Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fAG9WdM1veNdBjxlDl8nnkTU81M.roa
File: fAG9WdM1veNdBjxlDl8nnkTU81M.roa (raw, json)
Hash identifier: mXjie96dA5j4V/Di/IdWCC2ddcFWvR5upBr+/7AsXXQ=
Subject key identifier: 7C:01:BD:59:D3:35:BD:E3:5D:06:3C:65:0E:5F:27:9E:44:D4:F3:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF6BF8ED208DA98727D7197E0F8606DBC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fAG9WdM1veNdBjxlDl8nnkTU81M.roa
Signing time: Tue 03 Oct 2023 18:14:23 +0000
ROA not before: Tue 03 Oct 2023 18:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:bf:8e:d2:08:da:98:72:7d:71:97:e0:f8:60:6d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 18:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c01bd59d335bde35d063c650e5f279e44d4f353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:e2:32:89:0e:25:19:0f:36:f6:e4:72:34:
8c:22:46:5b:a6:89:d3:d5:a4:dc:24:de:73:f5:bd:
ec:68:e6:9c:3c:c7:fe:54:e4:07:bb:81:e8:9c:7f:
73:3a:96:4a:83:12:4b:78:bf:2b:19:0a:51:47:de:
69:6e:60:29:33:c3:04:11:e1:22:fa:a6:2d:40:c2:
db:20:f4:98:26:d2:06:3e:03:7c:f6:15:6c:38:23:
03:ac:84:d5:d0:c7:a4:50:b0:46:49:43:e8:2e:e9:
01:66:65:83:29:53:58:bf:0e:7a:03:08:9f:64:bf:
46:4d:54:57:53:b6:93:47:44:84:dd:80:95:fb:4a:
dc:86:e0:6c:9c:13:04:c2:ec:83:b9:f7:75:af:c9:
19:9b:cd:fe:36:82:30:20:75:4d:be:d5:46:02:c8:
5d:85:1a:d7:e9:21:25:b7:6e:f2:1c:82:b3:15:99:
a4:e0:a9:80:c4:f2:39:b1:cc:e3:0c:6a:2f:94:7d:
08:b4:e7:21:9d:63:35:f8:97:5e:9c:ab:0f:cc:9f:
ac:9d:0d:6e:e6:ac:84:11:25:52:a7:14:d3:8c:45:
5f:89:68:28:02:98:64:b9:90:8e:ce:7e:85:a2:de:
5d:8b:ef:b1:3a:24:b5:21:87:ef:ec:34:c0:22:f1:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:BD:59:D3:35:BD:E3:5D:06:3C:65:0E:5F:27:9E:44:D4:F3:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fAG9WdM1veNdBjxlDl8nnkTU81M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:eb:4f:77:9a:5c:b5:41:78:aa:42:bb:4e:33:08:3e:4a:8b:
f1:13:67:bd:6c:0d:70:fc:b0:92:ad:e1:d9:a3:d6:eb:dd:a5:
3c:0e:f6:64:e6:13:bb:da:92:ca:c6:6b:54:76:30:b7:6a:42:
1c:90:c4:6a:42:7b:b4:4b:a3:d7:a8:ec:f1:2b:e6:30:b4:5e:
ce:3c:12:60:09:c6:3f:62:19:34:12:48:ce:7f:ff:96:3f:6f:
84:40:84:6d:62:84:a2:19:f9:84:cd:36:0c:5a:87:fb:88:be:
c1:d7:a4:71:36:c7:b7:d6:9c:e6:f7:0c:30:29:09:19:6e:f0:
40:ee:35:35:15:79:20:aa:bc:f1:4a:77:fb:be:a3:88:39:87:
c1:c9:48:81:cc:b7:62:b5:62:5f:59:96:1f:fd:be:2b:53:1d:
19:46:3c:a8:65:16:9a:6b:bc:a6:cb:61:74:9b:b5:da:2c:5f:
68:be:d9:f9:e2:5e:22:f8:8b:a2:52:8c:d3:2c:7c:cb:ef:e7:
e4:ca:db:33:e6:ae:e7:88:54:d3:aa:5a:34:63:81:dc:8f:e3:
f3:23:b8:bb:40:bc:c9:37:10:1b:e3:bc:63:8b:a1:23:0f:3e:
16:e4:b2:e8:48:a4:53:93:52:a5:3b:c6:49:5f:e7:e6:07:1b:
49:60:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:58:46 2025 by rpki-client