Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EIFZFDIj36l02ryIjDc6c6B2sJs.roa
File: EIFZFDIj36l02ryIjDc6c6B2sJs.roa (raw, json)
Hash identifier: TErlodIO0zB575f5lCdkskzugB+VWlimxaJbm8CojJc=
Subject key identifier: 10:81:59:14:32:23:DF:A9:74:DA:BC:88:8C:37:3A:73:A0:76:B0:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8506C8D4AFC52F8D561A11F82BB75CCF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EIFZFDIj36l02ryIjDc6c6B2sJs.roa
Signing time: Tue 31 Oct 2023 09:18:16 +0000
ROA not before: Tue 31 Oct 2023 09:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:06:c8:d4:af:c5:2f:8d:56:1a:11:f8:2b:b7:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 09:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=108159143223dfa974dabc888c373a73a076b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:de:ff:9c:49:91:33:4e:79:59:d4:73:e0:
16:0f:7b:8d:4d:a5:2c:b7:af:7d:39:25:49:85:56:
45:96:b7:19:92:59:84:72:d4:26:3f:d8:05:43:27:
42:1d:c8:34:01:01:3c:88:f5:9b:b1:fa:93:7e:63:
c7:a6:85:ad:d2:87:9a:ec:f9:ad:20:ae:3c:3e:90:
4f:8c:d6:9c:cd:07:7c:c7:57:26:8c:75:48:97:05:
2a:62:bb:45:87:3b:20:3c:c0:b1:ab:a1:c4:2f:5f:
6f:45:c1:16:a9:a2:b0:40:9d:30:12:df:f7:e4:7b:
a7:81:b6:1e:8f:25:67:87:2e:fc:96:f1:14:e6:a0:
74:c6:ec:ee:3d:84:44:a3:d5:bc:5e:c3:85:da:59:
6a:16:38:ee:07:46:5c:04:42:b3:ed:55:fa:d8:59:
72:b4:e6:5b:53:df:06:87:11:d7:e1:aa:03:ee:f4:
44:5e:27:27:ce:ff:c7:6b:28:2f:ca:8e:75:fe:d7:
f2:bc:1f:f5:6f:a5:ab:f9:fd:8f:df:dc:59:42:7a:
eb:98:f5:2b:b4:01:60:8e:45:00:55:73:2f:57:c4:
4c:37:54:57:75:d9:f4:62:8b:92:ea:7f:e8:03:9b:
d6:1a:c1:e1:76:60:bb:42:ac:99:86:9d:4e:ae:66:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:59:14:32:23:DF:A9:74:DA:BC:88:8C:37:3A:73:A0:76:B0:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EIFZFDIj36l02ryIjDc6c6B2sJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:01:7f:dd:89:2e:9b:52:04:70:4f:31:61:de:49:d5:a6:32:
34:a5:1b:74:c7:a1:27:c5:3b:e8:d3:1b:3e:6a:93:ff:69:63:
ab:d7:d0:40:d2:c9:4d:b0:4a:a4:97:4c:2c:a5:01:8c:84:02:
bd:ef:c4:5d:0f:e8:23:fe:14:f2:91:37:0f:9a:07:9a:3c:be:
ee:26:15:70:bc:28:8c:57:85:c2:c1:70:76:37:d0:7c:98:a5:
28:d4:9d:2c:ce:65:e5:12:88:f2:1a:5c:ea:1e:a4:d9:ff:67:
44:41:42:34:b4:05:8a:76:37:23:f4:81:9d:10:3e:76:59:65:
62:c2:99:d5:9d:5e:4d:2c:fb:5d:1a:b0:27:4b:24:65:19:c9:
17:df:e5:63:fd:4d:b3:65:7d:87:2e:f3:14:28:e3:c2:a2:a8:
cb:11:d8:63:10:6a:bf:46:fb:6d:7d:ba:ce:8b:60:7e:af:bf:
d5:a2:82:74:ca:c7:3e:74:8b:aa:fc:f8:8e:e9:e2:31:5d:3a:
01:4e:1f:9f:f1:03:51:91:28:23:6e:29:77:46:68:a1:4a:d9:
70:02:ad:d0:99:fd:3b:7f:e9:ab:a0:02:e7:64:1a:7c:c8:4f:
8c:78:d7:9f:93:ad:34:71:19:bd:d9:bf:c6:3b:7e:01:04:28:
9c:ce:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:19:08 2025 by rpki-client