Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EvGsPYarBxDuOKKkMlaA7B9mNnc.roa
File: EvGsPYarBxDuOKKkMlaA7B9mNnc.roa (raw, json)
Hash identifier: xmcpB1KhowYADP/uKF4LWKpDjtq12EBTBRJmschPeAE=
Subject key identifier: 12:F1:AC:3D:86:AB:07:10:EE:38:A2:A4:32:56:80:EC:1F:66:36:77
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC6397B1B66640FE073B15BA16591CF32
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EvGsPYarBxDuOKKkMlaA7B9mNnc.roa
Signing time: Mon 13 Nov 2023 01:08:57 +0000
ROA not before: Mon 13 Nov 2023 01:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c6:39:7b:1b:66:64:0f:e0:73:b1:5b:a1:65:91:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 01:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12f1ac3d86ab0710ee38a2a4325680ec1f663677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:49:a0:23:be:af:19:f6:3b:24:c6:12:eb:
30:da:74:79:cd:99:0e:31:7e:36:ce:a9:b6:e5:79:
6a:4f:84:68:d7:f8:97:38:ae:dc:58:9e:54:19:43:
c4:07:74:b5:ca:8a:31:17:4c:9d:1f:61:37:65:4f:
9b:f2:dd:f2:98:0d:03:79:ac:79:7a:9a:f1:5e:c6:
6b:a0:d4:72:e4:17:fb:5e:6b:7d:df:13:2e:f3:ed:
26:bc:37:77:9d:07:36:a9:53:03:44:6a:7e:73:b6:
eb:a1:3e:fc:32:9f:2b:6a:5c:1c:04:d2:ac:fd:82:
12:ee:72:d6:6e:c9:04:5c:b3:53:b1:35:e0:e6:2f:
ab:19:53:61:8b:5f:6e:13:74:4c:04:56:aa:42:e1:
e8:63:a4:42:18:ad:55:62:eb:e7:a6:04:ef:3d:4d:
23:48:d0:88:d4:03:cd:65:3e:c8:98:a9:05:44:4c:
5b:83:40:56:a3:be:1c:73:f6:19:f2:05:bb:c5:8f:
a9:23:67:58:f0:74:26:f4:35:d1:a2:9a:28:fc:2b:
f3:95:04:5c:c6:71:a7:ad:cd:05:3f:fe:2c:26:a6:
d7:1d:51:3f:09:78:08:27:d5:e5:1f:e8:17:74:1a:
f4:c6:76:a1:0d:1d:f8:29:d2:fc:07:77:98:c5:a4:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:AC:3D:86:AB:07:10:EE:38:A2:A4:32:56:80:EC:1F:66:36:77
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EvGsPYarBxDuOKKkMlaA7B9mNnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:17:6c:aa:04:ac:7e:4a:4c:e9:8d:a7:8b:ab:e8:f6:be:92:
4b:47:98:54:6d:28:c3:a0:ad:93:3b:a1:ac:ff:a0:a6:53:ea:
61:b9:ce:5c:ae:50:a7:0a:10:9e:2c:a8:10:27:37:80:bb:19:
27:39:2b:47:00:54:62:aa:cb:c8:2a:bb:82:df:64:69:9c:c9:
7a:d1:8b:ee:bf:92:5b:96:41:dd:4d:86:a7:c3:be:29:9f:a1:
33:81:aa:21:1d:61:e7:c2:57:22:ab:cd:25:3f:c8:7f:34:32:
4a:f0:00:8f:9c:f8:4b:c6:1c:9f:20:57:3c:cf:46:98:b4:9e:
64:ba:3f:35:92:b5:26:f4:e3:5f:13:ce:da:76:ac:02:2e:07:
ec:8a:3b:67:9a:9f:a2:b3:da:60:4c:5b:aa:4e:fa:c2:95:1c:
9f:97:5b:9c:ad:3f:6c:77:44:13:83:a5:b9:17:3f:34:1d:e1:
a3:5d:f7:9e:32:db:36:21:0e:0b:56:b2:ec:27:64:9d:f8:46:
e1:a6:a6:6f:37:09:84:b4:b4:e9:45:db:87:5f:ab:af:c0:7a:
18:38:c4:bd:24:20:73:b5:4b:c4:0d:78:91:fa:1b:34:68:1d:
7a:31:60:d0:e9:e8:68:75:33:4e:df:8e:4f:84:26:b9:d9:43:
d2:ad:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:08:07 2025 by rpki-client