Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7qeXhS1acFZHLWHXNiqlzCZbxrg.roa
File: 7qeXhS1acFZHLWHXNiqlzCZbxrg.roa (raw, json)
Hash identifier: wjoyLK8GvMELV1iELbIT6Fs5PVlOFt/ZgZJKnREApNg=
Subject key identifier: EE:A7:97:85:2D:5A:70:56:47:2D:61:D7:36:2A:A5:CC:26:5B:C6:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC07027C01689C4DA575D20F6F2895462
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7qeXhS1acFZHLWHXNiqlzCZbxrg.roa
Signing time: Sat 11 Nov 2023 22:10:57 +0000
ROA not before: Sat 11 Nov 2023 22:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:70:27:c0:16:89:c4:da:57:5d:20:f6:f2:89:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 22:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea797852d5a7056472d61d7362aa5cc265bc6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:c8:92:1f:d6:bb:ae:32:fe:83:0d:ba:f3:
3f:7c:11:36:1e:20:0e:5f:ad:dc:ae:26:df:95:ae:
ca:c4:03:c1:c4:c4:2c:a8:46:f2:18:8f:87:f9:b3:
67:cd:ce:12:1c:f7:20:f3:bb:1e:94:20:55:14:2c:
eb:c4:6d:9f:aa:3a:98:38:fc:9a:33:c3:64:47:99:
06:e4:bb:c0:b9:39:80:3a:aa:6f:cd:b0:50:8b:16:
94:d6:4d:63:e2:46:90:ab:af:57:16:b9:f0:8b:74:
2a:cc:38:b3:92:d7:bb:01:e3:8e:ed:45:32:9c:0c:
87:c6:2d:0a:b6:da:59:4d:58:89:ec:a1:b0:2c:0f:
23:45:c4:6f:ae:cb:34:30:84:df:ce:5c:b3:f9:ac:
19:83:e1:b7:ba:02:94:fd:2c:f3:7a:5b:0f:13:23:
cd:9b:4d:1e:a0:a5:d9:55:20:c9:5c:01:0a:0b:4b:
d8:b7:e5:99:ab:57:95:2e:24:e0:c4:41:f4:e4:b2:
fb:75:bf:10:41:a2:bb:1a:f2:c8:fc:59:8e:65:50:
8f:47:85:e5:6e:1d:2b:8d:04:ff:dd:9b:0f:e1:df:
ca:47:74:9e:8b:db:d5:3c:12:a2:16:c0:55:46:2c:
ab:6c:c4:c7:6b:62:8e:a3:02:f5:f5:56:c0:1d:56:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:97:85:2D:5A:70:56:47:2D:61:D7:36:2A:A5:CC:26:5B:C6:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7qeXhS1acFZHLWHXNiqlzCZbxrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:37:f1:96:7e:fa:53:40:80:f0:a5:47:35:d3:9c:e6:16:6e:
b4:46:cb:10:77:9c:eb:17:b7:72:4e:de:c4:3e:35:10:b3:e0:
06:e2:8c:f9:ed:53:06:e1:05:c0:98:61:60:56:c9:a1:8f:7c:
31:b1:76:12:f2:2f:1d:3c:6f:b8:fc:7b:13:35:79:1d:5f:85:
5c:c6:b4:24:76:3a:1d:49:12:1d:62:0b:53:57:28:a2:10:cc:
f9:1e:44:3c:04:01:45:d9:52:61:9f:91:50:b6:e0:12:f8:83:
fa:62:20:1f:05:d0:a4:aa:f9:d2:70:da:e6:1f:de:44:ee:41:
a5:a6:02:8c:d4:43:80:af:1d:08:a8:00:4e:dc:69:dc:3c:f5:
74:4b:26:34:71:bf:eb:d5:0a:d5:28:0e:2a:dc:02:cb:5c:2b:
fc:e6:41:88:d7:d8:89:40:0f:19:43:30:8d:28:db:7a:db:8c:
00:28:fd:56:8e:55:49:fa:fa:4d:43:d6:24:45:52:f7:77:e3:
e2:b8:3c:d5:7c:ea:c2:ff:0e:68:e4:e4:c5:87:b4:25:7b:98:
4f:89:60:a2:5e:71:f9:4b:39:ae:b6:77:34:7f:20:50:b7:26:
22:5a:30:ba:dc:55:cb:38:09:7f:04:3b:c8:bb:1f:ca:7f:32:
91:d2:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:59:54 2025 by rpki-client