Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez4eeI9K-oEHkYnaz4orNaaoHNI.roa
File: Ez4eeI9K-oEHkYnaz4orNaaoHNI.roa (raw, json)
Hash identifier: x/VpzXgJ0a0li/uS4Q6hCYK0izUJxzkHhfMbx4Q9adE=
Subject key identifier: 13:3E:1E:78:8F:4A:FA:81:07:91:89:DA:CF:8A:2B:35:A6:A8:1C:D2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B77E98BB94B6F61FAC1D2DB41F55DD06C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez4eeI9K-oEHkYnaz4orNaaoHNI.roa
Signing time: Sat 28 Oct 2023 20:11:16 +0000
ROA not before: Sat 28 Oct 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:e9:8b:b9:4b:6f:61:fa:c1:d2:db:41:f5:5d:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133e1e788f4afa81079189dacf8a2b35a6a81cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:3a:08:e1:04:c3:17:f5:5d:42:6c:69:c8:
9b:87:d4:54:bb:73:03:67:1e:dc:e7:0b:90:2e:ab:
65:1c:ec:2b:ca:48:c7:67:f1:12:3e:f0:d8:15:61:
c4:28:a9:dd:e1:b2:d1:f3:13:77:b6:92:6e:76:90:
ec:15:72:de:66:1e:98:26:de:35:41:79:a9:e9:05:
4a:e9:71:57:ab:2a:52:8d:54:fc:73:d2:6c:40:eb:
49:00:ff:08:74:93:46:40:e9:f9:e7:b2:48:14:67:
44:05:ab:9e:f9:b8:1f:b4:c8:f5:98:50:c3:04:54:
dc:65:3e:9d:bd:fc:a6:db:8b:4d:ab:75:3b:0c:30:
9a:7e:68:7f:df:4b:70:c4:a5:69:5f:8d:0b:b4:ef:
8b:84:93:1c:f2:da:84:71:1e:24:b3:0e:77:ef:5f:
a8:88:bc:f2:56:1f:5f:0c:9c:a3:18:fc:7d:be:7c:
8c:86:5e:1b:2c:00:82:22:ac:fa:83:23:86:60:cb:
ea:4a:34:85:b4:11:44:7b:bf:a7:79:37:45:ca:fc:
fe:98:14:82:29:18:f5:a1:b2:bd:fc:da:4f:67:dc:
1b:a4:fc:2b:0e:0a:53:c4:cf:a4:0e:4c:d5:65:15:
6a:06:6c:ac:c0:87:b3:d2:04:95:01:a6:58:3d:05:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:1E:78:8F:4A:FA:81:07:91:89:DA:CF:8A:2B:35:A6:A8:1C:D2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ez4eeI9K-oEHkYnaz4orNaaoHNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:d6:e8:0e:d0:01:ee:f1:ab:8d:11:29:92:aa:c7:e9:23:bc:
20:f7:1c:13:0b:3a:7e:98:5c:76:76:4d:08:6c:45:6d:f5:9d:
a6:e0:0a:e3:dc:94:86:68:6f:93:38:bf:db:b9:a5:99:32:81:
e0:6f:65:36:be:09:5e:6a:44:9a:21:ad:c2:57:6d:69:29:4a:
92:35:33:c2:7b:68:ba:7e:35:cd:dc:23:c7:8f:ed:68:c4:fd:
74:4a:38:2c:71:17:86:5f:4f:f9:73:cb:49:32:69:d7:6e:b6:
0b:63:2b:ce:27:32:0f:a2:1f:98:62:7c:6e:00:6f:54:9d:98:
e0:c7:92:a7:ad:3f:68:76:15:be:da:12:6c:e1:a3:74:52:30:
8c:67:de:46:41:ba:62:5b:10:6c:8f:05:71:55:0e:d2:bf:07:
24:d8:4d:1b:e8:70:6e:63:f7:62:bc:72:39:0d:12:ca:45:c0:
0b:51:8d:6f:58:82:20:85:25:99:22:ca:1b:97:22:a6:1d:64:
7e:6d:10:f9:a7:c7:c5:b1:28:d2:ae:56:cd:fd:5a:ca:43:d1:
d1:cc:ef:6a:e9:84:52:ff:05:56:e1:7a:d6:92:06:10:91:37:
18:d6:30:57:f7:90:4f:18:f7:1f:15:97:c5:d1:58:1f:da:69:
22:02:c3:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt36Yu5S29h+sHS20H1XdBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDI4MjAxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNlMWU3ODhmNGFmYTgxMDc5MTg5ZGFjZjhhMmIzNWE2YTgxY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm46COEEwxf1XUJsacibh9RUu3MD
Zx7c5wuQLqtlHOwrykjHZ/ESPvDYFWHEKKnd4bLR8xN3tpJudpDsFXLeZh6YJt41
QXmp6QVK6XFXqypSjVT8c9JsQOtJAP8IdJNGQOn557JIFGdEBaue+bgftMj1mFDD
BFTcZT6dvfym24tNq3U7DDCafmh/30twxKVpX40LtO+LhJMc8tqEcR4ksw5371+o
iLzyVh9fDJyjGPx9vnyMhl4bLACCIqz6gyOGYMvqSjSFtBFEe7+neTdFyvz+mBSC
KRj1obK9/NpPZ9wbpPwrDgpTxM+kDkzVZRVqBmyswIez0gSVAaZYPQXcmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBM+HniPSvqBB5GJ2s+KKzWmqBzSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvRXo0ZWVJOUstb0VIa1luYXo0b3JOYWFvSE5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGjW6A7QAe7xq40RKZKq
x+kjvCD3HBMLOn6YXHZ2TQhsRW31nabgCuPclIZob5M4v9u5pZkygeBvZTa+CV5q
RJohrcJXbWkpSpI1M8J7aLp+Nc3cI8eP7WjE/XRKOCxxF4ZfT/lzy0kyaddutgtj
K84nMg+iH5hifG4Ab1SdmODHkqetP2h2Fb7aEmzho3RSMIxn3kZBumJbEGyPBXFV
DtK/ByTYTRvocG5j92K8cjkNEspFwAtRjW9YgiCFJZkiyhuXIqYdZH5tEPmnx8Wx
KNKuVs39WspD0dHM72rphFL/BVbhetaSBhCRNxjWMFf3kE8Y9x8Vl8XRWB/aaSIC
w4U=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:29:08 2025 by rpki-client