Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DiC-fnbVmw21nvpxeCqNL5C748.roa
File: 1-DiC-fnbVmw21nvpxeCqNL5C748.roa (raw, json)
Hash identifier: +/iDtB8LTrBXHu/a4ovpfOS0fvIDtwU3WROGg8yy3Bc=
Subject key identifier: F8:38:82:F9:F9:DB:56:6C:36:D6:7B:E9:C5:E0:AA:34:BE:42:EF:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C46F4AF380A9AD3357896D72CD5AE0506
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DiC-fnbVmw21nvpxeCqNL5C748.roa
Signing time: Fri 08 Dec 2023 01:04:49 +0000
ROA not before: Fri 08 Dec 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:46f4:1090/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:f4:af:38:0a:9a:d3:35:78:96:d7:2c:d5:ae:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f83882f9f9db566c36d67be9c5e0aa34be42ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:7e:02:69:ea:22:62:03:be:7b:73:5a:ec:
4e:3e:3a:01:a6:a1:81:79:61:c5:50:3c:36:e7:a9:
41:e3:df:6d:13:0e:6d:16:8f:53:ad:20:a8:f4:cc:
cb:79:8c:e4:50:a7:57:69:a6:48:89:48:e7:02:56:
57:7c:bf:21:00:51:2d:b7:bd:ca:29:d6:11:4d:94:
10:15:17:fd:8b:f7:5d:ba:02:42:38:df:04:a1:39:
41:38:3b:6c:f5:10:79:f6:34:3c:28:6a:64:92:a5:
74:e7:14:c5:b8:51:7d:77:5c:eb:f6:82:4b:16:7a:
21:57:db:ed:5a:dc:cb:a0:72:d1:50:4b:bf:3f:19:
43:83:91:24:bd:84:d7:bb:d6:a0:2c:38:16:b2:e5:
d4:30:a8:c0:69:0b:c1:d3:dd:38:77:3d:e5:f9:d1:
48:84:70:42:15:26:bb:38:16:0c:7e:2e:e2:4a:b2:
e3:07:cb:1e:79:ab:fd:2c:3f:cd:5b:05:df:b7:2b:
2b:cc:0b:98:e7:2e:2c:76:59:a3:e9:62:92:d9:d4:
e1:45:9e:c3:1d:fb:cc:13:0e:9b:ee:8f:01:d0:f7:
6a:1b:81:d2:3c:2a:a7:0e:a8:3b:91:5c:78:a7:02:
a1:e4:da:ea:e0:fa:08:73:01:59:c8:8f:a8:06:ba:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:82:F9:F9:DB:56:6C:36:D6:7B:E9:C5:E0:AA:34:BE:42:EF:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DiC-fnbVmw21nvpxeCqNL5C748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:2f:52:ee:32:2f:39:19:c8:c2:0f:c8:38:27:1c:67:fc:22:
85:c3:6c:05:de:e5:4b:7e:aa:a3:f9:c2:57:b8:8c:9d:3b:b2:
f7:52:9c:9a:f8:11:ec:dc:92:99:06:da:d5:63:04:78:a1:e1:
70:93:7a:53:fc:92:12:9c:2d:75:c7:44:b1:43:bd:2b:55:f1:
e1:7f:20:fc:f9:e3:6d:1c:2a:07:1f:55:c1:06:09:c8:cf:68:
9f:f0:f1:7a:ac:f8:34:5b:a8:1a:d5:f8:0d:4c:a8:89:79:03:
e1:3c:39:ba:f7:32:f6:ae:02:96:6c:18:1f:b8:d1:2d:f4:ae:
81:c5:8d:a9:7e:dc:f2:cd:37:40:ac:81:65:92:9b:78:2d:8d:
8c:e6:b0:1d:a7:24:05:55:81:49:12:3a:b7:1d:97:25:b4:ab:
2f:19:54:ec:74:af:28:eb:51:c5:fc:5b:26:2d:18:f9:6d:88:
53:7a:62:62:bf:a1:73:b8:17:2e:88:0c:e5:a0:e3:9a:ae:c5:
0e:e1:9b:26:da:16:40:b2:99:53:03:f4:57:ea:cb:fc:dd:f2:
8e:31:35:e9:5f:3d:57:c8:51:9f:30:4a:01:88:30:6e:4f:cd:
7c:f7:c1:90:00:80:a4:1e:e7:0c:7b:4c:60:72:91:53:3c:ff:
e8:3e:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:44 2025 by rpki-client