Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EDjBnBfSSAztBibOuyGIkXd5bdk.roa
File: EDjBnBfSSAztBibOuyGIkXd5bdk.roa (raw, json)
Hash identifier: NKlz0vGZqBaFWG2DjFgDL7xDwkkL0+mh49cPGHlR2Eo=
Subject key identifier: 10:38:C1:9C:17:D2:48:0C:ED:06:26:CE:BB:21:88:91:77:79:6D:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE3D6694C9A47919D6C4257268A211E52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EDjBnBfSSAztBibOuyGIkXd5bdk.roa
Signing time: Sat 18 Nov 2023 19:09:21 +0000
ROA not before: Sat 18 Nov 2023 19:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e3:d6:69:4c:9a:47:91:9d:6c:42:57:26:8a:21:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 19:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1038c19c17d2480ced0626cebb21889177796dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:6a:fd:1d:de:c4:b6:a2:b0:d0:83:c2:5c:
f3:f9:38:dc:ff:27:f9:ca:90:02:55:4f:6b:74:ed:
f3:03:4a:4b:fe:2f:bf:c7:45:e9:38:e4:e4:9f:e4:
91:82:f7:ee:9a:d6:bf:7c:7f:60:f2:b0:28:7f:47:
1a:2d:f5:d9:b9:6e:6e:0c:33:45:df:69:ad:74:57:
13:fd:91:0a:6c:9d:2b:c2:49:1c:3e:59:b7:1e:57:
a9:5e:5f:da:89:fa:f2:f8:89:c9:67:43:08:6d:76:
06:28:a5:10:f3:5c:cc:73:84:90:eb:5f:c5:72:3e:
14:06:1b:cb:90:b0:7c:39:a2:cf:0c:b6:d8:aa:31:
c7:4a:ea:52:8d:dc:31:68:e5:2e:28:b4:40:0d:58:
36:2b:74:1d:b5:02:8e:84:cc:82:2b:5a:b4:d7:3a:
32:59:b8:7b:a2:2e:d3:65:49:ce:27:10:2a:3e:24:
0f:2a:a6:a3:47:8e:b4:4e:f1:3b:2f:5d:f2:8e:32:
f5:7d:5e:9e:a0:5c:50:04:a1:75:fe:13:3a:47:10:
27:ae:20:ef:fc:92:ec:6d:83:70:90:9f:05:e5:e6:
69:8b:da:95:3b:e1:d6:07:bc:57:d6:16:3a:5e:3b:
ce:f9:59:2b:c2:b6:ac:63:43:bf:ab:53:6d:a1:55:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:C1:9C:17:D2:48:0C:ED:06:26:CE:BB:21:88:91:77:79:6D:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EDjBnBfSSAztBibOuyGIkXd5bdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:05:ec:bd:b8:99:82:7f:5e:52:5c:8f:67:d2:71:ec:63:46:
ef:24:52:f0:42:38:35:19:68:7d:a1:c8:c9:e2:73:0e:1e:44:
75:df:ac:b9:0c:dc:17:61:e8:03:1c:92:13:c0:39:3b:a3:84:
bb:43:25:63:4d:91:6a:6c:03:0e:eb:87:b9:87:9f:91:71:f2:
6c:f3:49:fe:60:38:be:52:c8:37:49:d4:f9:3c:34:25:06:49:
4c:8e:a1:a1:e2:75:34:94:79:5c:24:ea:14:e9:89:19:59:30:
68:0c:9d:6d:6f:df:e8:cd:8e:d8:11:0c:c2:4b:54:0d:68:42:
f3:f4:6d:2f:28:f4:31:b9:92:46:55:3e:49:ea:9e:77:ab:9b:
bc:71:b8:7e:7c:aa:d7:8b:ef:71:64:41:ad:ff:f3:43:1d:53:
db:a1:78:cc:c0:b5:86:db:55:4c:7e:c2:2d:2a:e2:09:22:0f:
57:a8:3e:c4:c8:8a:aa:08:83:c1:f0:f2:fd:20:65:fd:3a:57:
c1:da:85:db:81:47:75:2f:8c:ec:86:13:db:96:b3:b2:bc:49:
e8:6b:4d:ef:9d:a0:94:7f:99:3f:c6:7d:9d:56:71:7e:5a:91:
99:03:6f:6d:7e:8d:50:80:ff:31:86:b7:db:07:f0:96:44:79:
dd:d1:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:41 2025 by rpki-client