Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehFgN45xVelZ1FvD-u0yuB7TVFc.roa
File: ehFgN45xVelZ1FvD-u0yuB7TVFc.roa (raw, json)
Hash identifier: 0eJ/+uDfZUlCHbE5lSqpFfqLg5lF8uWLRZ4E1+lidMo=
Subject key identifier: 7A:11:60:37:8E:71:55:E9:59:D4:5B:C3:FA:ED:32:B8:1E:D3:54:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C27694D957FF01D587262B2573AC2AAAE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehFgN45xVelZ1FvD-u0yuB7TVFc.roa
Signing time: Fri 01 Dec 2023 22:04:21 +0000
ROA not before: Fri 01 Dec 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:2769:1ef1/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:69:4d:95:7f:f0:1d:58:72:62:b2:57:3a:c2:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a1160378e7155e959d45bc3faed32b81ed35457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:31:2e:8f:60:79:95:d1:3a:9b:db:50:0f:
84:b2:f5:6f:35:98:59:9d:ff:a3:9f:4f:1d:f8:a4:
0d:5f:42:5e:4a:03:bb:f1:bc:09:dc:c1:3c:7d:f1:
d5:ff:a0:3f:29:a3:83:85:9c:d5:e2:0a:68:8b:f3:
14:fe:69:03:38:63:5d:7d:ba:6a:08:33:19:77:a6:
19:40:4b:b7:45:c4:ef:d3:ec:85:b8:7c:a4:e8:6c:
24:af:2f:1f:2a:97:15:e1:83:b0:9b:54:1e:48:13:
25:37:21:b6:da:e0:a6:3c:1f:b6:97:e1:fc:bd:d3:
e9:5c:e2:be:4c:1e:aa:8b:7e:d1:c7:27:01:e2:30:
5b:b8:6b:66:fa:fa:fd:33:47:81:17:63:c1:74:57:
34:a5:1d:ae:89:ac:f6:0a:a2:f8:cf:06:a1:2a:6c:
40:7f:b8:5a:6d:17:44:40:62:34:d2:91:8e:a5:58:
c0:c0:cb:56:34:cf:97:26:ae:1a:c9:45:6f:ef:61:
44:af:b9:72:d3:03:d6:e4:50:cb:29:34:1a:18:b4:
96:61:62:4e:c6:eb:74:da:1c:1b:14:ad:b4:99:48:
29:e3:46:83:e7:11:68:68:43:6d:bb:62:8a:da:e9:
72:f0:47:a0:eb:b6:21:4a:e2:13:c7:1d:f4:af:b3:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:60:37:8E:71:55:E9:59:D4:5B:C3:FA:ED:32:B8:1E:D3:54:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehFgN45xVelZ1FvD-u0yuB7TVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:70:fb:c9:e2:24:6a:1e:42:38:86:f7:8f:f3:13:f9:19:de:
6a:36:61:cb:83:a2:10:62:11:d0:53:c3:f7:59:c4:d5:c9:de:
35:f6:0b:ac:65:04:63:f9:91:29:63:9f:55:1d:93:e1:d8:b0:
45:11:8a:9a:39:9d:b4:2c:9a:33:7b:cf:09:96:e8:25:0b:62:
26:65:2a:97:44:1c:23:80:36:f8:1c:7f:c2:4b:74:2f:7a:e6:
e9:89:62:3b:a5:5b:7a:ba:61:89:d9:8b:a4:5f:08:f5:3c:e0:
a8:ea:1c:2e:cd:8a:a0:86:55:f5:04:12:0d:47:ba:39:1d:c0:
d6:d9:ab:49:7d:26:2e:40:b5:a3:0c:b9:57:6c:d5:6c:d4:c4:
ec:ee:84:2b:07:44:4d:a9:73:db:92:77:d0:53:dc:95:fc:75:
69:6a:ae:e9:c3:f0:2e:95:99:77:b3:37:fa:c1:33:d0:76:2a:
4f:99:71:1f:d0:8f:ab:2b:ee:24:03:b4:84:8c:54:4f:16:2c:
ba:68:b6:2d:f6:31:bb:67:44:93:8a:d9:83:4a:18:2c:6c:08:
18:0e:da:3c:e3:c5:cf:c2:05:af:6c:21:8e:1f:4c:e8:e1:97:
35:7b:66:e4:45:ad:b7:06:a6:69:10:9c:23:33:8e:23:0f:37:
53:44:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:37 2025 by rpki-client