Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FlGVHvQOoqPmfgoQEcFTs8aoLD4.roa
File: FlGVHvQOoqPmfgoQEcFTs8aoLD4.roa (raw, json)
Hash identifier: 2EiQk2hm32Gs1aE5EYi5P/liYPSvAFYRZhZO5mrlOkA=
Subject key identifier: 16:51:95:1E:F4:0E:A2:A3:E6:7E:0A:10:11:C1:53:B3:C6:A8:2C:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA5359C71F5A2E7114A0610B4E3F917D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FlGVHvQOoqPmfgoQEcFTs8aoLD4.roa
Signing time: Mon 06 Nov 2023 15:17:15 +0000
ROA not before: Mon 06 Nov 2023 15:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:35:9c:71:f5:a2:e7:11:4a:06:10:b4:e3:f9:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 15:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1651951ef40ea2a3e67e0a1011c153b3c6a82c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:66:94:2d:0c:32:4e:a8:f8:5b:97:10:02:
75:2d:46:fe:8e:5e:08:c7:fc:fd:92:ff:ca:83:eb:
99:bc:ce:d9:cc:83:ee:b8:c6:24:b6:2e:e3:6d:d5:
44:95:de:1f:6a:14:f8:cc:52:da:c0:e0:34:a0:2d:
a5:3d:3a:ee:70:82:21:98:4c:bd:b8:23:ca:20:62:
37:ba:e6:34:3c:e7:80:b2:17:3a:d2:c6:a0:8e:a2:
2a:84:d8:77:d8:57:e6:a7:b3:a5:d9:2c:cf:8d:bc:
97:9c:c1:f8:76:58:25:37:d3:ac:d5:fc:59:36:d1:
6e:16:57:42:81:45:02:0c:c0:8b:51:a4:11:fd:f0:
ca:f3:1f:54:fe:b9:97:6a:4a:4e:5d:1b:e6:81:40:
5b:f3:18:9c:90:28:0c:6b:98:73:2e:81:d0:12:fc:
13:b0:03:ac:45:2f:02:1c:46:b9:a1:6e:85:c0:76:
d9:73:4f:ea:86:99:d7:69:11:fb:04:23:ed:50:af:
7b:fa:df:87:d5:dc:07:3a:44:08:c5:6f:f2:4a:8a:
ac:a0:f4:9a:2f:8d:b8:eb:06:14:6f:a7:2b:20:61:
70:a9:58:88:3d:9c:05:6c:8e:f2:17:ca:e9:c6:a1:
f8:25:f2:d7:c9:3a:4e:eb:29:a5:97:40:bd:ae:19:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:95:1E:F4:0E:A2:A3:E6:7E:0A:10:11:C1:53:B3:C6:A8:2C:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FlGVHvQOoqPmfgoQEcFTs8aoLD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ee:86:78:13:0a:85:15:1b:7d:92:da:c7:7f:ae:81:97:e5:
e9:77:54:8b:21:f5:e2:1c:0b:2e:15:4d:e4:da:7b:79:33:83:
00:92:ef:e3:87:37:d8:fc:40:9e:64:25:c5:99:38:96:5c:92:
09:db:76:09:da:6d:5a:37:3e:cb:fd:43:67:e1:fe:9b:66:07:
ea:70:de:54:06:f2:ea:b6:87:6a:12:ae:95:b8:52:cb:e6:83:
b0:dd:4e:e6:b7:20:a5:d7:64:a3:6d:36:0f:cf:60:0e:61:99:
1a:af:b5:94:d6:07:ac:9d:27:8b:33:7d:19:2b:ee:28:3d:13:
14:22:df:10:45:d0:38:8a:9d:9b:0c:b6:f4:53:17:06:65:c1:
89:56:01:ee:ff:78:d1:d5:a0:90:b3:e8:e3:bf:5e:8d:82:68:
71:fa:ec:ba:91:a0:56:4c:71:16:71:1f:1a:d8:4b:b1:96:08:
b3:b1:03:9e:2b:13:59:46:7e:01:24:a1:5d:b8:c8:45:f8:3c:
3d:45:0b:da:7c:d3:80:16:df:2a:3a:cf:87:26:84:eb:e2:94:
cb:4d:06:5f:2f:6c:f0:1f:56:ec:33:b1:71:17:43:c2:94:0d:
1e:e9:7c:9c:11:09:0e:2f:9c:b0:6b:cf:f0:1d:89:d1:90:8c:
8b:66:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:27 2025 by rpki-client