Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fYsbOj3d_hevTJCBKpI-rHKChw8.roa
File: fYsbOj3d_hevTJCBKpI-rHKChw8.roa (raw, json)
Hash identifier: qFnj2ijnqhLfKjsj5eEYgeeVnxhBF39tFlZA4FoeBCw=
Subject key identifier: 7D:8B:1B:3A:3D:DD:FE:17:AF:4C:90:81:2A:92:3E:AC:72:82:87:0F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6CEFD6358F6DB5BDB1557583C4A8ABC2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fYsbOj3d_hevTJCBKpI-rHKChw8.roa
Signing time: Fri 15 Dec 2023 10:05:06 +0000
ROA not before: Fri 15 Dec 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:6cef:1289/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:ef:d6:35:8f:6d:b5:bd:b1:55:75:83:c4:a8:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d8b1b3a3dddfe17af4c90812a923eac7282870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:ce:2a:2d:d0:a5:e2:d2:85:47:7c:72:95:
ea:a7:13:ec:a4:35:e4:78:d1:2a:2f:cf:e0:50:3c:
93:08:76:35:9e:ac:a8:b1:05:cf:80:41:ee:01:fe:
fa:ec:7a:33:4a:80:9e:8a:82:0a:f1:5c:83:87:60:
54:cf:e0:f8:c2:a1:e3:87:d5:0d:8e:28:b0:63:33:
7a:1a:17:d9:70:25:37:f3:66:e7:99:4e:42:e8:d3:
d1:e4:a6:97:77:1a:c8:f3:7a:79:9e:f7:8e:8d:ae:
2f:f6:87:3e:a5:a3:18:f9:cd:54:a6:a1:29:f6:57:
bf:31:4f:70:a9:d9:17:6b:52:b2:ab:f4:13:ca:77:
3a:4d:96:a0:1f:83:2e:23:5c:56:e2:8d:b1:12:ad:
1c:47:4b:f9:5b:10:fb:ab:a4:b2:97:c1:a7:cd:86:
1d:1e:b3:b5:8b:63:95:0c:68:d3:f2:fe:78:07:e4:
e8:13:b1:d7:a6:9f:e9:55:6b:1a:10:ec:28:f7:91:
b1:6b:a9:b1:ee:36:d8:54:d5:38:aa:f6:13:2a:58:
2d:2d:ae:3a:6a:e1:a2:a1:24:09:78:15:3c:64:9c:
4c:6d:f7:a8:a3:3d:9c:9c:2d:19:8d:0c:82:50:fa:
93:bc:27:7a:0c:6f:dd:1b:6d:13:ff:17:b7:be:76:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:1B:3A:3D:DD:FE:17:AF:4C:90:81:2A:92:3E:AC:72:82:87:0F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fYsbOj3d_hevTJCBKpI-rHKChw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:6c:2e:9b:2f:2b:f3:11:5f:eb:9b:15:b2:91:43:d9:ef:dc:
f1:ac:1a:78:75:83:db:8c:91:3d:a7:c8:f4:17:54:60:3c:05:
44:4a:53:53:a0:15:b5:78:80:8b:5a:92:62:0b:00:72:46:e4:
81:eb:5b:34:72:b4:fd:fd:9a:e3:23:7a:f5:0c:00:72:e0:b3:
df:2b:3c:f0:24:d5:12:99:a4:d0:67:cb:3a:44:05:80:5a:34:
d9:99:1b:08:aa:9a:1b:99:d8:dd:39:43:b8:6b:f1:82:10:11:
df:bd:73:f4:dd:83:db:34:23:eb:23:d7:95:f3:b5:16:71:4a:
03:ab:14:f9:34:00:43:5f:ff:bf:37:cf:c7:6d:d4:69:0a:a2:
25:bc:7d:a2:3f:4e:6f:d6:40:3c:35:73:07:d7:1d:d2:12:38:
59:21:06:d5:16:82:84:a6:a7:de:97:61:1e:f3:da:13:79:14:
fc:e5:e5:b4:6f:6d:5c:fb:a6:02:85:ec:51:c1:3b:95:7b:cd:
87:20:08:af:c0:c2:35:ca:67:38:9d:80:dd:7c:56:fd:fe:c5:
7b:6f:81:53:87:28:d3:17:88:03:fa:37:68:3d:58:31:6b:02:
41:55:9a:59:e9:69:5e:5a:d0:9f:1d:f3:d6:e8:a5:b6:9c:88:
e0:82:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:03:30 2025 by rpki-client