Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eLyzXBH22kjMpVjayq-3wzusbW8.roa
File: eLyzXBH22kjMpVjayq-3wzusbW8.roa (raw, json)
Hash identifier: LZG00btVhTLcXV7PT2v7dIbw8j3ABobUP+TCjoz+IR0=
Subject key identifier: 78:BC:B3:5C:11:F6:DA:48:CC:A5:58:DA:CA:AF:B7:C3:3B:AC:6D:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF5049A961745A466DA7DB39659394157
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eLyzXBH22kjMpVjayq-3wzusbW8.roa
Signing time: Wed 22 Nov 2023 03:13:21 +0000
ROA not before: Wed 22 Nov 2023 03:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f5:04:9a:96:17:45:a4:66:da:7d:b3:96:59:39:41:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 03:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78bcb35c11f6da48cca558dacaafb7c33bac6d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:d5:29:34:50:c7:4c:f9:12:4d:45:6d:28:
c1:e6:2a:a9:4d:8f:b5:fc:6f:e7:81:7a:f7:8a:ba:
60:a8:1c:12:a8:8b:f3:b3:da:aa:f7:03:56:01:03:
b3:de:0b:75:ca:f0:0c:5b:2f:23:56:4c:33:13:03:
8f:bb:94:e6:3c:fb:c1:f3:72:c4:22:e2:b3:cf:77:
40:78:24:36:b1:bd:07:b6:ed:9c:f5:f1:56:86:27:
dd:ac:3b:84:05:b7:16:47:53:af:a4:e0:85:e6:74:
fe:1c:6b:4d:3f:87:1a:07:c6:78:0f:a6:0a:32:3e:
21:c0:68:d9:d9:41:ff:0a:76:c9:f4:9f:92:33:29:
d1:f6:08:4f:bc:2c:b3:6e:b1:54:5f:42:8b:4f:dc:
66:7e:35:7c:7c:81:9c:8d:9c:a7:d0:e4:23:de:b3:
9f:05:f6:ab:08:85:90:fb:a0:98:37:68:5f:05:b8:
93:2b:ad:5f:95:cf:82:b6:fb:64:aa:70:67:55:67:
30:8c:b8:14:75:bc:07:d0:46:8d:60:01:52:2a:5a:
19:b7:ba:11:75:41:51:0d:fc:5d:04:a1:3d:f5:ba:
c3:06:dc:6e:40:87:cf:5c:26:c8:e4:d2:f9:2f:4c:
2e:dd:42:a7:f1:05:d4:0e:d9:1e:46:4e:0f:4a:76:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:B3:5C:11:F6:DA:48:CC:A5:58:DA:CA:AF:B7:C3:3B:AC:6D:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eLyzXBH22kjMpVjayq-3wzusbW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:e2:6e:6e:54:16:7d:0d:89:8c:42:a3:a8:e9:9b:9c:47:31:
98:60:7a:d1:fe:92:aa:c9:ac:5c:6a:a4:6c:61:73:00:ba:84:
3a:6b:7e:f8:7c:3c:45:63:87:81:91:7e:0e:1b:9d:83:79:cc:
28:17:c0:0e:c6:ae:42:0b:98:2b:a1:39:de:af:22:a4:a0:d4:
9a:bd:de:f7:51:f7:4c:0f:88:81:36:79:7d:16:4d:06:ef:de:
8a:8e:73:99:77:9c:42:f2:0e:39:37:6f:af:50:c2:40:19:ae:
96:f3:d9:b1:2d:c2:01:e0:17:77:7f:5b:6c:8a:ec:67:dc:13:
29:ec:12:e9:71:b9:d3:9b:13:f3:97:92:6d:ff:ea:af:98:34:
99:c4:6a:63:8e:65:52:8f:d1:89:de:d2:96:33:9f:56:d2:f9:
3f:5a:20:90:4f:e3:33:c6:1e:92:31:01:f2:b3:67:f0:d6:c6:
16:1c:d5:03:67:10:39:47:15:a1:0a:dc:1a:62:56:68:32:d7:
bd:ff:15:32:33:57:28:d8:70:f1:41:a3:4a:1a:dd:fa:ab:4d:
cb:f8:c8:c0:fa:ce:46:44:71:a4:32:bc:c3:b1:94:4a:7b:8d:
66:86:94:78:0f:6c:a2:c3:2e:5b:67:ad:70:e3:79:f5:c0:4d:
4b:dd:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:48 2025 by rpki-client