Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fgmfRUoCPVG0683y8WPUZnLOq4A.roa
File: fgmfRUoCPVG0683y8WPUZnLOq4A.roa (raw, json)
Hash identifier: ObxC8t1xIjyjHP4E0HtvgCamP9q//1TQSBU1J8OsEM8=
Subject key identifier: 7E:09:9F:45:4A:02:3D:51:B4:EB:CD:F2:F1:63:D4:66:72:CE:AB:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3E3731C4A09493C9538C57FD1A043EA2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fgmfRUoCPVG0683y8WPUZnLOq4A.roa
Signing time: Tue 17 Oct 2023 15:18:06 +0000
ROA not before: Tue 17 Oct 2023 15:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:37:31:c4:a0:94:93:c9:53:8c:57:fd:1a:04:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 15:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e099f454a023d51b4ebcdf2f163d46672ceab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:fb:45:58:18:33:7c:f7:b9:83:ab:b1:5d:
1f:c5:a4:fa:78:3b:c3:f4:cb:b0:dd:83:b7:9d:84:
e3:7d:3d:54:4a:30:84:1d:36:c0:c7:fa:86:8c:e4:
db:4e:e2:3f:6b:c0:0e:91:4d:cf:d8:5e:df:48:a5:
e6:1e:8f:36:47:9c:12:0e:dd:72:e9:64:dd:17:96:
ec:bf:37:4e:9e:ec:84:e8:88:77:bc:09:c8:90:5b:
6e:6b:83:0b:91:86:1a:0f:9b:11:d3:bf:66:76:ff:
40:3e:0e:98:56:24:bf:8d:f6:02:4a:42:7d:f8:a7:
d7:48:ef:63:06:71:d4:58:4c:ab:d6:93:4e:83:d3:
31:a7:47:55:9a:1a:e9:10:2e:37:8f:20:a2:e8:30:
91:6b:09:c3:0e:59:61:a4:4f:9a:c5:72:b7:26:62:
61:51:9c:ab:a9:ad:1a:b7:51:ab:28:b0:56:eb:92:
fb:5e:f3:73:bc:e6:1e:99:0e:96:70:2f:e2:2f:6a:
a5:00:0d:a2:32:da:b8:69:a2:b4:ca:6c:11:c5:10:
d7:53:bd:26:3d:cc:dc:8b:9d:8b:93:0d:eb:fb:d8:
5f:98:97:59:aa:fe:b9:6b:17:3f:33:91:ab:b9:e0:
91:50:67:2b:57:0a:99:d2:3b:2f:bf:50:27:bf:10:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:09:9F:45:4A:02:3D:51:B4:EB:CD:F2:F1:63:D4:66:72:CE:AB:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fgmfRUoCPVG0683y8WPUZnLOq4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d4:4e:5a:d5:dc:06:95:a2:73:1e:79:5e:ef:e8:03:ce:df:84:
90:4d:7e:94:41:47:36:ad:ac:51:82:c9:3b:00:bb:2b:54:41:
a8:ff:9e:4a:68:b5:57:74:35:d9:8b:45:a8:35:8e:a2:b3:37:
2f:1c:ee:12:07:1a:84:3e:8f:c3:41:2a:37:55:03:f3:e7:73:
0f:d4:3c:31:c8:6d:94:63:12:5c:b9:21:2c:45:62:7c:82:18:
27:e4:08:95:6b:36:6a:9f:13:d8:61:a6:3c:11:2e:e0:64:73:
e7:78:27:95:87:fb:d9:77:02:f6:e3:ed:2d:fc:0a:b8:14:f8:
dd:cc:54:fc:92:4e:f8:da:63:78:e7:bf:68:d0:7f:36:7e:58:
5f:0a:c2:90:2f:ee:12:ef:0a:67:98:6c:b3:5c:cd:e6:ba:c3:
d7:3f:9c:4e:7c:6b:07:57:e2:37:dc:1d:a8:37:70:fb:39:63:
0b:b8:34:72:e9:0b:4b:2e:00:10:8d:54:89:5d:81:d1:03:37:
d0:06:76:c3:c6:1d:ca:3a:f6:ad:78:92:53:fd:d9:28:e9:15:
a7:28:3c:28:c8:ab:6b:3c:2b:83:65:63:62:26:6c:8c:3f:e8:
b7:fa:62:82:fe:2c:d6:58:db:d2:74:aa:0a:e0:d0:51:4d:83:
9a:da:82:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYs+NzHEoJSTyVOMV/0aBD6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE3MTUxODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTA5OWY0NTRhMDIzZDUxYjRlYmNkZjJmMTYzZDQ2NjcyY2VhYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg/7RVgYM3z3uYOrsV0fxaT6eDvD
9Muw3YO3nYTjfT1USjCEHTbAx/qGjOTbTuI/a8AOkU3P2F7fSKXmHo82R5wSDt1y
6WTdF5bsvzdOnuyE6Ih3vAnIkFtua4MLkYYaD5sR079mdv9APg6YViS/jfYCSkJ9
+KfXSO9jBnHUWEyr1pNOg9Mxp0dVmhrpEC43jyCi6DCRawnDDllhpE+axXK3JmJh
UZyrqa0at1GrKLBW65L7XvNzvOYemQ6WcC/iL2qlAA2iMtq4aaK0ymwRxRDXU70m
Pczci52Lkw3r+9hfmJdZqv65axc/M5GrueCRUGcrVwqZ0jsvv1AnvxCNGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH4Jn0VKAj1RtOvN8vFj1GZyzquAMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZmdtZlJVb0NQVkcwNjgzeThXUFVabkxPcTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANROWtXcBpWicx55Xu/o
A87fhJBNfpRBRzatrFGCyTsAuytUQaj/nkpotVd0NdmLRag1jqKzNy8c7hIHGoQ+
j8NBKjdVA/Pncw/UPDHIbZRjEly5ISxFYnyCGCfkCJVrNmqfE9hhpjwRLuBkc+d4
J5WH+9l3Avbj7S38CrgU+N3MVPySTvjaY3jnv2jQfzZ+WF8KwpAv7hLvCmeYbLNc
zea6w9c/nE58awdX4jfcHag3cPs5Ywu4NHLpC0suABCNVIldgdEDN9AGdsPGHco6
9q14klP92SjpFacoPCjIq2s8K4NlY2ImbIw/6Lf6YoL+LNZY29J0qgrg0FFNg5ra
gn8=
-----END CERTIFICATE-----
Generated at Wed May 14 15:13:54 2025 by rpki-client