Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5EaiPKq7VsxB8gN9qEoeEP02nGY.roa
File: 5EaiPKq7VsxB8gN9qEoeEP02nGY.roa (raw, json)
Hash identifier: W+TgyYB/RNZfIKUUCBvAZFI47Ld3EqEATpmbLWghH0g=
Subject key identifier: E4:46:A2:3C:AA:BB:56:CC:41:F2:03:7D:A8:4A:1E:10:FD:36:9C:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE66D414671ECC6F28020083C744156C9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5EaiPKq7VsxB8gN9qEoeEP02nGY.roa
Signing time: Sun 19 Nov 2023 07:13:21 +0000
ROA not before: Sun 19 Nov 2023 07:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:6d:41:46:71:ec:c6:f2:80:20:08:3c:74:41:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 07:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e446a23caabb56cc41f2037da84a1e10fd369c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:54:11:59:21:20:46:ec:20:89:44:2e:fa:
6e:ba:24:66:e5:47:db:e8:77:b3:ea:d5:99:a0:fe:
06:89:e2:3b:0e:1f:27:ec:19:2d:0f:c2:e4:24:dd:
45:2b:28:0a:b2:8f:60:0b:9e:99:b0:a9:1b:17:76:
8b:44:b2:8e:f1:ee:c5:c2:cd:00:84:63:be:40:ac:
78:9b:3e:f5:f8:62:67:cd:05:86:da:ee:3e:37:21:
68:ee:69:18:ad:8c:06:1c:4d:62:51:b9:c7:ee:59:
27:27:4a:8d:c6:3b:4c:a1:9a:56:76:0d:0d:5f:44:
46:fe:9a:ff:a4:10:40:8d:d7:41:ca:b7:35:c9:a6:
63:e8:0d:72:95:9b:f8:fa:b6:41:f7:bb:af:84:c6:
4f:fd:8f:26:14:bf:dd:c4:23:f9:fa:aa:79:04:20:
81:fc:1c:3d:f3:8b:64:4d:18:70:ef:b6:9c:5c:d3:
6a:c8:1a:37:15:ec:ef:b2:2e:39:cc:02:ad:05:8d:
70:8f:64:7d:0b:80:84:bc:78:db:b2:65:6c:d2:33:
ae:8c:7d:8b:0a:3d:7a:e6:dd:a1:6d:a8:7a:c1:33:
66:a0:fd:74:cc:f1:87:05:55:a1:ad:cb:1d:0e:17:
fb:c9:e9:b4:67:e8:d9:54:29:ea:dd:32:6c:40:a9:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:A2:3C:AA:BB:56:CC:41:F2:03:7D:A8:4A:1E:10:FD:36:9C:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5EaiPKq7VsxB8gN9qEoeEP02nGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:3c:68:f7:c4:62:62:72:e2:a1:f3:5f:b4:f1:69:fa:13:b8:
05:76:2e:92:7f:cd:3d:ef:5c:44:52:f6:8c:60:6e:32:0e:c3:
cd:ff:38:d1:36:08:af:4b:ff:b2:6f:4b:15:67:f7:e8:23:fc:
f8:6a:e8:92:79:2c:be:7a:d3:1c:bd:a5:07:bc:aa:1a:69:55:
58:9d:a3:17:cf:e0:67:67:7d:4b:3b:e6:03:a8:50:db:24:8d:
c9:03:77:e0:6e:1d:9e:70:e8:70:58:82:a3:6a:8c:fb:67:cd:
f1:41:8c:a5:4e:cf:40:7b:91:b9:c8:b3:f4:b3:4f:82:14:37:
a3:9c:39:68:7a:a1:eb:52:5c:62:4b:45:cb:aa:8b:36:11:b8:
5f:12:fe:7d:e8:29:d5:66:ea:a6:7a:45:1c:2e:59:a4:9c:c0:
b3:33:59:d0:52:56:07:ab:f6:25:e2:b8:1e:ff:67:39:a9:ae:
cd:20:f6:30:85:47:3c:d4:0f:90:a3:ab:e0:68:3c:e8:22:e9:
fd:4f:8e:f7:82:71:22:44:77:67:46:20:c0:cf:b1:a8:24:3f:
a5:9f:7f:5f:6a:85:b4:d5:38:4f:0e:bf:31:08:65:9a:7f:be:
49:68:97:05:58:a6:ff:83:ad:24:58:61:58:2b:63:71:ed:74:
24:35:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:05:45 2025 by rpki-client