Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fk_uSqIql8mX53ABv5lKoBzNQ5E.roa
File: fk_uSqIql8mX53ABv5lKoBzNQ5E.roa (raw, json)
Hash identifier: U4c6mjDOov3DLjJxzbtTonrR5zARJwzu4UJmg6+MqGc=
Subject key identifier: 7E:4F:EE:4A:A2:2A:97:C9:97:E7:70:01:BF:99:4A:A0:1C:CD:43:91
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0E4F37AFD6420C264A11878DBEB618D2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fk_uSqIql8mX53ABv5lKoBzNQ5E.roa
Signing time: Mon 27 Nov 2023 01:05:21 +0000
ROA not before: Mon 27 Nov 2023 01:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e4e:6e7b/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0e:4f:37:af:d6:42:0c:26:4a:11:87:8d:be:b6:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 01:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e4fee4aa22a97c997e77001bf994aa01ccd4391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:6f:ae:dc:24:dd:ae:25:d5:58:7c:d8:ac:
91:0a:51:a9:1d:d7:46:37:5e:0a:f8:ba:63:05:78:
2e:75:4a:35:9b:f7:36:5a:44:5b:5b:31:26:13:05:
1e:86:8d:2f:d6:4e:e5:29:02:e4:89:cb:7b:76:c3:
2b:75:37:63:51:5d:6d:b3:0f:06:34:d4:a7:15:5c:
f6:05:75:7e:87:da:c4:fc:b1:5d:d6:8d:32:a9:1a:
7d:32:cc:54:8a:75:67:8b:61:73:59:25:df:22:e2:
66:ff:b5:53:fe:07:7d:90:ef:30:f0:21:eb:a6:48:
0b:25:c9:83:b9:9b:98:79:87:42:f8:4e:7b:45:5f:
e3:7d:cc:4a:06:c9:7e:6e:ee:d0:a7:e8:a9:22:48:
36:02:39:27:78:6f:67:62:8e:fd:90:48:c8:a7:c6:
ff:4d:04:dc:1f:30:1a:08:a2:ff:68:93:5c:ec:78:
9f:67:6e:a3:76:b8:bd:51:e8:ca:f8:e8:d1:ab:51:
9d:9b:f0:5b:ce:41:e3:6e:96:21:24:b5:49:26:ed:
47:c7:98:fc:93:a4:77:d4:f9:58:09:1f:53:14:b9:
7a:9b:58:43:ea:ac:9a:10:17:74:c2:74:d0:96:f4:
f2:67:bf:16:fe:cd:6d:d4:32:0d:40:80:7d:15:85:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:EE:4A:A2:2A:97:C9:97:E7:70:01:BF:99:4A:A0:1C:CD:43:91
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fk_uSqIql8mX53ABv5lKoBzNQ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:fe:dc:17:74:c5:ed:19:46:07:77:c6:9d:b2:67:78:d3:8a:
07:2a:3f:42:c9:cf:7f:29:6a:26:a4:51:93:c9:5e:88:5d:27:
91:54:97:b2:34:3f:2c:92:74:84:d5:05:33:2e:1d:0a:2f:dd:
d1:b4:ee:8a:ec:7f:d8:7b:d5:2a:a5:9a:c6:b6:8a:46:32:1a:
06:89:6b:c8:6f:3f:53:bc:b7:df:35:d8:9a:63:48:db:0a:a5:
69:f2:98:e2:37:18:73:f1:a9:7e:ff:b7:e6:1c:42:87:c9:dc:
81:5b:7a:30:91:d5:bb:3c:78:93:d0:34:27:3c:25:45:bd:63:
3f:0a:c8:d4:c7:e4:61:e7:10:58:20:08:38:80:68:7f:6c:13:
b4:4a:fb:67:94:98:12:a1:59:96:1d:28:76:42:d7:94:3e:d3:
29:47:f4:8c:0a:f6:69:60:b6:b4:53:15:09:b7:a7:e5:86:99:
1e:cb:cc:3b:09:9f:1e:9e:c0:8c:84:13:6c:d4:17:27:49:aa:
f9:bc:18:fc:65:07:65:39:8d:26:b0:3b:03:08:18:79:b7:95:
45:a4:e4:2c:d2:6b:b9:14:2b:e3:eb:da:ca:79:69:40:ff:ec:
5c:d7:dd:52:de:8e:74:61:ce:57:d7:75:a2:d0:c8:a7:68:3c:
dd:76:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:06:19 2025 by rpki-client