Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edpy_z8rY0X2jk9Qejm1_5TuaMs.roa
File: Edpy_z8rY0X2jk9Qejm1_5TuaMs.roa (raw, json)
Hash identifier: L2xMRlOfQYsszq/Jyd6bhVfNUYjX0XOhTRueD2lKAXw=
Subject key identifier: 11:DA:72:FF:3F:2B:63:45:F6:8E:4F:50:7A:39:B5:FF:94:EE:68:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9E893CE9FAFC0DADE737C4C39E6416FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edpy_z8rY0X2jk9Qejm1_5TuaMs.roa
Signing time: Sun 05 Nov 2023 08:11:16 +0000
ROA not before: Sun 05 Nov 2023 08:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:89:3c:e9:fa:fc:0d:ad:e7:37:c4:c3:9e:64:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 08:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11da72ff3f2b6345f68e4f507a39b5ff94ee68cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:9a:fc:69:15:a7:ca:a4:2c:48:c7:af:12:
49:a1:08:6f:bc:c4:8f:f8:d5:45:e3:44:87:11:8c:
77:51:f1:db:e0:6a:45:be:76:b2:09:a9:25:8a:9b:
5a:b8:fe:95:97:b7:62:97:8f:11:61:95:ee:47:e5:
bf:bb:c9:e6:44:65:2d:ba:c3:fb:7e:58:76:e5:91:
50:cb:d3:3b:12:6c:69:57:c2:f4:ae:11:2e:9a:ef:
99:f2:13:01:ac:af:55:de:80:b4:af:c0:cb:94:b0:
55:94:9c:d6:7b:09:8e:de:4f:c3:f8:b6:07:61:7b:
83:a3:71:49:7c:f6:cb:df:11:83:90:d3:11:3b:7b:
9e:df:b6:98:c2:30:d6:81:94:f7:d6:37:04:aa:a3:
1f:60:d5:20:6c:1b:4b:b2:9c:d6:85:51:fb:85:73:
a7:ef:ea:31:c1:c1:af:79:8c:ce:80:c1:0f:e8:71:
29:2f:d5:6a:5a:36:42:43:5c:f0:67:3a:45:95:2b:
2c:19:f5:33:44:67:80:54:6a:63:90:10:9b:02:1e:
76:66:62:63:b0:12:2e:47:d8:bb:03:8d:56:e3:01:
c9:5e:c7:5d:15:c9:b5:12:fb:bc:a5:08:db:89:ac:
36:ea:9e:05:9a:43:78:05:e9:b0:51:ac:0b:14:8e:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:72:FF:3F:2B:63:45:F6:8E:4F:50:7A:39:B5:FF:94:EE:68:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edpy_z8rY0X2jk9Qejm1_5TuaMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:b6:c0:5b:fd:ac:8e:79:6b:84:7e:69:c4:f2:ce:74:52:ab:
52:12:00:b4:80:16:a0:2a:63:f5:0a:ca:5d:39:28:f7:f7:05:
e8:18:36:a0:c1:0e:4c:2c:c4:e1:40:07:36:2b:61:f0:d2:b0:
7c:09:5f:0b:79:26:2f:4d:fa:80:d5:2a:8d:9c:a5:86:3a:c1:
c2:5d:3b:81:e6:c1:3c:5c:5f:f8:b3:ab:e0:be:63:e1:f8:ec:
4f:82:bd:2c:b9:f6:e5:d5:cc:cb:99:6a:6f:68:0e:aa:4a:99:
1a:7b:09:a2:dc:cd:a7:01:39:d0:be:aa:17:67:30:a1:01:9e:
7b:f8:f8:ac:23:29:98:8d:6b:06:c7:0f:9c:3a:d1:ab:0b:bd:
3a:f4:66:06:67:73:bf:51:34:f2:9d:d0:6c:26:25:83:cd:c7:
b8:09:69:2c:48:03:ec:3f:30:9b:61:57:ad:fe:aa:37:70:49:
01:33:f2:76:df:c6:75:0b:c0:82:c7:fa:de:ef:75:7d:a2:a9:
da:ce:34:b8:af:6b:59:96:af:4b:1d:1b:0d:25:a6:bb:9d:b0:
75:4a:40:d4:4d:d6:3f:31:20:fc:6a:c8:f8:78:32:33:cb:e3:
4b:39:6c:35:6b:02:ac:a9:92:67:da:34:c0:d3:8e:0e:13:2d:
57:d4:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:56 2025 by rpki-client