cd:92:36:4b:8c:
dc:bc:d9:ee:23:85:df:96:d2:b5:24:8f:40:1b:e6:d7:a5:b0:
ba:28:3b:f2:1a:15:4a:a2:d8:36:ab:d5:b3:47:15:71:72:83:
3d:c2:a5:65:b9:bb:c8:aa:94:6c:e7:37:95:1c:f5:27:03:66:
4b:00:c7:84:e4:0b:f7:aa:9f:89:b5:d1:9c:f7:4b:0b:47:45:
0c:9d:8b:d6:29:12:a2:5b:54:7f:31:f4:6e:b9:cf:e8:ed:8d:
8f:d2:ee:f8:de:ce:57:fd:98:5a:1d:da:7c:0a:3f:5b:18:4d:
36:00:e1:cb:50:64:4e:35:75:69:f1:5b:b9:d1:6a:8a:79:3a:
fc:92:00:94:1a:cf:fb:71:fa:73:c2:94:2d:7b:e0:91:d5:34:
81:f4:50:f0:6b:bf:68:90:b7:1c:97:cc:a4:34:13:dd:57:49:
61:86:8a:c8:28:cf:8e:6a:30:f6:80:34:30:9f:3d:91:bf:ed:
e7:9f:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:06:46 2025 by rpki-client