Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7A7st7KDp0_-7yo9BrgVh5DEJaQ.roa
File: 7A7st7KDp0_-7yo9BrgVh5DEJaQ.roa (raw, json)
Hash identifier: wiRjVW+uV0JX4h5XNUHyRR5Ymwsf4GfvOg3xYtZCwKk=
Subject key identifier: EC:0E:EC:B7:B2:83:A7:4F:FE:EF:2A:3D:06:B8:15:87:90:C4:25:A4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADDDB20112F432FECAF9280756A605C4B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7A7st7KDp0_-7yo9BrgVh5DEJaQ.roa
Signing time: Thu 28 Sep 2023 22:13:59 +0000
ROA not before: Thu 28 Sep 2023 22:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:db:20:11:2f:43:2f:ec:af:92:80:75:6a:60:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 22:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec0eecb7b283a74ffeef2a3d06b8158790c425a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:6d:55:c4:c6:fb:38:d8:00:df:f6:5f:72:
a9:25:e4:d1:69:dc:a9:14:b8:ec:18:23:25:02:2d:
45:0b:0e:8f:d4:5c:25:2f:18:1c:b3:5b:cb:77:e5:
4e:66:72:f1:84:fb:b3:a6:1d:61:4a:43:eb:22:70:
fb:51:fe:6d:47:5f:86:a2:04:d1:32:76:76:8c:2c:
15:8d:4b:c2:f6:5f:2b:d5:1a:da:e2:15:eb:f8:e3:
a0:d0:2c:55:ff:98:82:03:71:ab:1c:1e:0b:b2:e8:
c7:47:3e:c0:00:bc:f0:1e:fc:7d:e8:f8:d0:25:20:
5c:be:4c:a6:61:82:6f:76:08:a4:12:3f:a9:ee:a1:
1e:61:f1:7f:f4:7e:38:d1:45:29:0b:f5:a7:b5:a2:
d0:28:03:cd:cd:7f:ed:15:e3:c8:63:b6:b5:2c:d4:
85:a1:94:26:78:e1:bc:7f:c6:e5:2c:a3:29:22:c6:
04:e9:ea:f5:7b:e6:9c:c5:5c:14:be:72:59:60:96:
f2:4e:b8:9d:2b:11:b4:9e:ce:8a:72:38:5c:75:c2:
60:e7:47:c5:fa:5f:7c:af:6d:ea:ec:ed:09:77:3a:
73:b2:83:da:76:9f:29:d3:01:29:65:39:d6:59:9b:
a5:d1:3c:b4:1a:5d:c3:50:e8:77:51:a5:99:03:8d:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:EC:B7:B2:83:A7:4F:FE:EF:2A:3D:06:B8:15:87:90:C4:25:A4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7A7st7KDp0_-7yo9BrgVh5DEJaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:c4:54:f6:c5:55:a7:d9:ff:7a:8c:ca:a7:d4:83:5c:60:a0:
93:66:84:f5:45:84:64:ee:3b:52:3e:fa:75:cc:52:bf:15:0b:
6a:b4:15:ba:98:87:44:5a:fb:bf:22:ed:57:2f:aa:e2:ad:86:
c4:69:ef:e1:39:d2:e6:e0:2d:6c:e7:e5:a2:82:27:d2:45:ae:
9d:22:b5:8c:34:62:70:4f:69:0c:ec:ca:88:af:b0:fc:d8:d8:
86:87:96:ff:73:0a:f1:f7:46:56:08:b7:01:12:05:7a:c2:9d:
16:b7:6c:fb:0c:c0:62:8e:fb:60:59:28:0e:ec:f2:6d:b7:0f:
72:ef:de:f4:70:08:bb:c8:60:12:82:31:e2:a3:8f:c2:4c:a5:
a7:88:cd:78:e0:ee:e6:fd:a7:0a:5d:90:1a:78:4c:83:ea:75:
21:df:46:34:59:bf:1c:06:43:5b:ad:40:0f:e6:2a:5a:b6:72:
e0:05:84:40:70:e9:4e:3f:7d:8e:c6:ae:38:fe:98:5b:7e:de:
1a:64:0c:95:99:f6:4e:28:aa:41:11:2d:00:ee:87:78:c8:26:
f6:37:49:83:a8:5b:06:fb:81:21:59:f2:00:ce:91:cc:38:55:
22:53:bc:5f:3f:8f:58:aa:58:8e:47:c5:78:ce:3e:f8:51:d5:
28:97:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:28 2025 by rpki-client