Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fF8Eh0NJiU6k6KW0vSpzZBvL5BA.roa
File: fF8Eh0NJiU6k6KW0vSpzZBvL5BA.roa (raw, json)
Hash identifier: L9uWTKJzcgzj+qmnCIlr1xkkr7llDOPPLefC6YRt+l8=
Subject key identifier: 7C:5F:04:87:43:49:89:4E:A4:E8:A5:B4:BD:2A:73:64:1B:CB:E4:10
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C85A53693E7FED67536E8379EA3572D3F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fF8Eh0NJiU6k6KW0vSpzZBvL5BA.roa
Signing time: Wed 20 Dec 2023 05:14:06 +0000
ROA not before: Wed 20 Dec 2023 05:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:85:a5:36:93:e7:fe:d6:75:36:e8:37:9e:a3:57:2d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 05:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5f04874349894ea4e8a5b4bd2a73641bcbe410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:a0:2a:01:ff:52:92:3b:c0:0c:f6:8c:9d:
58:d6:1e:43:ef:42:28:0b:10:a3:be:a6:10:d0:dc:
28:14:f5:ff:73:c6:ad:a5:fc:74:3b:bf:44:eb:da:
a7:79:ac:b9:d9:b7:03:6d:17:22:6b:80:44:26:b9:
63:c1:45:33:ab:b2:7e:ac:87:f6:b6:8b:6b:f6:30:
25:f1:4c:bc:4b:8d:b3:d8:ef:e2:a8:d2:ef:6d:4c:
6e:03:1c:db:8b:50:27:17:bd:cc:f6:e7:39:47:4c:
d5:eb:a1:c0:96:82:04:94:59:83:6a:f7:70:bf:9b:
4e:83:72:56:84:0a:50:41:b7:0d:8c:d5:81:45:a4:
5f:3d:b3:8e:d4:bd:86:ab:8e:76:92:aa:52:cd:71:
c7:6b:f3:18:f7:24:c7:25:2a:62:74:18:8e:2f:3c:
18:1b:51:3d:e0:6b:0b:59:f6:93:81:11:74:cb:cc:
1e:80:65:62:9f:5a:be:a5:52:f3:18:22:c8:cc:25:
e2:0d:a1:1e:03:83:e4:07:14:7c:2f:e2:22:a9:58:
c6:f6:72:a2:1e:0a:d3:6e:19:b3:67:b8:56:2f:aa:
38:53:76:33:15:d2:f6:9d:0b:59:23:e5:86:ab:a8:
c0:11:b3:78:90:cc:60:0d:8b:46:f9:53:71:a5:dd:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:04:87:43:49:89:4E:A4:E8:A5:B4:BD:2A:73:64:1B:CB:E4:10
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fF8Eh0NJiU6k6KW0vSpzZBvL5BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:cc:1e:5e:1d:e9:c2:84:04:6a:77:9d:c5:3d:50:1a:a6:e4:
f4:88:e7:19:b8:57:38:d0:d6:32:ba:ec:18:02:25:a3:4c:1b:
0e:13:76:77:f4:ad:27:06:da:71:c8:77:4d:85:db:40:f8:96:
e1:43:c2:ca:98:bf:15:fe:cd:6a:5e:42:04:14:9e:7d:e7:a9:
39:83:13:38:53:0e:43:70:72:42:03:9a:b1:c4:a3:12:27:20:
72:3e:a7:b4:2f:cf:9e:4b:d1:82:84:7a:e7:d7:c9:71:58:fe:
00:8c:e2:4e:50:d7:1d:e1:20:0d:ed:af:4f:6e:34:a0:ab:80:
3f:1e:3d:fe:47:ec:b9:54:51:18:94:9e:79:a6:06:4e:58:4a:
40:18:02:44:5a:47:15:21:b0:8a:59:25:1b:6a:6c:a5:c5:df:
9a:28:48:92:75:5e:c9:74:4d:d4:ba:5d:39:7e:00:ba:4c:33:
7f:1e:9a:68:01:b3:3b:d0:4f:7e:1d:b2:ad:23:a7:b9:e0:2d:
b5:23:a9:2b:60:02:e3:64:72:af:a0:2b:20:d4:0a:94:09:73:
09:b7:90:fc:96:5e:76:bf:e4:ae:0b:16:33:05:4d:1e:73:70:
32:15:4b:03:d5:be:85:39:c9:b1:0e:ea:44:89:df:e5:7c:56:
d0:07:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:29:38 2025 by rpki-client