Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfuARv52Cb_8-cl3tXcifr30_Ec.roa
File: bfuARv52Cb_8-cl3tXcifr30_Ec.roa (raw, json)
Hash identifier: R2Y+eGG2xebPbOoJA80+DYcyuGXxBLu0FREwctT01ws=
Subject key identifier: 6D:FB:80:46:FE:76:09:BF:FC:F9:C9:77:B5:77:22:7E:BD:F4:FC:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B79697A66FBF6305878C7B4A23E6704EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfuARv52Cb_8-cl3tXcifr30_Ec.roa
Signing time: Sun 29 Oct 2023 03:10:37 +0000
ROA not before: Sun 29 Oct 2023 03:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:7964:aa32/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:69:7a:66:fb:f6:30:58:78:c7:b4:a2:3e:67:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 03:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dfb8046fe7609bffcf9c977b577227ebdf4fc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:4d:e8:ad:64:28:39:7d:89:94:11:aa:21:
95:59:b6:3f:59:0f:cf:e0:33:9a:4b:88:7f:3f:dd:
b3:cc:9f:e2:94:51:55:86:8a:9d:a7:c8:db:ff:9e:
3c:f4:e2:ea:56:9c:b1:ef:56:6c:97:9e:9a:8b:c9:
f5:53:cc:e7:e3:f5:6e:a0:a9:c3:b7:da:86:69:54:
cf:06:1e:a1:71:e9:08:8e:ea:59:c0:6c:b7:55:73:
c0:86:ca:0f:00:20:30:81:e8:03:cc:46:60:2d:2d:
18:c8:8b:f2:27:ce:b5:22:29:14:fc:42:d8:fb:e7:
1b:8f:7d:ca:93:97:0a:f2:72:3e:61:6f:51:6e:6f:
8a:a7:1d:4b:59:ba:af:e0:0b:eb:f1:1e:e0:06:76:
a6:ed:79:78:c9:5d:1c:3a:34:ae:a9:90:11:1e:bd:
ca:42:4b:33:02:23:2b:4c:cf:53:9e:30:9e:62:2d:
a3:a1:4f:4a:0b:e3:16:9b:4b:1e:6e:06:57:33:1e:
49:df:88:9a:ed:57:2a:d4:2c:ba:8c:8a:4f:ef:01:
a4:ba:87:52:c3:53:60:dd:ba:0a:08:a5:55:bf:10:
c5:81:08:16:e9:82:61:77:8c:40:51:a9:bd:b7:d7:
4b:aa:51:12:90:03:1a:89:9c:66:e6:ea:1d:1a:a3:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:80:46:FE:76:09:BF:FC:F9:C9:77:B5:77:22:7E:BD:F4:FC:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bfuARv52Cb_8-cl3tXcifr30_Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:19:e5:e2:f7:39:13:4e:97:3d:c3:c2:04:0b:30:e1:1c:a5:
82:98:91:b8:2c:e7:21:21:ea:1e:09:81:56:17:e8:db:c6:67:
04:5d:20:fc:56:49:7b:97:a0:42:f6:4b:eb:85:49:44:d9:02:
3e:90:e2:5b:b8:28:9d:39:b6:be:16:6b:a4:aa:42:66:1f:04:
42:fb:b2:1b:46:4c:e0:41:58:5a:68:1b:bb:47:04:fa:7d:7f:
8c:b0:b6:2f:68:fe:6f:16:dd:0a:b1:d5:89:e0:66:45:24:d6:
ce:88:2f:05:28:4a:9e:27:40:03:b5:ec:8d:9a:12:af:ab:ae:
fe:ef:8a:76:cc:fd:f4:5e:80:92:85:cc:43:10:47:99:02:37:
80:5f:09:af:40:3f:34:47:34:4c:16:16:0e:39:68:2e:5f:a4:
7d:37:25:4d:d7:2b:76:c2:01:ba:eb:bb:0e:82:37:e1:c1:52:
c9:bc:dc:dc:2a:1c:e6:cd:5f:a8:1c:24:77:b3:f2:01:ed:89:
89:24:e6:9d:9d:3c:f1:6a:4b:6c:52:02:88:c1:5e:53:85:bc:
95:da:f3:8e:32:a7:61:71:24:c5:20:e5:2e:91:51:f3:50:d8:
02:51:e1:d0:07:4f:39:09:b2:bf:a7:37:90:b5:0f:ae:09:aa:
c3:df:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:57:04 2025 by rpki-client