Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Fk2y-aZuAQOSz9_LNggK5EVWzOE.roa
File: Fk2y-aZuAQOSz9_LNggK5EVWzOE.roa (raw, json)
Hash identifier: EbbyiX/fij6pUoo+oZ7MUTA0/+lRJj2B50tuNnNsWhI=
Subject key identifier: 16:4D:B2:F9:A6:6E:01:03:92:CF:DF:CB:36:08:0A:E4:45:56:CC:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDAD4323A820D73C1DABBEBED0B864724
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Fk2y-aZuAQOSz9_LNggK5EVWzOE.roa
Signing time: Fri 17 Nov 2023 01:10:21 +0000
ROA not before: Fri 17 Nov 2023 01:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:d4:32:3a:82:0d:73:c1:da:bb:eb:ed:0b:86:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 01:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164db2f9a66e010392cfdfcb36080ae44556cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:2f:d2:29:4c:1c:9d:54:1e:7d:9a:61:1d:
73:74:77:2b:27:0f:66:6e:65:90:2f:c8:3e:19:d7:
44:5d:e5:a5:58:ab:9c:b8:48:12:bd:4e:6d:78:9b:
35:4f:95:48:9d:58:63:e7:08:4b:76:70:18:39:ca:
d8:88:57:df:8a:ab:22:e2:40:f3:80:a0:53:05:c9:
ec:fd:92:fe:06:8c:62:60:bc:56:e6:92:b1:fe:50:
39:fc:64:04:26:e9:bb:0d:27:09:1f:d5:05:88:d9:
2e:f0:9b:61:e6:f6:44:51:8d:ee:71:9d:21:e5:c5:
c6:65:d9:79:50:73:ce:d3:fd:30:b3:85:0b:9a:c4:
44:16:0d:36:99:86:13:fa:1e:e7:a0:30:da:1a:d6:
2b:23:30:3c:db:be:78:5a:37:96:3b:0b:7e:95:4f:
1f:bd:ac:13:4c:53:9e:ec:ab:e6:73:df:c7:a0:a7:
0e:80:78:2e:8b:f2:1f:3f:cd:51:cd:9d:a0:c7:22:
17:59:a0:04:9d:f8:60:93:18:89:be:24:5d:e3:65:
9c:c1:4e:d3:44:5b:26:ec:0c:b7:87:ec:21:85:43:
de:4c:0e:ac:e4:0d:37:95:da:6e:1b:d8:c7:d7:64:
aa:33:18:c9:b6:52:19:8f:69:85:a3:9e:7e:4a:83:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:B2:F9:A6:6E:01:03:92:CF:DF:CB:36:08:0A:E4:45:56:CC:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Fk2y-aZuAQOSz9_LNggK5EVWzOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:fd:f9:41:79:cc:4e:73:2a:e0:20:05:7c:0e:8b:cc:8d:43:
b0:d0:bf:32:e1:9d:7d:e0:2c:22:79:f7:fe:b6:f6:bd:77:5a:
86:76:27:67:ba:4d:5b:42:a7:d4:de:cd:b2:64:d5:94:a5:7f:
34:7d:ba:1c:1d:1c:47:65:e9:1f:19:eb:df:66:86:3a:4d:63:
d0:1a:7e:f6:de:86:97:16:2e:f9:87:96:db:ab:72:e5:16:9f:
3c:50:02:fd:e6:f9:65:eb:08:34:00:84:d0:46:03:c5:23:fe:
b9:02:d4:51:3e:72:76:2a:88:6d:c6:6f:ed:fd:c8:0d:c7:04:
2e:34:67:01:61:cf:6d:92:04:af:c9:79:f1:37:43:c5:30:ce:
b0:44:60:e4:40:f8:1e:54:57:a7:85:40:f8:38:59:5c:8f:7d:
16:a5:8a:65:f5:c5:d1:51:0e:ee:2c:68:fc:4b:9a:20:79:32:
57:0b:15:8e:c9:10:44:5e:db:e3:e3:3d:94:dc:d3:3f:45:b8:
19:57:f1:0d:aa:9f:e2:7d:33:06:bb:70:1d:31:98:1e:93:a9:
99:1d:9a:79:03:e5:d5:9c:ba:9b:3b:92:4d:23:81:ec:d8:05:
36:60:36:3a:71:4f:33:4d:7b:06:aa:ae:b1:ee:e1:c2:8e:6b:
2a:e2:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:33:05 2025 by rpki-client