Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eL8WlwHDSoY9GhsduWRfIzVDX4.roa
File: 2eL8WlwHDSoY9GhsduWRfIzVDX4.roa (raw, json)
Hash identifier: DAXUxbJTk2j3B6E3QGvsLE/WL7+XLBaN7ghvc+t4GkY=
Subject key identifier: D9:E2:FC:5A:5C:07:0D:2A:18:F4:68:6C:76:E5:91:7C:8C:D5:0D:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC7F2C1AEFD2F25362AA74F9A802333E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eL8WlwHDSoY9GhsduWRfIzVDX4.roa
Signing time: Mon 13 Nov 2023 09:10:57 +0000
ROA not before: Mon 13 Nov 2023 09:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:f2:c1:ae:fd:2f:25:36:2a:a7:4f:9a:80:23:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 09:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e2fc5a5c070d2a18f4686c76e5917c8cd50d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:1a:2d:b2:6c:06:dd:6f:1d:5c:df:80:70:
b4:7a:94:2b:f6:60:ba:b2:45:04:59:d9:48:69:a5:
30:17:32:58:9a:c2:b1:bb:2c:3a:9a:c6:8c:60:8d:
2c:25:6a:d5:83:0b:67:56:d8:f1:3f:3a:fc:ce:2f:
d9:42:b5:13:6a:7d:5a:79:36:ba:42:85:06:68:1d:
2f:d7:15:70:fa:5f:12:3b:04:11:08:07:6b:c5:c8:
02:25:80:50:a8:de:66:07:70:50:90:ca:3b:69:42:
45:95:a0:ce:e9:5e:3b:e7:60:20:3c:51:a1:6b:4d:
4c:9c:b3:7c:ae:c1:8c:3a:97:07:fa:8c:14:e0:a3:
da:d3:e7:61:c6:ce:94:0e:ff:84:72:ae:69:49:bd:
87:6a:77:e4:83:07:34:3f:61:2f:09:26:91:a7:5d:
ce:f6:94:56:6e:0e:4b:86:eb:d2:53:23:e5:9e:64:
f1:ac:da:a8:f9:a0:62:79:54:df:61:3e:53:a5:70:
b6:0c:80:d5:a8:9d:30:0f:12:48:24:ca:33:8c:20:
14:b0:ea:b5:44:bb:89:6d:33:3e:ae:06:01:bc:cc:
dc:92:73:08:9a:06:81:0b:3c:de:86:2b:9f:8d:c5:
0a:78:e1:c4:1d:c6:88:51:65:d3:9e:28:ac:07:8a:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:FC:5A:5C:07:0D:2A:18:F4:68:6C:76:E5:91:7C:8C:D5:0D:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eL8WlwHDSoY9GhsduWRfIzVDX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:1a:ab:5a:3c:18:cc:3b:f2:2c:a3:ce:78:f7:35:c0:52:de:
a0:26:76:c8:b4:c1:a3:0e:21:63:0a:6d:91:66:a7:87:78:18:
ff:8e:20:5e:a0:66:56:4b:9e:2c:60:51:07:ab:93:df:fd:04:
72:44:37:c6:05:d0:6a:44:93:e3:ba:26:4a:c4:60:84:51:0f:
83:39:d1:c5:4c:4c:e3:08:09:9f:d4:bd:ff:ec:fe:67:59:7f:
fa:5e:15:ce:85:ea:22:4c:d0:de:d0:2d:00:2a:fe:82:e1:93:
9d:f9:e5:8e:d3:09:03:bf:19:07:ba:2b:b2:64:97:8c:60:0b:
4d:42:45:55:6c:9e:21:1d:1d:d9:9a:10:96:89:39:0d:54:58:
4a:00:57:8f:74:c8:da:61:67:62:ed:e4:e4:bf:36:ba:3b:ee:
e0:0d:98:ab:9f:af:bb:67:62:10:1f:36:09:8b:4a:55:35:96:
62:18:9d:9a:08:1a:b7:d3:ac:2f:72:94:d2:cd:6b:86:ab:8a:
3b:80:0e:79:bb:32:b4:85:c6:ca:d7:78:43:6e:28:63:6a:35:
a5:aa:ef:c5:fb:23:a5:d3:7c:1e:aa:dc:1f:5e:15:b2:65:4c:
d5:12:b4:bc:c3:a3:8f:95:23:25:7a:a4:c3:55:84:67:5d:6b:
02:1f:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:57:42 2025 by rpki-client