Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eccDFybfmwst6dwV0QNaYBQM3gc.roa
File: eccDFybfmwst6dwV0QNaYBQM3gc.roa (raw, json)
Hash identifier: oVydEANBvu3FjYy52Os886qVbo682uj8djzZ4wgFwuE=
Subject key identifier: 79:C7:03:17:26:DF:9B:0B:2D:E9:DC:15:D1:03:5A:60:14:0C:DE:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1F4D35363B80B1AB95D88FE814E2F005
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eccDFybfmwst6dwV0QNaYBQM3gc.roa
Signing time: Thu 30 Nov 2023 08:16:42 +0000
ROA not before: Thu 30 Nov 2023 08:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:4d:35:36:3b:80:b1:ab:95:d8:8f:e8:14:e2:f0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 08:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c7031726df9b0b2de9dc15d1035a60140cde07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:0c:56:37:45:05:34:33:80:7c:83:d4:cc:
0c:fd:e4:9f:1a:f6:57:ee:22:37:b4:68:fb:58:12:
5d:f6:e0:77:2d:39:b1:9d:9e:6b:b6:95:3c:dd:d6:
73:66:dd:13:34:b2:37:0d:91:e1:11:ab:ce:ba:1a:
ad:53:44:19:09:ca:df:71:d8:cd:f2:3b:7a:8d:77:
c1:57:08:75:30:2c:96:74:01:27:a4:7c:35:54:a8:
0e:40:84:9d:fb:47:a8:f6:b3:ad:16:fe:d9:08:68:
3a:36:cc:2a:91:8f:8c:6e:41:51:b8:70:67:a5:8e:
af:0b:e7:1f:e2:cf:16:9b:db:65:c4:c5:ea:bc:e9:
35:e1:f7:08:10:f7:43:da:27:cd:c8:07:57:ec:a4:
19:70:3e:dc:df:f0:73:22:19:cd:2e:cb:43:2b:47:
52:87:e1:e5:81:f1:89:cf:d1:7f:d1:9a:45:4a:d5:
65:04:c8:f1:da:82:fa:76:a2:22:07:d1:92:0d:07:
90:1c:39:13:cd:0e:5f:99:18:12:17:d0:18:ec:a3:
76:cb:06:f6:a7:ab:1b:5e:88:fe:c9:15:93:95:d2:
ed:26:d1:67:a5:e0:bf:34:03:7b:35:3e:38:25:ff:
bb:68:39:fa:8b:80:61:f2:64:f2:0a:16:ce:a6:ae:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:03:17:26:DF:9B:0B:2D:E9:DC:15:D1:03:5A:60:14:0C:DE:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eccDFybfmwst6dwV0QNaYBQM3gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:d8:5c:bc:d3:c4:9f:21:ed:a2:eb:1b:f6:67:5b:d8:c2:c4:
2a:55:4b:6c:a5:a0:fc:fb:7d:c8:32:85:f1:c9:10:41:80:87:
df:fd:d3:d6:40:7d:eb:08:b7:ba:d7:26:98:85:18:e4:e5:63:
40:c1:33:9e:c8:b6:c6:d0:dc:77:3c:20:34:2b:c3:10:78:bc:
3e:4b:05:54:e1:8c:97:20:9b:3b:e4:52:e8:15:72:4f:84:54:
cc:80:cd:e8:ac:9f:f5:a6:1a:97:f7:49:33:9a:eb:6d:f7:ae:
5e:05:39:5c:6b:02:28:d8:cd:4c:00:21:16:fb:28:43:00:ae:
d1:d6:97:84:11:dc:d1:c0:63:06:a1:72:fa:8e:8a:4a:80:ac:
a1:8d:f0:16:e9:6d:59:82:b4:d2:96:88:20:09:72:14:24:bb:
b9:74:08:ac:96:6b:51:d4:2f:53:67:f4:18:4f:c7:d6:88:99:
a2:d6:19:61:bd:99:14:e9:3d:1a:16:f5:39:d7:ff:f6:73:34:
8a:76:36:78:51:c9:87:6c:fe:27:37:54:2b:85:0c:b9:d6:98:
e4:1e:94:b6:62:3d:f6:db:4e:b1:f5:b2:44:1e:50:d3:f3:7f:
3f:24:fe:1c:b1:b0:37:7c:6d:12:f1:c7:27:9f:0e:bc:78:63:
e5:2c:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:17 2025 by rpki-client