Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fcHyOsnGF54y0bjnsU-xCkUSHvE.roa
File: fcHyOsnGF54y0bjnsU-xCkUSHvE.roa (raw, json)
Hash identifier: DS0c8q5zc4lO5q3E2A5ttCe7whBIhmDzn4SOyoGS4yU=
Subject key identifier: 7D:C1:F2:3A:C9:C6:17:9E:32:D1:B8:E7:B1:4F:B1:0A:45:12:1E:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E10E7F715BC469618078D5B8F2AD4CB2D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fcHyOsnGF54y0bjnsU-xCkUSHvE.roa
Signing time: Tue 05 Mar 2024 23:17:01 +0000
ROA not before: Tue 05 Mar 2024 23:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:e7:f7:15:bc:46:96:18:07:8d:5b:8f:2a:d4:cb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 23:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc1f23ac9c6179e32d1b8e7b14fb10a45121ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:a7:31:a8:50:20:ab:2f:37:2f:8a:82:15:
20:9e:45:42:e9:30:68:63:f9:08:4e:9d:37:78:b9:
30:ca:b0:28:8b:63:0b:98:51:1f:40:8d:ef:38:f0:
30:df:e2:c0:ef:75:02:32:59:8b:9a:e7:3b:df:b6:
3d:0c:13:48:ec:e2:ee:48:97:08:dd:76:1d:dd:57:
1a:ba:73:70:e9:c3:fa:28:e0:b5:72:76:7e:8a:18:
2c:03:36:bf:5c:f6:7d:4c:06:22:88:56:5f:b5:56:
65:2b:36:34:f8:84:e4:34:20:82:17:43:2a:09:0f:
64:1e:32:94:5d:ce:1c:42:97:85:9f:cc:0e:fd:44:
02:2b:58:13:78:90:a4:00:4a:2a:ba:8e:76:41:00:
2c:ca:22:67:5f:89:92:72:29:7c:7c:26:16:be:fc:
e4:18:cf:b4:c5:be:48:0a:69:36:c7:4c:51:31:29:
c4:e4:05:e1:98:b9:50:ef:80:33:6e:99:f2:6d:58:
34:68:37:b5:da:f4:af:f8:3b:c1:00:69:d1:68:88:
89:7d:2d:4b:23:73:ea:8e:f4:16:71:6f:e3:b5:4b:
ff:9b:95:85:90:7b:a7:26:c0:31:3d:d3:c9:11:0c:
b3:29:c4:d6:41:59:66:3a:c2:15:89:96:a3:c8:de:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:F2:3A:C9:C6:17:9E:32:D1:B8:E7:B1:4F:B1:0A:45:12:1E:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fcHyOsnGF54y0bjnsU-xCkUSHvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:93:30:e6:4b:73:dc:32:76:6f:fe:c1:cc:60:dc:3c:73:90:
d4:0c:a2:81:74:43:7a:0d:ea:c9:7d:cf:01:4e:03:f0:ff:f1:
56:9c:6e:37:ce:96:4f:54:e3:38:12:90:d6:bc:a2:82:3e:0d:
0d:32:a1:54:ae:e1:db:37:d9:12:03:67:11:e6:00:cc:8f:ae:
eb:16:d0:08:70:b4:c7:cd:c4:44:11:b9:90:94:3b:31:24:cf:
dc:09:59:93:b2:76:7d:ed:95:be:78:a6:5e:e7:3e:cd:4f:9b:
27:8a:de:5f:aa:63:ba:d6:c7:99:fc:83:79:53:da:b4:ce:a2:
55:c8:55:5e:0b:57:70:c6:36:53:e9:bc:ab:f0:63:0a:6f:d6:
d8:4b:4d:16:bc:a3:1e:e7:1b:91:30:4d:8b:1f:87:3e:63:38:
64:a6:9d:ed:94:0c:80:10:ea:52:6c:67:32:a7:57:f3:d5:41:
32:97:a8:f6:68:c8:8f:c1:5c:cc:cd:a1:26:0a:f3:2a:7b:42:
9f:7f:54:fd:bc:d3:06:65:e6:70:98:3b:e1:c8:60:04:4b:d4:
89:3c:8f:8b:ce:d0:37:37:45:0d:aa:70:f9:ab:0d:60:1f:8c:
1e:c7:35:3f:a2:ab:b4:6c:d2:14:7d:44:54:3e:a4:e0:cf:32:
7e:6c:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:09 2025 by rpki-client