Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejjlxmjMtRkTu67aWOgUvX2hnyA.roa
File: ejjlxmjMtRkTu67aWOgUvX2hnyA.roa (raw, json)
Hash identifier: zt4jrJ7uDPNJP41Q2e+mFDWWkYqv1H/PK9d6pJL7GTY=
Subject key identifier: 7A:38:E5:C6:68:CC:B5:19:13:BB:AE:DA:58:E8:14:BD:7D:A1:9F:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6688FE94B92ED7BA577332F0B7575D5B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejjlxmjMtRkTu67aWOgUvX2hnyA.roa
Signing time: Wed 25 Oct 2023 11:12:15 +0000
ROA not before: Wed 25 Oct 2023 11:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:88:fe:94:b9:2e:d7:ba:57:73:32:f0:b7:57:5d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 11:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a38e5c668ccb51913bbaeda58e814bd7da19f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:34:2a:7e:01:88:c7:14:22:5e:3d:ca:ee:
0d:e0:de:7d:f8:2b:41:90:ef:2b:1d:12:84:5c:ed:
18:ae:c7:1d:7f:13:91:bd:45:56:4d:cf:c5:2c:cf:
ad:e5:4a:c7:c2:9f:f5:31:46:02:bd:88:e0:09:ed:
e2:2e:d8:46:66:a6:d5:77:a2:cb:5a:fb:9a:be:fd:
d3:75:7e:8b:3b:b6:26:1c:7a:db:7f:fa:b2:ae:4d:
05:a3:a6:a5:8a:a7:9e:fd:36:a0:5a:75:cf:9d:27:
da:6e:fb:24:b2:f2:2f:17:68:b4:08:50:8d:e1:d2:
7b:19:78:74:38:7b:2d:ee:54:2a:25:3a:50:7e:97:
e2:cd:da:fb:99:64:9e:ce:30:8b:eb:18:78:cf:dd:
b3:ae:68:b9:11:74:30:bf:ac:9f:18:4d:ad:2c:43:
79:ed:8c:df:a5:b9:20:43:25:ee:82:f9:f0:b1:88:
94:3f:fe:c3:d9:85:98:87:9b:2d:48:eb:b1:ea:95:
29:fd:f3:e1:b1:1e:f7:ad:80:59:8c:9f:43:a1:0d:
a4:d9:bf:ae:13:d6:4f:75:16:c3:56:0d:b2:de:c2:
bb:6e:08:90:be:59:04:14:e8:88:17:6b:42:a6:09:
94:82:fe:95:64:26:28:21:10:fb:a7:9a:dc:87:fb:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:E5:C6:68:CC:B5:19:13:BB:AE:DA:58:E8:14:BD:7D:A1:9F:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejjlxmjMtRkTu67aWOgUvX2hnyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:f1:2d:64:45:ab:c4:ca:3e:a5:4d:69:24:70:74:c0:e2:34:
ce:07:10:ca:71:ae:2f:58:07:49:6b:58:8e:50:36:77:64:86:
45:b3:36:4e:21:d3:6a:33:90:62:ec:b1:ee:28:9c:38:07:60:
6e:24:c4:ad:49:6d:61:f8:f9:63:ac:e0:a6:9b:5b:1c:ef:2a:
a4:8e:4d:48:9e:e4:ce:2a:fb:16:ea:24:a4:58:b9:ed:cc:d2:
0f:6f:22:de:61:29:f9:ff:70:92:21:e9:81:06:e1:ba:f3:df:
44:d6:76:4d:63:0a:d4:49:05:cc:18:5b:be:09:21:78:94:49:
f3:f6:90:9d:6b:d3:ae:ee:91:ed:0e:72:dc:d7:55:81:12:b5:
e1:1e:62:8d:41:c3:a7:e2:0a:3a:b2:24:b9:97:5e:18:4b:44:
4f:1b:dd:20:2e:ac:d8:f4:aa:10:e4:d7:72:97:3a:81:2e:c2:
63:ab:32:d4:e4:1e:e5:bc:0b:d3:85:c3:2a:bf:64:d1:46:f0:
a6:97:e8:aa:67:ef:0b:c7:67:15:53:4d:cb:b2:2c:5d:2c:94:
8c:63:18:7c:4e:e6:86:48:16:80:85:60:2b:05:fc:de:f2:9b:
ab:cf:45:00:98:36:c1:38:02:95:d7:03:05:cf:4c:ac:72:e0:
e7:c8:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:21:35 2025 by rpki-client