Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FbkgXlhQFsgtw6YF3SNquf6xHUE.roa
File: FbkgXlhQFsgtw6YF3SNquf6xHUE.roa (raw, json)
Hash identifier: 7xCFED1pBwp1U9M4rU5fPjpEQRP7cRynJrOiHDagft0=
Subject key identifier: 15:B9:20:5E:58:50:16:C8:2D:C3:A6:05:DD:23:6A:B9:FE:B1:1D:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1D8D85378B8112331D4CBF0D223DDFC1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FbkgXlhQFsgtw6YF3SNquf6xHUE.roa
Signing time: Wed 11 Oct 2023 07:04:55 +0000
ROA not before: Wed 11 Oct 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:1d8c:dbaa/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:8d:85:37:8b:81:12:33:1d:4c:bf:0d:22:3d:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15b9205e585016c82dc3a605dd236ab9feb11d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:2d:c3:78:4e:2d:d7:86:f0:dd:96:27:55:
7d:01:a7:d3:1b:20:0d:ea:10:fd:89:2c:b7:8f:20:
02:68:54:13:b2:46:35:44:dd:49:2c:9f:e8:ff:d9:
4f:0f:ad:01:81:8b:d9:02:4b:ac:67:bf:51:c5:14:
3d:22:bb:51:60:a4:21:98:48:31:39:e4:26:ce:92:
a6:c4:93:dd:31:c3:44:2d:95:0c:97:83:4c:48:ec:
46:b2:01:35:62:88:3b:eb:8b:ef:a2:d3:61:49:fc:
1f:ef:04:6e:d0:8a:dc:1b:88:c9:b5:9e:51:7a:e3:
a5:27:6f:9a:1b:49:85:f4:c6:96:df:59:27:bd:12:
bd:07:69:c3:67:d9:37:a4:d2:69:9d:6d:f3:63:58:
13:4e:af:92:72:d9:22:10:09:66:72:43:3a:2e:6d:
80:07:9a:30:e9:dc:d9:77:51:47:43:7c:bf:88:1e:
95:91:1c:43:84:35:a2:af:c1:97:93:8c:3f:39:a0:
ba:fe:2b:af:c6:1a:12:43:75:90:76:79:5a:9a:05:
80:78:4f:f0:b0:f8:5d:3b:37:d4:f5:0b:5e:ef:7c:
7b:54:41:f7:ae:97:1f:6a:eb:c2:3c:8c:cc:d6:15:
0c:29:6f:95:21:f0:b2:e7:a5:be:99:51:84:1a:b1:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:20:5E:58:50:16:C8:2D:C3:A6:05:DD:23:6A:B9:FE:B1:1D:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FbkgXlhQFsgtw6YF3SNquf6xHUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:9c:9a:92:89:79:c8:1d:d9:6d:0e:2e:13:5d:20:ab:3b:ea:
be:a8:04:29:bb:17:22:29:e3:aa:1d:0c:7d:8a:12:8a:08:71:
67:78:a3:29:aa:7f:03:33:b3:41:07:09:a6:a5:74:63:dd:23:
57:8e:19:df:2f:22:19:ed:13:f7:32:22:4f:ea:40:2c:61:af:
72:44:5b:e2:5c:73:9e:35:aa:e1:c1:6f:6d:5b:f0:70:0f:d6:
e8:03:4f:35:77:37:66:3f:9b:3d:c8:06:92:7e:c2:98:48:38:
fe:62:da:25:94:7a:74:1c:e2:f1:e8:93:e7:b4:e5:dc:56:0d:
bf:02:c3:e0:af:6a:7d:07:f9:4a:77:d2:9c:f5:1d:2e:bc:49:
4d:0a:a3:cf:1e:cc:a1:c4:c7:2b:28:d3:a9:cf:26:58:c5:de:
2d:8d:a9:53:15:74:51:04:58:eb:35:64:48:aa:37:f8:c4:e8:
94:f1:72:03:94:d2:0d:46:41:88:6e:02:06:92:c4:9b:a5:df:
23:8b:f8:ef:8f:5f:a3:96:9b:c2:f5:3a:81:26:f8:23:94:5a:
f6:d8:d5:83:0d:73:2e:3c:7d:42:8d:2f:6e:ed:2d:f2:34:6e:
56:b5:d9:33:9d:30:46:57:20:2f:fc:c8:ae:99:ab:90:05:5e:
3b:38:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:31:50 2025 by rpki-client