Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4GpQbyxkoKPeZ9Grrbu8h8gMpM.roa
File: e4GpQbyxkoKPeZ9Grrbu8h8gMpM.roa (raw, json)
Hash identifier: yr+KMmJVoLCTSsLUkdFPFfkYyrwaq0P4hGhfHq9cwzY=
Subject key identifier: 7B:81:A9:41:BC:B1:92:82:8F:79:9F:46:AE:B6:EE:F2:1F:20:32:93
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDE78342B69B0B6BAEFA654B392F43947
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4GpQbyxkoKPeZ9Grrbu8h8gMpM.roa
Signing time: Fri 17 Nov 2023 18:08:21 +0000
ROA not before: Fri 17 Nov 2023 18:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:78:34:2b:69:b0:b6:ba:ef:a6:54:b3:92:f4:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 18:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b81a941bcb192828f799f46aeb6eef21f203293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:56:dd:db:70:db:fb:8e:a1:27:68:4e:9d:
f9:9b:6f:cf:a5:62:37:dd:5e:0c:39:36:55:e0:0d:
44:1c:52:c3:df:cc:de:9b:58:ac:cd:17:74:f3:44:
19:dd:b7:f7:bf:92:29:8e:7c:b2:f3:58:b2:db:f0:
60:89:47:25:7b:5b:5d:2d:b7:16:da:6e:b5:73:45:
ee:a6:3c:55:a8:86:cd:ff:3b:2b:77:7d:11:9e:74:
83:1b:d2:0d:b2:d0:8a:42:20:72:b3:4c:c5:0f:b1:
06:24:73:5d:83:5b:55:ed:c3:0f:58:00:ed:62:75:
55:6a:aa:73:8a:93:7e:2b:a1:63:06:cd:4c:a5:e0:
0b:33:a7:e9:d8:a5:a4:ff:86:a7:6e:82:02:a9:6f:
21:59:b9:34:d7:b7:a8:90:40:aa:59:bd:07:e0:db:
d8:75:26:cc:08:74:22:61:08:9a:84:83:c9:d4:1e:
92:e4:f2:46:c1:ff:46:79:05:6d:96:d4:69:bd:80:
ea:90:2d:bc:72:f8:61:79:b5:3b:34:f3:5b:97:7a:
6a:67:34:c3:50:9e:a1:60:a0:9a:50:44:7f:98:22:
05:91:57:78:8c:5e:e9:10:3f:79:4f:b3:a0:fe:8f:
a1:4a:c4:a7:df:66:cc:87:7f:f4:21:12:51:65:8e:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:A9:41:BC:B1:92:82:8F:79:9F:46:AE:B6:EE:F2:1F:20:32:93
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e4GpQbyxkoKPeZ9Grrbu8h8gMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:27:2f:f7:17:f1:c6:45:b1:a5:7f:17:1d:20:85:1c:5d:86:
83:92:8a:86:77:6b:17:ab:25:9c:ac:72:29:3e:42:b5:b0:3f:
65:11:c9:32:0f:95:06:83:01:8e:c8:48:78:e3:1d:55:fe:48:
c6:4f:b4:cb:72:0f:7e:51:65:11:f3:fb:4f:23:8f:a1:98:79:
1e:d2:09:2c:8e:83:bc:71:1b:f5:40:f2:25:b1:fd:a5:95:3f:
4c:66:d7:f3:4a:91:32:2b:d4:43:2a:b9:48:c8:ad:02:d4:f0:
f0:af:9a:0b:5b:2a:e5:86:69:8b:a0:58:77:32:aa:39:0e:0b:
aa:3a:8f:95:5c:ae:f5:c3:78:e6:11:34:dc:61:cc:94:da:cd:
c7:f3:04:c8:e7:64:38:a8:c7:b3:b5:cd:7a:90:11:d7:f1:8e:
e7:ab:c9:36:c5:44:f4:26:21:13:82:26:dd:40:01:c0:21:df:
6d:b4:d3:b1:9e:d7:1e:67:0b:32:12:e6:17:5f:3a:16:da:81:
85:fb:d9:3d:54:64:9c:92:ce:25:5e:59:21:d4:80:e0:35:bc:
06:c6:7e:41:8b:a2:0e:2c:ba:3e:00:d4:bb:4d:27:3f:90:38:
7b:d2:75:85:b1:ad:9c:6c:eb:e5:a5:90:67:72:9c:fb:34:57:
b6:cd:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:49 2025 by rpki-client