Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EG6EP-SgaS1LkBAqYRR6z0TFLFA.roa
File: EG6EP-SgaS1LkBAqYRR6z0TFLFA.roa (raw, json)
Hash identifier: ydfqP0+a3oDOkC3/T23pRl8CG1/cjxE49rPmj0gGAeY=
Subject key identifier: 10:6E:84:3F:E4:A0:69:2D:4B:90:10:2A:61:14:7A:CF:44:C5:2C:50
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1D51B9AF2246C06F42B78CDB0A8C4B60
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EG6EP-SgaS1LkBAqYRR6z0TFLFA.roa
Signing time: Thu 18 Jan 2024 16:05:11 +0000
ROA not before: Thu 18 Jan 2024 16:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:1d50:f037/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:51:b9:af:22:46:c0:6f:42:b7:8c:db:0a:8c:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 16:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106e843fe4a0692d4b90102a61147acf44c52c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:28:66:3b:da:90:0b:d2:53:40:ed:08:db:
71:b4:5e:22:3b:86:99:84:8a:d4:38:81:07:9a:da:
31:7c:de:60:c4:6f:2f:a5:c1:42:bd:fa:13:3f:71:
94:05:cb:74:20:e0:a9:cb:00:d7:77:8c:17:37:e2:
dd:03:36:ce:1e:69:37:0f:25:18:5d:58:c1:d2:33:
f7:6d:64:fb:64:54:01:1f:63:41:5a:aa:87:0a:d7:
22:3c:12:65:91:33:71:c3:e3:5c:9e:e2:07:7a:fd:
c4:01:db:a1:7a:c5:61:18:3a:d1:c0:41:0c:4f:ce:
54:b1:4d:c7:62:d3:33:a8:ad:a1:4d:4c:46:fd:5a:
2c:fb:ab:6d:b2:da:3d:28:2f:99:10:40:bd:bb:d0:
47:c6:3a:1f:c1:b0:25:48:74:20:da:a3:57:cc:46:
cd:6e:26:18:f9:3e:64:63:0c:56:7c:38:75:8d:28:
20:64:61:a9:a5:b4:41:8e:a6:c8:7c:ad:dc:a6:0f:
98:1f:58:d9:3b:8e:da:6a:db:3e:a5:d4:bd:9d:22:
0c:ca:1a:7b:c1:86:fe:3d:dd:7b:55:14:c3:15:46:
30:a7:d1:9b:fd:19:15:3e:0b:4b:5b:59:8e:4d:32:
fc:27:d8:3e:b6:17:4c:ff:5d:94:02:5d:39:c3:8e:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:84:3F:E4:A0:69:2D:4B:90:10:2A:61:14:7A:CF:44:C5:2C:50
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EG6EP-SgaS1LkBAqYRR6z0TFLFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:7a:57:f9:c2:ae:93:31:a1:dd:9d:4d:d4:5d:62:e8:8d:b7:
3c:c1:01:c1:16:2b:dd:4a:56:71:ba:6a:ed:63:ef:7a:ad:e9:
75:88:d2:27:27:62:80:93:02:be:11:68:1d:85:4b:f9:3b:56:
78:b2:c1:63:78:f3:63:c9:ec:38:88:4f:70:c1:7c:04:77:93:
df:04:01:ee:67:98:98:d7:bb:c4:c5:30:2f:5c:45:29:e9:6f:
bd:d1:fb:75:99:0e:8d:4a:22:2e:d1:cc:59:ee:b0:dc:a7:c5:
f1:3a:52:f6:71:2e:8e:28:99:94:eb:a3:57:b7:67:f9:ed:ee:
f9:9a:5b:ef:4c:d1:94:32:31:aa:5d:a9:f2:cc:ac:22:8a:58:
a8:63:91:72:14:18:6e:56:a6:32:cb:37:b4:f3:a1:3f:7d:a5:
36:c3:90:53:5c:e7:4b:2f:c0:00:14:30:32:08:96:d5:9c:87:
85:13:26:44:ac:8e:04:4c:af:96:9c:35:e0:7d:db:44:d4:e0:
7f:53:5f:5f:02:84:1f:c4:f0:c9:61:12:ba:d3:98:e4:d2:a4:
d4:75:dd:39:6e:1b:e9:94:a6:22:96:51:2c:f5:df:18:c4:23:
70:23:5d:bc:8a:a7:a8:03:71:f9:a1:ee:22:e1:51:bd:b3:b6:
c1:3b:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:25 2025 by rpki-client