Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EutZ8rlsrBrrRrZVAjGQi14laFs.roa
File: EutZ8rlsrBrrRrZVAjGQi14laFs.roa (raw, json)
Hash identifier: xiMlJLYXOoQX9VO8VoKKnNkqif4G7uZTNyr3QsYgy68=
Subject key identifier: 12:EB:59:F2:B9:6C:AC:1A:EB:46:B6:55:02:31:90:8B:5E:25:68:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFC1C5DF3CC3CD4C231908AB7B3D825D7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EutZ8rlsrBrrRrZVAjGQi14laFs.roa
Signing time: Thu 23 Nov 2023 12:16:39 +0000
ROA not before: Thu 23 Nov 2023 12:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:1c:5d:f3:cc:3c:d4:c2:31:90:8a:b7:b3:d8:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 12:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12eb59f2b96cac1aeb46b6550231908b5e25685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:a3:d0:49:12:2d:c2:ad:f1:14:b3:db:50:
eb:2c:bf:fe:76:99:8a:88:21:6b:3c:15:7c:63:14:
e6:04:d0:d9:cf:2b:c9:10:23:3f:b0:1d:87:52:08:
95:aa:56:97:25:63:f5:e8:91:18:c7:cf:08:93:59:
e9:2f:de:6c:01:6e:4c:46:fc:48:08:f2:fa:b9:54:
6f:a0:ab:2f:0a:b0:85:b6:25:39:70:13:39:1d:40:
b4:9c:c5:09:14:a8:e0:5c:ed:59:34:d9:be:c8:f8:
7f:be:ba:3c:75:2f:99:74:46:c7:8b:9f:32:b3:a4:
b0:c8:5b:23:f6:fe:d0:69:14:d6:3b:00:71:4c:48:
67:e6:f4:ca:f6:28:bb:0e:3c:8b:d6:27:02:a1:c9:
ca:e4:29:91:69:0a:3e:31:a6:93:78:27:83:a6:57:
cd:f4:a5:b8:a3:1b:be:34:ae:9a:06:7c:f2:4c:08:
5a:35:8a:e9:93:5b:da:e4:13:47:aa:33:35:3e:92:
7c:7f:e6:d5:c8:2a:ea:0a:26:de:01:95:66:d0:01:
53:87:e3:19:f9:0e:e8:36:e2:cc:69:e4:b8:db:0a:
af:65:d8:3c:81:7a:d0:bb:8b:3d:b7:5a:ac:4f:14:
0e:d8:15:cb:00:03:31:be:aa:ac:2a:53:cd:82:ce:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:59:F2:B9:6C:AC:1A:EB:46:B6:55:02:31:90:8B:5E:25:68:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EutZ8rlsrBrrRrZVAjGQi14laFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:2f:6f:d5:95:bc:be:23:c6:80:d0:cc:0a:60:08:09:a1:38:
dd:5b:9f:8c:9e:bb:58:bb:5d:b3:b5:ab:83:4d:f0:47:43:17:
56:d2:80:ce:e1:fd:5c:13:b6:c1:64:e7:23:bc:8e:00:db:33:
c7:db:2c:4a:07:e8:e4:37:59:67:d1:14:1f:92:e6:30:c3:e0:
4d:08:3b:b6:aa:34:bf:13:4d:5f:f2:6c:c8:45:94:54:7c:58:
16:7a:60:57:8f:b3:f4:c7:69:f9:ca:b3:2f:bc:06:a9:64:30:
76:fb:87:e1:98:d9:f6:b3:ab:7a:ea:56:9a:a1:9a:91:3e:ac:
8d:21:5b:8a:5a:72:1d:17:31:20:e0:71:31:26:3f:c2:d1:b9:
f6:ba:dc:c7:e5:10:dd:7c:2f:e1:ff:9a:66:02:45:51:1b:28:
00:97:98:6e:90:db:d6:13:b4:80:c8:89:cf:33:84:5c:38:57:
72:1a:02:dc:3b:45:f8:84:fa:73:e6:1d:eb:0c:7c:94:cd:83:
f4:76:3e:7d:66:70:5d:a1:89:85:da:76:7e:dd:3e:c5:d7:a5:
cd:86:7e:cf:6a:1f:2e:66:ed:58:17:9f:56:13:2a:c1:b5:b6:
6c:72:e7:9e:38:4e:0d:d9:90:bd:16:23:6c:a7:64:ad:78:03:
56:f2:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:52 2025 by rpki-client