Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EgtWfCyKFWJASnLkrywARZleM0o.roa
File: EgtWfCyKFWJASnLkrywARZleM0o.roa (raw, json)
Hash identifier: UPnZlYIRyFjj/aVmRLZGsud8V0IuZUWvbeKvU86qOK0=
Subject key identifier: 12:0B:56:7C:2C:8A:15:62:40:4A:72:E4:AF:2C:00:45:99:5E:33:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD2088B82ABDA2314995BB1E46A4CB379
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EgtWfCyKFWJASnLkrywARZleM0o.roa
Signing time: Wed 15 Nov 2023 08:10:57 +0000
ROA not before: Wed 15 Nov 2023 08:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:08:8b:82:ab:da:23:14:99:5b:b1:e4:6a:4c:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 08:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120b567c2c8a1562404a72e4af2c0045995e334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:b6:bb:71:0e:3b:02:90:4a:52:17:49:d9:
57:0a:1c:5a:9c:84:cc:9f:d7:94:1a:37:d2:7f:7c:
98:19:8b:82:a5:cd:9c:60:07:46:54:66:b6:ba:f7:
b9:b0:7c:1d:6c:bf:69:16:71:07:19:02:55:1c:bf:
e8:bc:06:d4:7d:1d:f9:8e:16:27:30:22:d6:bb:0d:
42:d5:42:d3:a5:af:61:51:61:72:b1:aa:1c:eb:09:
2a:c7:b3:33:ae:12:4b:e0:8b:3e:27:38:9c:79:3f:
22:13:6c:43:80:ed:71:6d:2b:6e:39:59:38:01:89:
1b:0a:51:56:ef:cf:38:27:0e:c3:94:b2:c9:9b:0f:
d5:24:1d:b0:e3:21:c5:d1:af:78:e6:d3:1f:6f:f2:
2f:24:5f:e1:b5:f5:7e:5e:d3:ca:e9:4f:06:72:7d:
f5:14:cc:7d:7a:f1:9a:78:6a:dd:94:ab:66:48:d3:
4e:9b:e5:82:d2:a6:a3:68:4c:ee:f1:0a:d2:6d:10:
9f:56:74:2c:5e:9f:54:c4:4d:71:a0:b0:f4:85:2c:
dc:5a:09:77:38:b0:80:c7:77:ce:50:58:05:9c:63:
40:9b:67:07:a1:61:e4:33:74:00:15:26:c1:dc:21:
e6:77:cb:2d:31:8e:d8:ec:0d:a2:14:6a:fd:7b:12:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:56:7C:2C:8A:15:62:40:4A:72:E4:AF:2C:00:45:99:5E:33:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EgtWfCyKFWJASnLkrywARZleM0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:e2:42:16:89:08:6d:68:26:91:cf:b0:e8:55:00:ad:24:16:
56:79:13:eb:be:6e:92:45:b1:28:a5:91:32:60:13:3b:f5:35:
06:74:b0:ee:69:20:e1:b1:06:07:64:9e:1e:d0:dc:98:28:e4:
e0:11:6b:26:00:65:b5:57:19:fe:bf:9f:3a:23:cf:54:11:7c:
e4:c6:3a:40:b4:43:1d:fd:59:89:f4:02:58:f1:eb:77:48:df:
5e:8f:ba:bb:24:8f:da:c9:21:49:7d:c8:24:fd:14:e6:a1:7f:
be:be:70:f5:72:54:16:09:36:21:2d:f5:45:9a:22:ec:de:24:
59:67:5d:8b:ae:45:ef:1e:8c:7f:5b:2a:ff:f5:45:be:62:77:
b8:e8:5a:f6:ef:29:87:60:13:c6:89:3f:52:f4:b3:f7:01:8f:
c1:54:17:63:77:5e:c7:64:1c:ee:9f:24:8d:42:16:0c:0f:1f:
6c:9e:bb:cb:4d:fc:0f:b7:4f:5f:21:7b:d2:07:bb:e2:8f:b6:
10:25:91:92:da:81:56:18:2c:54:ae:6a:14:7a:4f:19:6e:14:
c2:bc:96:b2:9f:99:d2:05:66:9e:1b:93:bb:94:40:a9:e1:1c:
91:1e:0b:b0:c6:4d:c8:c6:6f:59:0a:50:7b:35:46:23:23:dd:
d6:fb:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:52 2025 by rpki-client