Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EmekRJQrV7Jxn8P4sK42qGIxaR0.roa
File: EmekRJQrV7Jxn8P4sK42qGIxaR0.roa (raw, json)
Hash identifier: 5g/V96NpFDhYL1r0s3ULaIrjzrvS7t2+1qrxbfPHB0A=
Subject key identifier: 12:67:A4:44:94:2B:57:B2:71:9F:C3:F8:B0:AE:36:A8:62:31:69:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C634F3C1F4AECDBBEA24F7A54B655B78E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EmekRJQrV7Jxn8P4sK42qGIxaR0.roa
Signing time: Wed 13 Dec 2023 13:13:06 +0000
ROA not before: Wed 13 Dec 2023 13:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:4f:3c:1f:4a:ec:db:be:a2:4f:7a:54:b6:55:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 13:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1267a444942b57b2719fc3f8b0ae36a86231691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:81:16:16:ce:02:ab:ef:a5:c2:04:8f:6a:
62:71:fc:7b:b8:d0:43:20:5b:de:4e:a8:c6:42:5f:
87:aa:04:8c:e6:ee:81:55:89:1c:50:77:44:1d:9c:
1e:b6:19:f4:3b:85:eb:1b:55:79:8f:a4:60:71:4b:
b6:9f:8d:e0:b5:71:1b:d2:05:f7:14:f6:91:6f:e2:
62:28:57:10:f1:57:e9:c8:85:89:0e:dc:91:d6:28:
05:38:99:20:e3:ef:b2:04:00:a6:a2:58:6d:c4:91:
fa:7e:11:85:51:bd:55:f3:59:2c:17:f9:86:77:f8:
db:f0:17:bc:d0:d8:57:e6:4b:7f:c5:77:ca:da:e0:
c4:2e:cb:85:6a:5a:e3:00:02:30:45:03:11:d7:2d:
a1:24:dd:86:d4:43:56:9f:69:68:93:cb:91:fd:90:
ad:29:0d:85:a7:ac:35:2a:97:75:70:d2:46:5f:8a:
a9:ec:13:85:18:98:52:81:f7:dc:49:61:49:43:2c:
f9:06:5e:c6:1e:4d:7e:e4:66:31:fd:5c:85:73:0f:
69:70:32:93:2d:9c:02:c3:d1:c4:02:78:17:ef:ca:
22:bf:1c:e6:40:a0:87:a8:23:1a:05:86:8d:b7:ba:
96:45:a6:7e:fa:5b:bf:ae:44:b8:14:a1:84:e1:b7:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:A4:44:94:2B:57:B2:71:9F:C3:F8:B0:AE:36:A8:62:31:69:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EmekRJQrV7Jxn8P4sK42qGIxaR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:77:9c:b5:70:99:05:df:8a:18:b5:73:31:8b:2b:b1:9d:e9:
67:a7:b4:dc:f5:23:cc:f7:e5:09:07:79:52:26:01:73:d2:50:
38:e5:87:74:10:64:37:5b:a0:6f:11:cc:77:1a:39:8a:03:e0:
ea:6d:53:bc:3a:70:91:d0:92:78:b4:d0:25:32:6d:a8:77:99:
73:5b:c7:cc:88:21:88:be:08:f6:1f:b0:20:b8:be:c7:44:da:
5f:67:7a:32:5b:87:72:d4:2d:75:0c:49:f9:cc:83:fb:ec:ca:
ef:64:0e:ef:7e:3b:b0:88:66:f6:3b:9f:e4:73:fb:9d:f4:db:
7f:49:90:ff:2b:33:ed:be:52:1d:76:49:6b:56:ba:67:ea:78:
2e:f0:17:08:89:6c:86:8b:a0:f2:ae:4a:91:5c:8c:d6:52:e8:
9d:d9:4c:da:e4:d6:82:ab:8b:10:0c:cf:38:ac:c9:cf:72:d6:
1f:0b:ad:71:c5:a6:d4:9f:91:81:99:fa:7a:fd:7b:1d:84:34:
ae:5c:5b:46:16:8c:4d:fe:b7:8a:f2:8a:a8:c3:87:ec:6a:47:
fd:5a:a6:c8:e8:8f:db:4f:35:43:99:2b:ea:ff:a4:f9:28:c6:
ae:bc:27:13:92:ed:51:0e:31:24:c1:17:24:1d:22:2c:0c:39:
00:80:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:38 2025 by rpki-client