Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eofsy0N_BVesbfpRVQt3GV9aiLc.roa
File: eofsy0N_BVesbfpRVQt3GV9aiLc.roa (raw, json)
Hash identifier: HJIx/6fhsVIuY4PeR+zTEZbwDpkrpsXOO9e4ocqP7TU=
Subject key identifier: 7A:87:EC:CB:43:7F:05:57:AC:6D:FA:51:55:0B:77:19:5F:5A:88:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9519289B3219FBC4EA14BC8C5E388F7A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eofsy0N_BVesbfpRVQt3GV9aiLc.roa
Signing time: Fri 03 Nov 2023 12:12:15 +0000
ROA not before: Fri 03 Nov 2023 12:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:19:28:9b:32:19:fb:c4:ea:14:bc:8c:5e:38:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 12:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a87eccb437f0557ac6dfa51550b77195f5a88b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:d5:4f:da:09:38:76:fa:6d:17:5a:ff:bc:
fb:46:57:b3:13:23:dd:0a:0e:2d:ec:b0:97:dd:4b:
da:1d:8c:8c:ac:b6:45:25:0c:19:78:00:d9:21:eb:
43:27:cb:83:b3:3b:1a:a8:fe:6d:09:a3:54:71:b2:
70:93:21:19:26:87:33:19:4e:51:82:fa:35:3e:a7:
69:1b:98:31:92:3b:46:2b:23:03:ad:9f:3d:30:d7:
22:f6:26:bf:dc:a2:0e:91:4d:bb:71:d0:c7:b6:91:
fc:8f:51:40:9a:56:a4:8d:06:14:ee:97:ba:59:69:
9e:ea:de:9d:29:e9:62:cc:a6:8d:07:3f:73:31:f2:
44:b1:b9:3e:d7:f8:35:75:a6:86:99:e6:be:02:54:
92:b4:e6:d5:40:aa:b6:9e:6b:e2:7b:90:f9:8e:47:
df:7c:7a:a7:d5:fd:1a:6f:02:ae:28:72:56:fb:42:
6b:8e:0a:e4:17:4f:72:67:8d:ab:c9:57:39:dd:cb:
b2:06:1e:f6:ad:8b:4a:9f:40:94:44:af:09:12:01:
2e:58:5a:0a:d7:99:a7:c6:84:51:5a:43:45:bc:b1:
a5:2f:5a:a4:a1:b8:07:c1:4e:15:87:9c:45:0e:da:
b6:c7:28:fc:2d:97:9a:7c:8c:3b:c9:10:23:ca:5f:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:EC:CB:43:7F:05:57:AC:6D:FA:51:55:0B:77:19:5F:5A:88:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eofsy0N_BVesbfpRVQt3GV9aiLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:75:c7:fe:e5:cb:0c:73:3f:8d:69:35:8b:fd:4e:25:f9:d0:
00:6c:35:d1:ad:7b:69:ed:5e:8e:ed:50:11:36:9b:48:c0:03:
4a:e7:08:6f:7d:5b:00:82:9d:19:6b:57:0e:7b:37:6e:52:3d:
55:01:f8:94:79:54:cb:23:a1:97:ca:12:a2:f2:95:8a:d6:d0:
19:e3:a2:27:7d:da:d5:4d:7c:84:ad:7d:ca:0b:b5:b5:ba:9a:
58:e4:db:f5:24:d6:6e:5b:52:68:56:a8:a7:81:33:a9:16:54:
e4:f6:99:76:7e:6b:03:ca:fb:2a:f0:74:07:7f:fe:15:56:ac:
6d:c7:2b:8a:df:50:de:82:d6:7d:cb:7f:99:f2:c3:04:03:2e:
86:56:3a:b4:34:24:4e:ff:c5:0b:21:93:d6:ba:89:e3:dd:28:
cc:42:5d:79:2d:56:f9:2d:cb:40:7e:99:6c:86:d7:b9:68:c9:
49:96:58:1c:9f:f2:53:46:75:28:21:d0:a5:16:fd:02:c4:f2:
d1:0c:c4:e5:12:68:a8:7a:94:09:4a:98:87:10:96:6c:18:54:
85:a1:2b:51:3e:4a:b5:3a:ff:f3:28:3c:e0:85:24:e1:5f:40:
30:34:ce:0b:b9:87:42:14:d0:65:30:75:7a:e3:59:a1:d9:13:
5a:f1:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:40 2025 by rpki-client