Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FFdF5ygavSipzN0tROrmN-LBllw.roa
File: FFdF5ygavSipzN0tROrmN-LBllw.roa (raw, json)
Hash identifier: OzhFE6/LfUlc7vLi1JLMCNmakZlouzXQ3pZxAAGacEY=
Subject key identifier: 14:57:45:E7:28:1A:BD:28:A9:CC:DD:2D:44:EA:E6:37:E2:C1:96:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAB63AC6D69F815CEE2112B4E401A3C1C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FFdF5ygavSipzN0tROrmN-LBllw.roa
Signing time: Tue 07 Nov 2023 20:05:17 +0000
ROA not before: Tue 07 Nov 2023 20:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:ab62:e38d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:63:ac:6d:69:f8:15:ce:e2:11:2b:4e:40:1a:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 20:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=145745e7281abd28a9ccdd2d44eae637e2c1965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:97:fa:8a:dd:e0:de:7f:a5:00:44:a1:f4:
1f:4b:95:f5:e2:af:e1:d9:5f:26:27:cc:97:5c:9d:
9f:c8:03:1b:de:07:1e:33:3d:12:2e:e4:07:0d:9a:
cc:38:52:07:36:67:4e:87:8d:01:8f:93:6a:37:92:
9c:f9:c7:a6:77:32:d5:35:22:70:f3:5d:f5:7b:c1:
a1:0a:75:8b:04:5c:21:05:d6:12:1a:8b:a8:34:57:
01:53:06:62:cb:40:ef:d9:41:e2:9c:97:86:ef:70:
a1:51:1d:37:b6:5f:9f:f2:96:45:3f:52:bd:be:21:
67:fa:ba:1f:29:18:2d:ee:aa:ed:0a:34:05:98:a8:
4d:ec:73:23:f9:46:4b:89:81:5b:4f:9b:00:9c:22:
c6:46:13:5e:09:ad:4d:eb:ea:24:c5:94:70:42:c9:
96:fd:57:7a:fd:cd:eb:e9:fc:8d:b7:19:1c:b1:94:
92:ff:68:aa:ca:53:1f:c9:f6:2a:b2:02:ce:af:26:
6c:86:1a:97:44:a2:92:7a:68:2e:2d:55:66:ce:6d:
a5:92:3f:1d:c5:ef:89:b1:a4:3d:2c:56:17:0f:90:
b5:01:c5:b5:2d:b5:f8:67:3c:1a:ff:16:71:b9:38:
18:25:d8:72:a0:96:1c:97:a3:e0:24:28:1e:85:3d:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:45:E7:28:1A:BD:28:A9:CC:DD:2D:44:EA:E6:37:E2:C1:96:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/FFdF5ygavSipzN0tROrmN-LBllw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:97:62:4f:91:fb:29:2c:f1:2b:fe:2e:37:0c:c7:36:cc:b6:
12:f6:89:54:f7:9a:c7:e3:b9:89:7c:35:b3:85:6f:8b:fe:e2:
1f:f5:40:ae:4d:0c:04:9a:90:6e:f2:fe:6d:eb:87:5a:48:e7:
2f:3b:a2:56:6c:77:15:97:92:8d:57:7b:0a:1d:a5:66:e0:aa:
19:29:d4:14:cd:07:c6:6e:41:07:9c:f8:92:88:68:f7:9a:c3:
47:06:a1:67:c5:ad:77:31:bd:39:d8:bb:a6:81:ec:8a:33:63:
85:32:60:ce:07:7a:ba:96:89:4e:e8:d0:05:20:49:10:70:a4:
7d:3e:27:d6:56:43:82:90:ae:4e:ba:28:0a:35:36:d9:c2:08:
7a:29:75:39:1a:7d:47:19:08:e3:5a:8c:af:3a:a0:5e:98:99:
c1:fc:c6:eb:e5:a1:98:8c:b3:7f:ea:08:e6:6c:6b:17:90:9f:
f1:40:0e:4b:7b:ee:87:f8:2e:b8:fc:02:01:f4:b5:fb:4d:14:
f6:f3:13:7a:c4:eb:6f:56:f5:0d:c5:37:0c:8f:f4:e4:58:4d:
fa:16:30:24:65:09:e6:bd:1c:01:45:17:c3:ed:9d:e2:5f:c4:
b6:be:2a:7d:3c:01:ec:c3:af:8d:29:0e:09:6a:30:81:ee:bc:
c4:79:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:18:20 2025 by rpki-client