Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBH6jw0bDPo64qGCPlHlRIGy18E.roa
File: EBH6jw0bDPo64qGCPlHlRIGy18E.roa (raw, json)
Hash identifier: 460Lg7oh1ZstcAF4Hsz6zI8XUkh56z8zWFMUbA74pq0=
Subject key identifier: 10:11:FA:8F:0D:1B:0C:FA:3A:E2:A1:82:3E:51:E5:44:81:B2:D7:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C796B06804EA8F936AB1247A13952A6FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBH6jw0bDPo64qGCPlHlRIGy18E.roa
Signing time: Sun 17 Dec 2023 20:15:06 +0000
ROA not before: Sun 17 Dec 2023 20:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:6b:06:80:4e:a8:f9:36:ab:12:47:a1:39:52:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 20:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1011fa8f0d1b0cfa3ae2a1823e51e54481b2d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:96:e3:69:44:5b:92:a1:94:ed:31:7d:ac:
cb:55:49:6c:1d:dd:53:84:ac:08:73:68:ec:91:6b:
75:b0:dd:e0:0f:8e:53:56:72:18:d6:8f:0b:5e:b3:
dd:2a:2c:bf:cc:8b:ab:a2:8a:f9:fd:2c:8f:24:3b:
fd:6f:c6:a1:31:12:8b:9b:69:a8:29:a0:97:08:c7:
41:d7:e2:30:b1:a1:a5:a3:30:95:56:c1:ff:06:bb:
c7:f8:86:37:84:99:1f:ab:2b:16:35:5b:fc:55:bd:
98:1f:36:43:36:a3:b8:c4:35:2d:51:e0:bd:b9:fa:
77:2d:5b:7e:c0:ea:47:ad:4a:c7:d0:26:fc:8b:aa:
b5:c3:58:c2:dd:8c:79:a0:04:5d:b1:ad:56:eb:3b:
28:ed:b0:da:9c:5f:57:d4:87:0f:4f:2b:08:ea:b7:
8b:f0:84:9c:64:ce:46:cb:02:2d:5e:58:28:d0:0f:
68:03:80:f7:ce:90:7d:90:7a:2d:d7:41:bf:f0:6f:
af:86:a9:d5:b6:ea:29:c5:da:79:3d:b7:57:ae:a2:
25:2f:4e:54:0b:36:51:f0:d2:20:c2:08:eb:41:85:
28:a7:04:5c:e9:4c:0a:11:bc:f3:99:bb:d9:a3:42:
6e:43:90:b9:35:79:74:2e:fd:dd:d0:df:69:fb:bc:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:FA:8F:0D:1B:0C:FA:3A:E2:A1:82:3E:51:E5:44:81:B2:D7:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBH6jw0bDPo64qGCPlHlRIGy18E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:d1:ee:df:1c:1f:ec:c4:79:6c:4d:a4:41:9a:7b:f3:f3:99:
b2:1a:c1:01:a1:3c:0d:73:ec:99:37:0d:27:9b:da:5c:ee:bc:
ec:fb:40:d2:6d:7c:e2:ad:ca:07:54:3e:2e:e1:51:db:00:8d:
20:ce:0f:a6:81:90:e8:27:50:96:17:d6:17:77:38:43:be:2d:
b0:49:dc:89:34:bc:32:b4:40:df:e4:80:33:b0:b6:a3:7e:42:
1f:c2:08:07:34:38:f9:f2:19:d5:a1:d2:0e:a4:97:09:74:58:
86:78:7c:e8:88:22:04:03:f2:c0:cd:82:53:4e:47:08:54:ec:
da:e4:9a:b2:9e:50:e0:09:8f:3e:a5:4f:d8:a4:a7:b2:73:e1:
a7:a9:8f:c4:ee:90:a3:41:f1:f1:f3:00:bd:32:c5:ab:d1:a3:
4f:e2:d6:e1:1b:c5:0f:09:89:0c:b3:21:f9:a6:22:cb:ef:95:
41:b5:9e:28:b2:34:48:8e:25:c5:e8:30:85:0d:2e:f7:a6:48:
93:d3:7d:34:9e:62:29:a8:a5:47:7a:fd:f5:ed:45:b0:87:18:
23:21:21:48:9c:ba:0c:92:70:f6:be:0a:d2:17:03:61:97:c3:
30:33:7f:dc:74:ff:20:86:af:94:04:1b:9b:cd:c8:7c:dc:a1:
2f:f0:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:15 2025 by rpki-client