Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-FdYCMYW0gF2cRzYy_BqF5dv-M.roa
File: L-FdYCMYW0gF2cRzYy_BqF5dv-M.roa (raw, json)
Hash identifier: Fgdw12TPmHNtTLZlx1nDP/Fvo5xQlA0nByCzFwbJDTs=
Subject key identifier: 2F:E1:5D:60:23:18:5B:48:05:D9:C4:73:63:2F:C1:A8:5E:5D:BF:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C325BBBD7ADC9C882460A744E7D302FAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-FdYCMYW0gF2cRzYy_BqF5dv-M.roa
Signing time: Mon 04 Dec 2023 01:05:21 +0000
ROA not before: Mon 04 Dec 2023 01:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:325a:d602/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:5b:bb:d7:ad:c9:c8:82:46:0a:74:4e:7d:30:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 01:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe15d6023185b4805d9c473632fc1a85e5dbfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:70:9c:bc:d1:fe:59:66:a1:25:11:74:a7:
5e:3a:8a:56:17:14:70:ed:7b:7c:b3:17:5f:3a:6a:
fe:a0:a0:ea:06:4d:67:db:72:5a:83:50:b8:59:69:
07:86:c1:cb:b5:ee:2b:02:5b:29:ed:d5:56:7c:c0:
49:f2:37:fe:e8:24:bf:9d:36:72:1d:0b:83:d2:d6:
c6:b3:a8:b8:ce:51:fd:36:73:9e:04:5b:74:b6:d5:
16:3b:b9:ed:1c:72:b2:4f:67:bc:f5:b7:e6:68:ca:
37:1c:a2:2f:f4:a3:89:d3:76:ac:3c:af:29:3f:66:
51:09:f2:36:3a:fd:9f:48:07:84:d6:a0:e8:5d:2f:
4b:f7:da:00:84:d3:76:4e:b1:6d:cd:82:07:03:08:
eb:38:44:0a:a2:7f:9c:41:2d:09:24:5e:54:ac:a4:
f3:56:8e:ef:01:56:b1:30:25:70:03:00:82:e6:a4:
15:26:a8:00:e3:75:8a:1d:a6:ea:67:b4:d7:61:a3:
81:e0:26:4c:e9:f9:b9:68:51:a5:a2:0d:d4:b0:b4:
7a:35:f6:fc:51:34:4b:8e:44:ff:67:a6:70:73:a6:
56:24:79:d5:af:fb:c8:b9:8f:88:50:60:42:9f:a8:
ab:5d:6f:c0:83:23:44:e6:24:2f:85:f9:fd:6f:7c:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:5D:60:23:18:5B:48:05:D9:C4:73:63:2F:C1:A8:5E:5D:BF:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-FdYCMYW0gF2cRzYy_BqF5dv-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:74:94:6e:c2:b3:be:f7:b2:8a:7b:96:73:eb:42:93:90:87:
c7:2f:76:45:a0:63:2f:cb:45:6b:df:32:ad:10:72:e1:f3:45:
69:fe:32:b9:95:ac:5f:6e:79:1d:f5:5b:4d:be:27:97:d8:41:
14:38:b9:6e:79:97:78:a8:f9:62:19:27:a0:29:ba:42:57:01:
08:49:68:76:a9:04:a5:d0:a9:3e:c1:29:cd:39:49:b9:82:5a:
bc:4f:45:b7:d6:aa:f8:19:46:b5:f3:f6:18:18:06:36:15:b1:
5e:f3:97:83:fd:fd:cf:b2:0e:e2:0e:b1:b3:f1:60:8d:90:7f:
45:a5:ef:1c:cc:ee:d2:9e:bd:91:a8:3d:d5:02:d4:44:71:b7:
e3:11:5a:02:83:df:20:c5:3b:5b:10:ae:6f:ce:b5:46:2c:a0:
6f:15:36:b9:32:06:1e:df:ce:eb:1b:61:7e:c3:fd:b8:b2:07:
50:6f:01:84:a3:08:75:dd:3d:e9:08:9c:aa:fd:14:58:3c:70:
9a:19:e4:70:8f:37:93:27:2f:0c:8a:52:b6:02:87:c1:1b:13:
40:ea:0f:20:2e:e6:1f:66:f2:fb:30:1d:04:22:a3:da:a8:59:
d9:18:cd:88:86:55:93:5b:72:b1:8b:59:9e:fb:3d:d9:30:bd:
81:34:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:32:50 2025 by rpki-client