Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FVUK318qPcqwCfegk76eR7MWyZY.roa
File: FVUK318qPcqwCfegk76eR7MWyZY.roa (raw, json)
Hash identifier: WJshnU+MzbbUI6aT8/PTfoxuThnRQJxMI2kcIMGrSl4=
Subject key identifier: 15:55:0A:DF:5F:2A:3D:CA:B0:09:F7:A0:93:BE:9E:47:B3:16:C9:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1F155D5504A46519FBDBC9626F3D1DBD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FVUK318qPcqwCfegk76eR7MWyZY.roa
Signing time: Wed 11 Oct 2023 14:12:55 +0000
ROA not before: Wed 11 Oct 2023 14:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:15:5d:55:04:a4:65:19:fb:db:c9:62:6f:3d:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 14:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15550adf5f2a3dcab009f7a093be9e47b316c996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:ec:f1:a6:54:cf:47:7f:07:7e:b6:9d:b0:
47:c5:b7:c9:a6:6b:dc:ad:15:59:02:ee:17:3b:f7:
15:6c:2f:c8:98:a1:cb:23:60:2e:2e:57:5b:71:dd:
af:dd:89:6b:f1:27:96:0c:a9:bb:a2:f5:4f:02:c4:
59:73:83:0d:ec:23:bb:cf:d7:56:df:3a:3b:c7:67:
72:e6:2a:0e:b5:77:49:bf:c2:c5:15:4f:39:bb:19:
93:6a:9b:d8:a5:34:93:53:12:91:6e:6c:88:3a:12:
0f:e3:ee:31:db:8a:1e:2e:8d:25:bb:da:fa:48:40:
da:b2:36:b3:98:ed:dd:75:da:5e:c7:f4:21:09:8c:
23:54:9d:18:c9:bb:72:a6:1e:83:1b:25:35:6e:42:
0d:cc:45:53:5c:fb:76:29:e5:3a:e2:d8:2f:48:6b:
88:26:5e:0c:3c:b3:91:66:38:19:cb:28:88:a5:a3:
6c:2e:00:7e:18:ab:7c:b7:64:18:90:dc:b2:79:8c:
f5:fd:45:0f:e4:26:fd:32:21:ab:29:c2:0c:aa:da:
d2:43:9b:61:ac:25:4d:8e:17:ee:72:f3:fe:79:78:
0a:8f:ce:10:af:4b:e4:e4:67:59:74:1d:97:eb:07:
44:24:61:e1:38:1a:8b:a1:89:fb:f0:93:d1:69:3a:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:0A:DF:5F:2A:3D:CA:B0:09:F7:A0:93:BE:9E:47:B3:16:C9:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FVUK318qPcqwCfegk76eR7MWyZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:c3:af:8a:47:95:af:e4:bd:f1:b3:fa:87:b0:80:a3:9b:db:
2b:d9:79:e9:a5:37:0e:de:55:ff:a6:05:6d:96:81:a7:b3:3e:
af:37:5a:5e:54:87:f7:19:3c:8d:8f:4c:73:c3:7e:e5:a3:7a:
f1:c4:57:d7:3a:1e:da:7a:ed:5d:5c:73:d8:07:8a:38:8d:6b:
d7:f3:0a:42:6d:4c:48:4f:13:4c:3c:94:bd:05:c4:a3:05:87:
e8:a9:13:04:91:f9:a4:fb:8a:b0:b1:8f:f7:c8:d8:79:8d:64:
f8:7a:d3:e7:f2:33:bd:ad:8d:ca:7d:42:89:74:7a:32:fe:cf:
49:5d:e3:cc:db:d2:89:ec:93:ed:62:61:08:48:49:ce:bb:9c:
38:38:74:5b:9e:11:c3:27:08:e3:12:bf:1e:25:a1:2f:a8:6c:
76:16:ba:ab:cb:5c:99:c5:ce:94:2b:c5:94:9f:f7:81:b3:1f:
57:f0:1f:7d:06:0b:1d:38:c7:44:1d:5e:5b:b7:eb:90:e5:5b:
43:82:43:28:8e:99:61:b1:f1:ca:50:61:e5:cb:b8:34:ef:60:
de:98:1b:e9:99:cb:e3:ba:44:c8:02:60:2d:3c:1d:7a:e2:84:
25:50:b6:07:ac:03:ef:5e:3a:4f:b1:37:bd:1f:35:4e:dd:25:
bd:4e:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:46:28 2025 by rpki-client