Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFTu-4d25bMlvaFerCERBMmMeMs.roa
File: fFTu-4d25bMlvaFerCERBMmMeMs.roa (raw, json)
Hash identifier: P7/jLBg+dpTjOL/iUYZ5cYxXHAypMaaXjVbZsYhd0/o=
Subject key identifier: 7C:54:EE:FB:87:76:E5:B3:25:BD:A1:5E:AC:21:11:04:C9:8C:78:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACFE74F06D21DBAC2FA65D718203702E3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFTu-4d25bMlvaFerCERBMmMeMs.roa
Signing time: Tue 26 Sep 2023 05:12:37 +0000
ROA not before: Tue 26 Sep 2023 05:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:e7:4f:06:d2:1d:ba:c2:fa:65:d7:18:20:37:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 05:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c54eefb8776e5b325bda15eac211104c98c78cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:b0:9d:00:91:7b:36:93:7d:10:1b:04:c6:
bd:ae:1b:40:a7:5b:0c:20:8f:b2:36:28:a7:47:72:
74:d7:4f:ad:22:40:a2:e3:ed:90:3b:6b:c0:63:5f:
a9:50:80:86:bd:ea:b1:31:3e:19:be:20:f5:b0:af:
e7:a3:06:8a:ba:b5:af:c6:c6:b2:c4:8e:b8:f0:15:
54:6e:cb:1c:6b:0e:c8:7f:d3:24:54:6e:02:90:28:
f4:4e:a0:28:b6:3e:2b:19:57:c4:8e:90:8f:35:c3:
3d:40:c5:b4:63:b5:d3:3a:6e:d5:d5:1a:d2:b3:f5:
bd:66:15:cb:27:3e:75:a6:33:e5:06:4a:5c:14:8c:
d7:48:3e:a0:17:1b:5f:42:95:21:4f:d4:7e:d1:b2:
a8:a4:9f:5a:f2:09:a6:06:20:0b:71:3f:f7:b7:9a:
30:e2:62:26:f2:3f:fd:9f:d2:06:ce:02:3c:58:ae:
3e:24:b9:75:a9:f1:79:6d:5c:da:aa:86:41:de:db:
39:8a:15:bf:31:52:18:fc:f7:93:dc:c3:61:6c:74:
86:84:a2:a0:e9:20:e4:21:d1:52:b7:e0:0a:fe:49:
d4:de:54:8c:35:3c:45:27:31:ae:19:ec:fc:9e:4c:
05:20:e5:e9:55:9c:b9:24:85:54:ba:58:e7:e7:97:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:EE:FB:87:76:E5:B3:25:BD:A1:5E:AC:21:11:04:C9:8C:78:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fFTu-4d25bMlvaFerCERBMmMeMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:b6:47:ec:19:98:26:25:66:31:3b:c9:ed:fe:55:0b:fd:0c:
e4:ba:f4:eb:ec:32:8e:32:d1:d7:9f:d3:fd:12:8f:62:4e:3a:
5f:e5:d9:f9:cd:6f:c9:7e:c3:c5:9e:dd:96:58:96:4a:ad:06:
f0:02:ec:24:da:b3:aa:fe:2d:cf:b9:f7:e9:73:53:8a:f6:3b:
30:5e:0a:9c:dc:5f:42:d0:29:58:3b:ba:3d:3d:0c:7d:84:59:
5b:8b:9e:9f:7d:84:25:41:c8:9a:7b:80:bc:ab:f7:00:ca:d2:
39:99:32:23:21:be:5a:d4:cc:01:3e:45:c6:a9:66:e1:24:4e:
4c:30:da:08:36:66:b3:8f:b2:2b:fa:f6:64:01:f5:99:57:49:
b1:c8:b9:9d:15:a1:3d:92:79:38:73:6e:25:0a:f2:a2:fc:ae:
9c:c8:bd:c7:6c:f4:f7:10:23:a2:e4:3e:18:ad:d2:c7:3f:01:
aa:1a:df:69:55:36:c0:cb:69:68:c2:8b:76:3f:23:93:d2:05:
f9:b4:e9:81:64:d0:16:d5:7e:a1:84:4a:2e:18:40:f7:b0:7f:
d8:1b:58:6a:12:36:54:f2:e5:c1:c6:ee:16:27:37:4b:f1:d7:
c0:62:c7:00:d2:c7:d7:e9:14:96:62:69:48:52:14:5a:e7:40:
52:a2:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:39 2025 by rpki-client