Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ft7tGbgUtdHum2AOQkiZLSgZVT8.roa
File: ft7tGbgUtdHum2AOQkiZLSgZVT8.roa (raw, json)
Hash identifier: DmZTqpcIgPstvZMw0iWZUARbSBMlG0IzmTEHFH9z1H8=
Subject key identifier: 7E:DE:ED:19:B8:14:B5:D1:EE:9B:60:0E:42:48:99:2D:28:19:55:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B68E36A192B38138612DAE97BECAFE6E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ft7tGbgUtdHum2AOQkiZLSgZVT8.roa
Signing time: Wed 25 Oct 2023 22:10:16 +0000
ROA not before: Wed 25 Oct 2023 22:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:e3:6a:19:2b:38:13:86:12:da:e9:7b:ec:af:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 22:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7edeed19b814b5d1ee9b600e4248992d2819553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:af:29:46:84:8a:4d:b8:4e:c1:c9:4d:93:
39:c9:08:13:d9:93:f3:dc:6f:f5:97:ee:6b:20:bf:
a8:5f:95:3c:7a:e9:ac:17:da:1a:94:aa:12:70:c2:
31:85:ac:5b:12:37:a0:fd:1d:c8:f2:df:9b:f6:b1:
27:3f:87:07:25:cc:bf:9f:32:51:74:7b:0f:e6:09:
25:1b:dc:9f:82:03:b1:d6:21:0f:31:d5:22:29:1b:
02:51:c6:d7:99:bb:3b:fb:db:1a:ba:c9:80:20:6b:
8b:d5:f8:16:d3:7e:33:53:92:e3:50:67:20:d4:1d:
2e:d3:12:ef:09:8d:5f:8f:f8:80:ea:98:35:7a:ae:
68:fa:f7:41:b6:4d:32:61:80:45:3e:d6:89:c2:45:
9f:7f:b8:bd:b9:df:e6:e4:98:82:5f:b4:57:30:2e:
d3:9e:77:53:43:7f:61:28:0e:b3:93:c5:bf:82:1f:
39:cb:9b:4d:a8:f8:94:89:4a:7e:9c:42:e3:d3:67:
2f:65:85:cb:ec:f8:10:24:51:f1:8d:2e:cf:18:85:
e2:3a:fc:23:ce:16:08:54:79:cd:0f:e2:53:42:74:
96:9e:7c:22:f1:1d:d0:47:79:b8:e5:3c:3e:21:df:
41:9d:40:3e:03:c7:2e:51:55:d2:03:89:6b:bf:a6:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:ED:19:B8:14:B5:D1:EE:9B:60:0E:42:48:99:2D:28:19:55:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ft7tGbgUtdHum2AOQkiZLSgZVT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4e:65:02:b8:71:72:1d:cd:6d:74:35:2d:4d:38:6f:f3:33:
cb:b5:a2:53:3b:88:27:1b:5c:78:ae:40:fb:2c:71:a4:fc:d7:
a0:29:c4:31:b7:9b:a0:ee:b2:04:56:ed:27:1f:e8:7f:d3:c9:
51:cc:f8:c2:fc:72:1c:db:20:11:62:18:85:cd:4a:76:48:88:
b9:3c:b5:6a:c4:b6:76:e2:fa:38:18:5c:88:46:9b:c8:81:60:
82:13:b2:30:72:fc:4f:db:90:7b:f4:d3:ee:13:d5:ad:33:01:
84:a5:6d:9f:5c:94:e8:0b:6a:d7:9e:0d:a1:43:23:75:47:29:
b7:40:2b:e2:88:e1:e4:90:75:d4:35:2a:e6:98:2a:79:12:c7:
78:7d:16:55:64:69:10:d3:87:37:74:a0:46:86:c0:3e:ed:44:
b9:b3:76:d4:f1:09:d8:f8:3f:cc:d1:49:bc:33:6e:ca:1f:27:
16:58:ee:98:1c:61:8c:ed:fa:cc:95:71:9d:5e:8e:5b:7a:e5:
ee:57:55:cd:6c:ec:26:7b:20:a5:ef:92:89:f2:6f:aa:03:79:
b0:5f:ca:4d:5f:93:72:3c:f0:3e:ea:93:e6:a4:d0:c1:5b:f3:
c5:c5:90:b9:dd:fe:91:f9:4f:e1:20:6c:c9:b0:c6:29:0e:70:
4f:ef:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:55:21 2025 by rpki-client