Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MUvb27ebswribDjVdqIWjQTNH4.roa
File: 7MUvb27ebswribDjVdqIWjQTNH4.roa (raw, json)
Hash identifier: Kp2IM8CnZ0f2/86ETuk9qqFV1KS5xcfYhc2OLp+Mmmo=
Subject key identifier: EC:C5:2F:6F:6E:DE:6E:CC:2B:89:B0:E3:55:DA:88:5A:34:13:34:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAAFB4D716219B617CD0993C92CBD6E49
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MUvb27ebswribDjVdqIWjQTNH4.roa
Signing time: Tue 07 Nov 2023 18:11:17 +0000
ROA not before: Tue 07 Nov 2023 18:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:fb:4d:71:62:19:b6:17:cd:09:93:c9:2c:bd:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 18:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc52f6f6ede6ecc2b89b0e355da885a3413347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:53:83:3c:56:7d:93:64:a1:54:94:c1:53:
4e:19:4f:4d:0e:d6:8e:51:3b:19:e1:3e:a7:04:a9:
09:f2:fd:f9:78:96:72:95:82:35:10:a9:a8:97:1d:
13:ae:17:31:0c:e5:10:46:b2:2f:77:5c:56:fd:26:
dd:1f:dc:2d:ab:ca:a2:b6:7c:2f:54:e6:72:3a:65:
21:e6:59:52:e7:47:88:9c:b9:40:95:8a:de:90:9a:
df:b8:3e:4b:da:9f:5e:1a:f5:49:4a:3d:74:ab:c7:
c1:43:1f:4c:47:b5:29:53:2d:40:2e:5b:5e:a1:04:
ac:6f:a4:ab:f3:dd:07:10:c7:0b:cc:dd:d8:40:c2:
fa:a4:10:3e:ca:7c:f6:35:0f:dc:3e:1e:b3:13:ec:
b3:24:f2:74:ba:49:f2:28:32:3f:17:df:a1:69:16:
08:7b:87:f3:96:d7:47:e4:24:4b:42:77:53:d1:d1:
5d:c5:a2:94:fb:49:47:28:9f:59:5d:9f:40:f8:33:
b1:b9:20:12:6f:1c:2a:fb:2c:a2:c5:8b:8d:d4:db:
b7:86:b2:f4:2f:ef:b1:00:f8:79:20:1f:fb:20:ea:
bc:d2:4d:0c:4b:9f:76:18:00:ce:0d:9e:d3:83:35:
64:74:43:4e:b6:84:b4:6f:d1:47:0b:67:a2:ef:b4:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:2F:6F:6E:DE:6E:CC:2B:89:B0:E3:55:DA:88:5A:34:13:34:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MUvb27ebswribDjVdqIWjQTNH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:28:e9:db:70:43:1e:74:6b:fd:7e:d1:fa:2c:bf:19:10:60:
b7:5c:b7:d5:3f:cf:5d:f3:ea:1f:73:51:55:20:5b:45:5c:da:
e2:74:18:fc:87:b3:ea:4c:8b:48:b9:02:43:42:11:d9:43:b6:
9b:03:40:af:f0:30:bf:8f:1e:10:bc:b7:24:ce:35:c8:35:94:
d7:9c:a8:e3:f3:cf:ef:8e:ae:a7:87:16:98:42:bb:87:3e:96:
42:90:8c:44:62:fb:90:c7:1b:a8:60:4f:9b:1f:b9:dc:79:65:
a4:29:a0:0b:c0:c2:a8:e1:97:7c:03:af:3b:c4:98:f2:3d:10:
ea:7c:2b:a7:72:e5:03:a7:6d:e7:ef:91:9e:28:ae:ed:b0:ba:
05:c3:2b:77:b9:dd:16:96:f3:39:6b:c2:92:5e:9d:e1:5f:50:
79:4b:d5:6d:85:ee:45:6d:75:c1:7a:81:41:a4:59:5d:a9:83:
d8:0b:f3:e8:46:48:95:a2:1c:5a:67:0e:67:de:8c:15:a3:cc:
d1:e2:93:a5:c7:0c:dd:a0:bc:f0:a7:ff:7a:7a:b4:dc:0a:6e:
ba:65:aa:d0:6a:89:4c:60:1b:cb:bf:fa:29:38:47:d5:df:a9:
cf:4f:76:03:9f:3b:0a:9e:6a:fe:5f:b3:8a:dd:29:d6:13:c3:
22:bd:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:47 2025 by rpki-client