Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Iq41N3CsaE5JnUuP1VxfGgsZeE.roa
File: 7Iq41N3CsaE5JnUuP1VxfGgsZeE.roa (raw, json)
Hash identifier: YE0wk/afVxC3+SNkrdDVnVQW09hs00O5CXPCvQ2Sl4k=
Subject key identifier: EC:8A:B8:D4:DD:C2:B1:A1:39:26:75:2E:3F:55:71:7C:68:2C:65:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE5909C25E7F378BF6A113A86EC65560A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Iq41N3CsaE5JnUuP1VxfGgsZeE.roa
Signing time: Sun 19 Nov 2023 03:12:21 +0000
ROA not before: Sun 19 Nov 2023 03:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:90:9c:25:e7:f3:78:bf:6a:11:3a:86:ec:65:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 03:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8ab8d4ddc2b1a13926752e3f55717c682c65e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:2c:70:02:ee:ed:56:59:32:c8:52:98:29:
f3:53:5a:52:d8:d1:8b:81:8a:02:bd:84:9f:b9:62:
df:34:1e:8b:74:08:41:ea:89:30:5d:e6:02:02:20:
41:28:e4:50:30:2d:ee:53:cc:3d:a5:d6:fd:23:91:
d9:5e:f6:0f:d7:98:d3:9d:be:50:34:ed:81:03:1c:
7d:6f:7e:60:0d:86:71:fa:5d:e2:18:2a:37:83:2b:
e3:8d:0d:87:66:a2:e0:05:68:7e:ba:c7:fb:52:ee:
dc:ce:a1:c3:bf:a6:18:d7:20:73:1f:85:b2:dd:96:
bb:8c:fd:97:cb:df:d5:76:6c:38:9e:35:86:8f:c6:
cb:d6:73:a6:db:92:ae:a1:de:9d:98:9a:3d:17:48:
77:00:15:6b:24:0c:e1:64:51:56:5a:80:d6:04:bb:
c2:d8:64:09:ad:8d:5e:8c:bb:74:8e:5a:61:0c:b3:
fe:21:f9:e7:96:19:1a:ac:f9:b3:7d:a9:cd:22:ef:
56:93:d2:5e:a7:4b:c7:e0:c1:da:5f:d5:54:c8:fd:
f9:18:fa:b5:52:6e:de:09:e7:d3:7b:87:cd:3c:ae:
48:fb:63:35:b8:34:38:84:e5:15:d3:bf:a9:4b:b8:
8a:53:cd:db:79:0a:ae:3c:0f:9a:e1:ac:36:bf:0e:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:B8:D4:DD:C2:B1:A1:39:26:75:2E:3F:55:71:7C:68:2C:65:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Iq41N3CsaE5JnUuP1VxfGgsZeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:16:df:22:35:08:27:ee:e9:99:31:cd:05:23:4b:1d:1e:7a:
8f:54:2b:ef:e9:4f:9e:c3:3e:43:5e:3f:c7:59:58:92:4b:a2:
3e:91:ed:9c:1f:db:80:22:dc:58:7c:5e:aa:f4:f5:99:eb:ef:
44:67:96:8e:1b:ce:88:99:5e:8d:f6:30:bf:4b:42:3c:cb:45:
e9:c1:60:4b:06:ca:2e:0b:e2:32:e5:2b:86:4c:42:ad:45:5c:
73:77:c5:96:2c:cb:5e:7b:ce:d7:4a:c2:a4:77:00:fe:05:20:
34:40:6f:63:55:c1:e4:04:9d:77:df:a6:9c:b4:8a:c4:7a:de:
19:b3:a4:ee:02:ba:fc:32:13:c5:3b:b7:df:f6:05:bf:67:61:
e5:fc:14:e7:86:89:c2:43:79:b0:43:a6:d3:9c:d8:5b:f6:ea:
2a:bb:0f:6f:6d:2e:b7:96:88:e4:9a:e4:89:aa:f8:65:3c:ad:
e5:53:e6:1d:d2:ec:1d:3f:49:7d:f3:9c:38:b7:15:d0:9f:01:
0d:f2:40:ba:c4:ed:71:3f:e4:0a:81:30:86:dc:d2:1b:a2:ce:
69:c6:a0:0e:4d:e7:40:30:3c:eb:21:5e:1e:31:4b:1e:fa:18:
d8:b1:34:e6:37:3e:c4:b9:d9:83:e5:51:7b:fc:cc:61:b7:65:
36:a9:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:07:47 2025 by rpki-client