Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/epJnMNEYWB0wbYwRfJOTwC087BY.roa
File: epJnMNEYWB0wbYwRfJOTwC087BY.roa (raw, json)
Hash identifier: riquBSeZwcUSDvHT/doIZSU3cSewOS5sfL388EEiRwM=
Subject key identifier: 7A:92:67:30:D1:18:58:1D:30:6D:8C:11:7C:93:93:C0:2D:3C:EC:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5D4EFC10EEF6EE572828EB5D426FB065
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/epJnMNEYWB0wbYwRfJOTwC087BY.roa
Signing time: Tue 12 Dec 2023 09:15:06 +0000
ROA not before: Tue 12 Dec 2023 09:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:4e:fc:10:ee:f6:ee:57:28:28:eb:5d:42:6f:b0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 09:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a926730d118581d306d8c117c9393c02d3cec16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:f5:25:97:41:58:25:15:36:ff:01:29:b9:
2a:c4:d1:72:67:80:28:9c:f7:7f:5e:34:b2:fd:cc:
8e:fe:67:9c:df:07:a8:91:53:04:13:1b:c5:a0:87:
34:af:5c:2e:cd:e9:75:04:bb:5b:87:13:0b:d9:52:
22:fd:0c:d8:03:7b:38:62:00:e5:e6:56:51:f0:34:
21:f0:b6:76:ed:18:14:e7:7e:9d:00:e9:02:0c:30:
4d:a7:17:b4:79:f1:af:93:9e:5c:56:54:de:cc:ea:
90:54:a2:9f:48:4f:6d:f4:39:40:ed:78:63:40:de:
88:29:67:36:3f:05:d5:90:58:98:fd:56:16:03:97:
78:7f:0a:5a:35:65:fa:d1:16:7c:df:23:9e:84:4a:
b5:22:b9:12:ed:00:b3:2d:6e:d2:b3:e3:ea:fc:ec:
c9:94:0d:ff:c8:6b:0f:2a:59:b8:31:40:74:82:99:
d7:5b:3d:9c:b2:d5:85:73:c5:cf:33:a2:82:83:6d:
6e:bc:21:bc:f3:7c:e6:51:b9:e2:d4:14:b3:50:9c:
69:2f:c5:eb:23:1b:00:07:a6:a2:9d:f0:65:42:27:
87:38:4a:a7:25:d8:99:0b:6c:8f:a1:9c:5f:92:a6:
6f:f3:1e:82:ec:59:8f:d8:c7:a1:8a:42:c4:63:11:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:67:30:D1:18:58:1D:30:6D:8C:11:7C:93:93:C0:2D:3C:EC:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/epJnMNEYWB0wbYwRfJOTwC087BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:72:9f:99:c3:31:55:3b:92:bc:34:36:34:f5:04:c8:35:7b:
68:43:59:ea:66:22:59:ef:d1:0c:b0:8e:85:cb:70:66:fa:dd:
7c:9c:e5:ed:18:62:d9:a4:73:50:c6:4c:bc:2d:2a:b7:8d:64:
a5:0b:b2:fd:c7:30:c5:2d:8e:d9:81:58:a6:02:61:c9:83:ff:
8a:8c:c0:7b:d2:45:d5:a0:10:07:d1:6e:3e:76:8a:fc:22:f4:
a1:e5:56:5c:94:38:58:c7:05:6b:d8:0b:88:76:f1:0a:23:5f:
4a:c6:09:a5:d9:d5:b9:01:82:17:99:2b:84:a5:2d:48:6b:6b:
ab:1f:96:27:7b:2e:e9:b5:48:44:3a:c2:0b:84:a6:66:99:04:
25:7d:7b:60:53:2e:51:f8:54:b1:3e:55:f9:f0:61:f7:6a:aa:
8e:f3:4f:dd:f2:af:0c:7c:ec:e3:66:46:18:4e:5e:90:6d:fd:
2b:92:89:f0:2e:13:3e:56:a3:4c:17:2f:73:f6:b2:b5:78:4f:
d3:4d:9a:53:c3:4b:8c:06:71:f5:10:e4:8b:af:dd:01:e0:77:
eb:1e:81:6e:6b:dc:d8:12:30:cd:08:bc:7e:9f:d3:0f:5f:14:
17:b8:18:c3:19:fb:06:9e:0d:ef:ed:e8:20:c1:ac:0b:fc:af:
53:68:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:53:13 2025 by rpki-client