Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/efsDKsxr0ViGoyoIhffSwRIpjoA.roa
File: efsDKsxr0ViGoyoIhffSwRIpjoA.roa (raw, json)
Hash identifier: fJeb/54cYI0EJydK0skpzNvlM7wtwD9Dg4ZuswM/8Xc=
Subject key identifier: 79:FB:03:2A:CC:6B:D1:58:86:A3:2A:08:85:F7:D2:C1:12:29:8E:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9854CBC5F084F0E984F08BC54C80180F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/efsDKsxr0ViGoyoIhffSwRIpjoA.roa
Signing time: Sat 04 Nov 2023 03:16:15 +0000
ROA not before: Sat 04 Nov 2023 03:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:54:cb:c5:f0:84:f0:e9:84:f0:8b:c5:4c:80:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 03:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79fb032acc6bd15886a32a0885f7d2c112298e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:c9:ef:71:14:5e:62:3e:9b:d6:2f:0e:10:
c5:f7:3f:a7:df:96:69:c2:46:31:42:8c:d9:bc:56:
e6:b6:3e:05:ef:39:24:d5:be:d9:45:70:28:a4:f9:
5f:c7:ae:2b:2e:ef:5c:49:28:07:aa:67:13:2c:c2:
96:51:c6:2f:32:82:be:f8:a0:d1:f5:49:52:ad:3d:
aa:da:53:b8:33:a6:e4:34:bb:26:63:0b:41:bd:06:
21:7a:be:cc:74:df:d5:a6:a8:ff:4e:e6:4d:b3:f7:
14:9f:25:e5:d8:69:24:c9:97:53:7a:ce:b7:70:10:
62:ec:9d:fb:1f:de:0b:20:61:52:ec:43:5a:57:df:
b2:3a:64:d4:8f:e6:ce:08:28:d6:8d:6b:12:4f:b0:
bd:cd:fb:e1:0e:21:b2:51:9e:ad:d2:9b:bf:ae:39:
21:52:c7:13:16:af:99:95:eb:3d:3f:6c:35:51:f2:
97:e2:0c:13:5c:76:9d:7d:3b:71:de:f2:1d:53:57:
c7:db:85:90:7e:47:37:bb:03:71:c1:92:29:c0:52:
f0:f0:79:25:d6:0b:33:ed:1d:34:a4:c3:27:37:5a:
49:23:19:69:fb:17:4a:4d:f3:52:f6:ef:5f:ad:04:
53:d2:ba:48:36:63:94:0a:a4:ed:13:84:ee:7f:c8:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:03:2A:CC:6B:D1:58:86:A3:2A:08:85:F7:D2:C1:12:29:8E:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/efsDKsxr0ViGoyoIhffSwRIpjoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:5b:13:63:cd:02:ea:10:38:4d:b5:75:51:c8:e4:6a:12:1c:
5c:cd:0b:49:44:ff:63:df:1e:84:c9:62:b6:f6:3d:6e:cd:d3:
e7:56:25:50:05:28:fc:dc:6a:c3:1a:e9:e3:70:17:79:de:bd:
9b:a8:ef:1a:2b:39:8c:12:83:21:f7:bf:43:14:64:d0:ac:b6:
15:65:71:41:42:49:6c:f9:fb:ae:86:ca:7a:a5:d2:9a:ac:22:
c6:ed:ba:21:49:cb:ad:2d:36:a0:5d:5e:8c:a5:9f:8e:0e:38:
f6:f7:91:55:16:3d:0b:b9:2b:07:c3:59:f8:88:db:da:46:84:
c0:c0:48:6b:46:6d:67:a2:62:52:ce:06:3e:39:9e:b2:36:48:
92:98:de:d5:84:b3:86:7d:50:fe:60:20:ed:10:c1:d5:c5:4f:
cd:5c:92:09:91:f3:0d:e0:a6:65:fe:b2:aa:35:b2:71:4e:83:
04:14:27:2e:4a:a2:f7:ed:80:03:f9:dc:e4:7b:ab:32:3c:4f:
50:74:f6:20:99:75:4e:68:56:cd:81:c4:57:eb:97:91:ce:76:
60:35:23:74:f3:b2:2a:9f:b6:2f:38:96:7f:5e:c3:70:f6:38:
27:cd:4f:ff:1d:42:86:d9:b9:bd:dd:ff:7c:90:85:3b:19:b9:
6c:de:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:09:34 2025 by rpki-client