Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYwnhCj6N4pLbsXMnjlTXjJki7w.roa
File: EYwnhCj6N4pLbsXMnjlTXjJki7w.roa (raw, json)
Hash identifier: E+0rt81Eh42QCNmGzz5LZ/Ic/O8myaS4QdAcrkcfxbE=
Subject key identifier: 11:8C:27:84:28:FA:37:8A:4B:6E:C5:CC:9E:39:53:5E:32:64:8B:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACED72A28C1CA93F5D327B5C95D934426
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYwnhCj6N4pLbsXMnjlTXjJki7w.roa
Signing time: Tue 26 Sep 2023 00:15:22 +0000
ROA not before: Tue 26 Sep 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ce:d7:2a:28:c1:ca:93:f5:d3:27:b5:c9:5d:93:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=118c278428fa378a4b6ec5cc9e39535e32648bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:6d:9a:cd:69:8f:3b:07:39:20:29:92:a0:
22:dc:33:96:e2:be:90:d2:c3:b6:8d:24:b6:81:b1:
92:de:00:ba:9d:da:f5:85:24:e6:e4:10:2c:c8:3c:
d7:23:fe:37:ab:66:aa:96:0c:4b:04:f3:12:c6:49:
cd:00:ac:13:e7:f8:31:86:41:6e:4d:77:12:83:b3:
fd:65:d6:6d:1c:01:d7:51:54:6e:4e:c8:46:e7:9d:
b8:e4:c2:89:c9:ac:4d:bd:69:b8:a0:7e:ea:5c:f8:
cd:8f:33:6c:ae:6a:e4:2b:5e:97:08:0d:77:21:50:
3e:ff:aa:b9:ef:6b:9c:38:44:d2:88:7e:4d:78:c1:
18:01:1d:ca:b0:21:8f:e9:3f:fe:35:7f:a1:3d:2a:
47:5e:36:be:18:d6:d0:99:95:9c:d4:80:a4:87:45:
9c:de:d6:d5:a8:e2:a4:74:bc:b9:cd:a5:22:e3:0c:
5f:6d:18:65:0a:ba:0b:bd:9f:f9:30:81:25:0b:b1:
c3:68:5e:9a:40:e2:24:62:1d:c3:34:bd:78:26:7a:
65:09:8a:7b:e0:5c:4a:51:3c:88:9b:e3:20:24:76:
b7:05:ed:3c:5b:32:06:e6:f9:b5:1e:c4:cd:04:13:
e4:ca:64:6e:50:a0:f2:4b:6c:ea:6e:4a:9f:0d:41:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:27:84:28:FA:37:8A:4B:6E:C5:CC:9E:39:53:5E:32:64:8B:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYwnhCj6N4pLbsXMnjlTXjJki7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:df:29:3b:4f:3d:51:3d:13:6a:f8:88:4d:7d:20:ed:d3:b7:
a2:25:5c:ff:e3:62:82:a5:99:7c:76:98:0f:54:38:c4:fb:4e:
22:a3:dd:6d:5f:23:6b:b5:3c:0e:54:b0:a3:67:ae:bc:0c:09:
ae:69:10:7a:4f:09:64:ba:43:50:21:3f:23:91:1b:2a:9f:6a:
1a:dd:4a:2e:26:52:b0:f7:36:9e:4d:0f:1f:df:bc:70:07:5b:
a2:ef:35:45:a1:0e:4d:f4:48:b7:be:6d:8f:2e:d1:08:b6:21:
6a:ad:e9:34:8b:17:41:96:e8:34:ee:5c:97:08:da:50:c5:f4:
83:a1:f2:e8:d7:16:96:da:3c:f8:76:97:01:95:12:a0:1e:5a:
27:57:31:25:ad:ea:83:ee:4f:2c:29:67:40:63:41:91:32:a6:
f1:f1:62:48:0b:3b:7b:fd:f8:79:27:7c:78:6d:08:97:7c:53:
06:e9:4c:9a:9d:de:2d:40:08:62:3b:21:70:7d:72:9f:c0:f3:
30:52:ac:0b:e5:c3:e0:ac:a7:b3:1d:cd:0b:50:8c:2a:9d:d0:
a5:a7:43:b3:49:5b:06:9f:49:17:ac:a3:87:b6:54:91:76:14:
59:88:36:3b:c7:13:8d:f7:d7:00:3d:6a:f5:6e:b3:51:79:7d:
4f:46:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:16 2025 by rpki-client