Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EXe5hJMYVZW5mhDwIJFiLetUpCQ.roa
File: EXe5hJMYVZW5mhDwIJFiLetUpCQ.roa (raw, json)
Hash identifier: MGAnIpCRZAjyie8MaM7c/yaLP3EkvxjIBiwBZT/1QQo=
Subject key identifier: 11:77:B9:84:93:18:55:95:B9:9A:10:F0:20:91:62:2D:EB:54:A4:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB7D7A4405F6E28EF6B200A0371759C71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EXe5hJMYVZW5mhDwIJFiLetUpCQ.roa
Signing time: Thu 21 Sep 2023 13:04:37 +0000
ROA not before: Thu 21 Sep 2023 13:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:b7d7:5a25/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:d7:a4:40:5f:6e:28:ef:6b:20:0a:03:71:75:9c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 13:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1177b98493185595b99a10f02091622deb54a424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:dd:2c:f6:3f:13:e2:13:46:2b:81:c6:4a:
09:38:c5:ce:46:ed:03:32:03:36:a6:94:01:be:8d:
17:da:9e:94:cc:f5:82:8a:39:71:27:53:9f:92:12:
8e:f1:91:0f:47:07:cb:31:25:e0:4a:54:27:08:01:
31:cc:f1:f0:c1:a8:57:e2:b0:1b:a4:b7:cc:d0:71:
9f:be:91:8e:d2:80:60:4b:7d:68:d8:e6:49:96:48:
32:ee:f0:d2:c6:10:cd:aa:b8:d8:0c:92:71:80:a8:
91:4c:60:22:60:37:37:84:68:89:59:ad:01:31:c5:
b3:50:6a:5d:0e:62:67:ec:e3:17:9d:85:4f:80:57:
5c:21:ce:16:3d:a7:dd:ea:c6:5d:de:79:10:bc:d4:
9a:ce:e4:d8:2c:91:61:38:92:d4:2b:09:18:d2:44:
cd:98:6e:7a:e0:bf:17:1f:43:e9:9e:91:7e:f9:cc:
1e:9c:07:80:86:1f:63:c6:d2:a5:d6:64:0e:3a:71:
1d:b7:ac:fb:f4:70:84:0d:93:e1:43:42:46:a5:62:
b6:d3:a4:9f:e0:54:c5:91:24:6e:62:e4:3d:1e:c4:
c9:f7:94:56:07:d6:44:d7:4c:52:83:e1:38:49:45:
74:d4:24:2e:04:94:ba:93:f7:f3:72:c6:46:70:6a:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:B9:84:93:18:55:95:B9:9A:10:F0:20:91:62:2D:EB:54:A4:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EXe5hJMYVZW5mhDwIJFiLetUpCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:b6:4e:91:b9:07:d2:ab:ec:03:65:5e:87:03:ff:d6:a9:2f:
6e:fc:cd:5e:10:be:a6:2a:1f:df:c0:e9:d6:68:0e:fd:42:9c:
dc:b4:39:98:68:60:82:c0:91:8a:20:e0:44:8f:11:b7:02:f9:
d9:f9:00:30:ee:bb:60:95:4e:53:2b:0d:1f:94:1f:10:52:2c:
69:62:99:bc:49:b2:b8:c6:86:07:1d:33:21:a0:d4:40:82:f9:
8d:47:b4:a9:96:61:f1:db:eb:9f:81:aa:b6:02:cd:4d:e1:26:
0a:29:48:3d:ae:93:2a:d9:af:14:be:95:6a:b0:7c:cd:59:29:
e4:15:63:37:a4:11:91:bc:91:69:30:97:00:ba:55:48:81:7b:
64:13:96:84:3d:7a:93:69:78:fe:a7:97:16:a3:a7:b9:70:21:
2a:61:2c:24:b4:53:47:2a:ba:0c:1e:21:44:7f:c8:c4:b6:ff:
6a:8c:80:e0:63:83:42:22:2c:d9:be:2f:41:d2:4a:0d:6c:e7:
db:b6:22:e1:a6:e4:de:0a:ef:46:1a:4a:80:51:d6:ba:7b:03:
80:bc:a6:41:ea:48:be:12:55:8b:4d:2d:d1:da:9d:72:7d:06:
3f:fb:78:8d:0a:c9:e6:33:2e:cf:d8:fd:5b:84:8f:3c:78:46:
1c:e6:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:21 2025 by rpki-client