Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eVNLsUiR6YAuRXucU_qzKGfOuNk.roa
File: eVNLsUiR6YAuRXucU_qzKGfOuNk.roa (raw, json)
Hash identifier: FKiAVbVA0R5zn7jaOeBsiIfCdedr07BdRzVcVigIiqg=
Subject key identifier: 79:53:4B:B1:48:91:E9:80:2E:45:7B:9C:53:FA:B3:28:67:CE:B8:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC8978F92A3C928DDA214C6CCEC456BAA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eVNLsUiR6YAuRXucU_qzKGfOuNk.roa
Signing time: Mon 13 Nov 2023 12:10:57 +0000
ROA not before: Mon 13 Nov 2023 12:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:97:8f:92:a3:c9:28:dd:a2:14:c6:cc:ec:45:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 12:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79534bb14891e9802e457b9c53fab32867ceb8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:b4:ec:fa:f6:ae:cd:91:42:bf:4a:fc:1f:
4a:c7:6c:d0:25:00:78:3a:d7:24:d6:ed:72:a4:b3:
7c:af:b9:9b:8c:cd:28:a4:16:bd:a8:90:09:d6:23:
73:75:e7:c4:fb:fd:15:73:94:36:73:57:b4:1c:2f:
49:0f:30:ac:8e:3f:6f:1b:73:e3:93:aa:b3:e8:ba:
39:c9:66:2d:fa:14:18:48:b4:89:70:ce:87:a0:8d:
c0:a5:c4:82:b1:8b:c2:f3:02:04:c1:49:41:c3:06:
c7:12:75:30:ce:d9:ff:86:42:aa:e0:2d:f1:26:18:
9c:9f:70:0d:a5:24:80:46:7f:5c:a5:78:f1:98:e5:
03:99:9e:fa:1c:fc:6c:36:6c:0f:2f:08:c3:b6:1b:
e8:cf:aa:fb:06:f3:06:a6:a5:84:b6:1a:a4:ed:c0:
23:18:92:97:f0:a7:43:b4:75:fc:ee:17:d9:7e:31:
27:df:c1:ae:20:60:15:15:41:45:53:e5:32:04:ab:
e9:77:4a:20:87:e9:6a:fc:c5:a2:da:1f:72:49:81:
fb:c7:26:f8:a0:97:07:c4:9f:00:53:cf:00:3e:3c:
c3:43:94:15:f5:80:2d:1c:84:dd:b8:e2:ae:cb:1a:
4f:29:bf:a5:90:eb:bf:ba:4d:28:55:ba:9d:02:e0:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:53:4B:B1:48:91:E9:80:2E:45:7B:9C:53:FA:B3:28:67:CE:B8:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eVNLsUiR6YAuRXucU_qzKGfOuNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:d8:65:fc:1a:86:a6:3c:e6:31:e4:d8:e7:ae:ab:3c:a4:ae:
14:65:06:3a:c1:3d:84:6b:1e:58:bc:a1:fc:85:fc:e2:21:d5:
1f:c8:00:b3:9d:91:39:ac:8b:fe:ae:aa:3c:46:3a:81:6d:92:
b2:2a:9d:35:cd:ac:db:5a:f5:83:25:86:88:8f:64:8a:0a:3f:
ea:fa:a4:23:f5:b3:50:e5:1d:ce:aa:51:f8:93:e8:bd:60:21:
bf:39:22:b0:e9:2a:c9:97:c2:11:3b:81:80:46:e2:be:3d:7e:
ad:78:4f:1f:d1:a0:42:d5:31:62:c4:df:93:81:c8:1d:65:80:
86:ee:bb:5a:4b:a8:87:fb:11:c2:35:85:49:37:d5:b1:97:0f:
41:60:eb:f3:7e:18:7c:b1:1a:58:d4:03:88:ee:44:7c:3d:4b:
f0:1d:44:b8:66:7c:18:3e:fd:0b:34:d4:b4:c8:fe:e0:c0:ff:
b0:7d:46:20:de:d4:0b:c4:86:e5:6d:c6:bc:9b:bc:47:8b:a4:
2f:ca:c5:56:13:8b:76:67:cf:9b:45:c8:b2:66:17:c8:e0:61:
21:fb:05:85:d9:40:dc:b7:29:ce:a6:f7:bd:2f:01:9d:52:77:
60:80:8c:03:ae:2a:ac:b4:92:1d:4a:ac:65:13:81:5a:d3:b1:
1f:a0:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:23:58 2025 by rpki-client