Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNLFNvejP22qWHV2Z9eryjeREMY.roa
File: fNLFNvejP22qWHV2Z9eryjeREMY.roa (raw, json)
Hash identifier: d0OwTYYjJ/SsDJgp7YmO4UE6Ce1V3ZensGuknOKDjsQ=
Subject key identifier: 7C:D2:C5:36:F7:A3:3F:6D:AA:58:75:76:67:D7:AB:CA:37:91:10:C6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5337EDD1082F92E81D5C6D97A5B16349
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNLFNvejP22qWHV2Z9eryjeREMY.roa
Signing time: Sat 21 Oct 2023 17:10:55 +0000
ROA not before: Sat 21 Oct 2023 17:10:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:5331:e9e4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:37:ed:d1:08:2f:92:e8:1d:5c:6d:97:a5:b1:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 17:10:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd2c536f7a33f6daa58757667d7abca379110c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:5a:f3:b6:e2:27:cd:2c:90:f2:96:17:9e:
b4:a5:88:de:31:e3:7b:a4:f5:11:a5:dc:07:ee:76:
66:28:b4:06:8d:06:ff:25:81:1c:ed:a0:bf:33:00:
2b:d3:83:62:22:34:b7:d1:34:5a:49:d7:db:11:0a:
d9:a3:3b:53:05:9f:f8:31:46:0b:6a:97:ab:08:b9:
3e:54:93:90:37:93:8c:ff:ed:d3:19:d9:0b:c4:a9:
b2:e0:39:61:37:6b:0e:53:24:6d:1d:f2:7d:26:a4:
4b:e0:28:be:6a:9c:81:f5:31:41:5b:be:42:50:3e:
74:8c:31:16:34:35:b5:28:a1:ee:0b:28:8f:72:82:
84:d4:90:37:4e:0d:73:c4:8a:c1:90:1c:9c:bf:5e:
84:c5:be:36:48:77:ce:a0:d2:4a:d6:15:f4:cf:c1:
ba:e3:29:ff:f5:bf:0a:b8:c6:5c:c9:55:76:2d:14:
d5:93:f2:bc:ab:86:f4:e6:1d:30:24:4a:f3:89:06:
e5:50:c4:8b:82:a2:55:55:b5:c2:a5:6c:86:d3:b2:
07:56:4b:18:f4:a4:45:57:1d:93:8c:44:4e:a6:18:
2e:1a:81:85:0a:4e:cd:70:ce:40:a8:cb:cd:41:29:
af:2b:0d:a4:64:b5:f8:96:ae:5b:73:cb:94:6c:0f:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:C5:36:F7:A3:3F:6D:AA:58:75:76:67:D7:AB:CA:37:91:10:C6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fNLFNvejP22qWHV2Z9eryjeREMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:14:7b:bc:d1:f7:81:ba:56:43:30:28:35:3f:62:b5:21:83:
a9:2f:99:f5:88:28:a7:d9:b1:68:44:b8:c4:d1:43:5b:6d:58:
5e:03:ff:d0:73:f9:99:91:2a:cb:99:b2:7d:bd:48:94:87:5e:
fc:43:09:5b:c4:48:41:47:f2:1b:cf:c2:f6:86:16:da:06:17:
25:fd:da:6d:b9:50:da:0e:e4:28:95:57:74:86:a7:cc:3b:41:
36:1d:b5:f8:2e:48:98:cb:3f:02:3d:6d:4f:1d:88:8f:b4:85:
81:2f:82:e2:17:37:24:3f:45:78:57:72:61:dc:cc:7a:d2:7a:
33:0a:29:7c:a1:b0:94:7e:89:0e:93:17:cf:a7:e5:51:b7:9a:
87:37:1d:11:ce:48:fe:dc:9e:f1:42:d6:b2:a1:4f:07:38:a9:
10:73:e4:13:04:63:06:4a:70:45:d6:51:72:bd:72:cf:40:61:
c8:20:ff:9d:60:e7:44:c3:3a:e3:d2:08:37:db:2a:f2:bf:42:
fe:e5:77:f8:8a:bc:13:d7:2d:b3:39:99:f2:5a:77:9d:a7:23:
ee:a9:b9:d3:76:2f:8a:ff:63:8f:32:87:37:78:5f:6f:53:36:
7a:08:68:c8:f1:4d:48:8e:10:a8:7d:ee:85:f3:47:b0:0d:33:
b8:ed:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:33:02 2025 by rpki-client