Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fTjAQxBMc35vLlD-4g1MSn2v-co.roa
File: fTjAQxBMc35vLlD-4g1MSn2v-co.roa (raw, json)
Hash identifier: H/t4xMOAmAVsNqRkbm6zc/NDMzunTawh9i6w1DybyQk=
Subject key identifier: 7D:38:C0:43:10:4C:73:7E:6F:2E:50:FE:E2:0D:4C:4A:7D:AF:F9:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4A6774C77837987AEA75441ACF843CB2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fTjAQxBMc35vLlD-4g1MSn2v-co.roa
Signing time: Fri 20 Oct 2023 00:06:15 +0000
ROA not before: Fri 20 Oct 2023 00:06:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:4a66:9bc1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4a:67:74:c7:78:37:98:7a:ea:75:44:1a:cf:84:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 00:06:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d38c043104c737e6f2e50fee20d4c4a7daff9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:0c:58:19:0b:51:1e:4c:81:41:b4:87:e9:
ae:71:b7:af:16:82:79:ff:18:0b:ce:41:09:4c:72:
57:cd:72:07:41:0b:d2:6c:1b:52:d4:9a:26:32:24:
b9:77:52:f2:4d:91:e5:2d:2a:d7:62:cb:10:7d:c3:
5d:da:14:24:0f:4c:d5:09:6f:ed:86:3d:0d:40:e6:
84:cc:5d:02:ab:cc:ee:5e:b7:48:1e:7b:72:39:35:
22:7f:1d:a6:8f:f6:6d:97:22:2c:2d:26:19:28:49:
61:80:0c:a4:a8:ac:80:c4:ad:87:c0:a6:72:a0:35:
ba:19:ba:f0:48:7c:2c:e1:0d:75:6d:ae:25:58:18:
8c:ae:84:23:39:2c:ea:66:78:c9:96:d8:2e:20:1e:
d9:49:a5:e5:c5:08:4d:11:1c:d3:0c:f5:2f:bb:8e:
ee:f8:0d:ff:9f:db:20:0e:9a:64:ad:42:6f:e4:ac:
da:b8:b6:52:f3:d8:2b:ee:6a:3d:cc:4a:ff:5a:ae:
9a:a8:fb:41:4b:d2:5c:73:30:29:64:35:70:db:6c:
a0:f4:f6:b1:34:0c:ee:f4:6a:94:a0:0f:57:c8:88:
be:2b:12:5f:fc:e8:cd:dd:c5:51:f8:3d:eb:2f:75:
9d:a9:70:c6:f3:5a:1e:9d:88:c1:4c:b6:44:7c:14:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:C0:43:10:4C:73:7E:6F:2E:50:FE:E2:0D:4C:4A:7D:AF:F9:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fTjAQxBMc35vLlD-4g1MSn2v-co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:17:1f:bb:f5:87:8b:f7:7a:a8:a4:7a:ff:c8:45:af:ba:cc:
ad:cf:40:b4:a1:52:85:f3:81:a8:04:83:b6:44:35:0e:9a:bb:
a8:e3:b4:1f:c6:62:25:97:c5:33:81:d7:97:7d:ec:8b:1a:87:
37:99:09:df:8b:b1:90:9e:87:6a:2c:5b:f3:9c:26:70:cb:ce:
5a:f5:2c:39:60:71:36:d9:a7:7c:0c:15:e6:f8:60:5f:e4:9f:
74:9b:42:a9:68:1c:a1:08:ba:59:9a:5d:0d:d6:21:fd:7f:ec:
f1:8a:e3:3f:5b:fc:31:ea:35:3c:f4:db:d9:00:af:86:6f:64:
41:56:89:68:c3:d4:a2:57:64:b5:18:91:68:12:f5:74:88:1c:
ac:72:9e:f6:0e:4e:8a:04:6f:a2:07:13:28:93:70:34:4a:18:
08:97:38:32:40:29:f3:c8:b4:6a:78:c6:5a:40:8a:c6:00:b8:
e6:74:be:98:7b:2f:a4:22:ec:f2:6f:59:61:4d:d4:51:b0:f2:
8b:cc:77:77:81:5b:91:83:a9:17:a8:67:56:7c:c2:67:ee:41:
a3:1c:01:d9:85:b7:30:0b:2a:87:e7:2b:14:85:15:58:0f:4f:
20:13:80:db:20:5d:43:3d:2e:e4:3d:07:4f:9d:f1:9d:b0:2e:
28:23:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:23:40 2025 by rpki-client