Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eszxE1qm99X7q-ha5ud63I1f0lU.roa
File: eszxE1qm99X7q-ha5ud63I1f0lU.roa (raw, json)
Hash identifier: 7E8QHKkOiff0BwNjMh4qtY17Xr+/ybXdoyrRaoX8nnM=
Subject key identifier: 7A:CC:F1:13:5A:A6:F7:D5:FB:AB:E8:5A:E6:E7:7A:DC:8D:5F:D2:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE6A83CC34D0B73C9414C00EA5D5108DC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eszxE1qm99X7q-ha5ud63I1f0lU.roa
Signing time: Sat 30 Sep 2023 15:14:59 +0000
ROA not before: Sat 30 Sep 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:a8:3c:c3:4d:0b:73:c9:41:4c:00:ea:5d:51:08:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7accf1135aa6f7d5fbabe85ae6e77adc8d5fd255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:4b:ba:70:8f:0f:c1:63:03:9c:3d:08:17:
ee:2e:16:8f:32:36:d7:00:0e:64:de:cd:35:5d:be:
e3:12:1f:fe:84:93:2c:92:e4:44:df:a1:3c:ce:5f:
03:83:6a:68:0c:b2:bc:28:f5:97:38:23:d7:8b:6c:
f2:2b:4b:03:67:9c:cf:96:f0:7e:40:1f:53:66:ad:
f3:05:41:d7:f1:2d:5c:a4:17:0d:d4:4f:f7:7f:73:
a0:fd:b6:97:4b:d9:e4:cc:6c:1c:e0:fc:d8:cd:61:
c5:88:0b:bb:dd:c3:62:59:1a:17:c2:fa:f1:a8:d8:
b9:19:f4:4b:88:6b:97:95:e9:e1:5d:14:d4:b6:e7:
71:9c:c8:1e:f6:1e:fe:ee:bd:97:64:a0:c6:f8:93:
44:fa:53:cd:09:df:40:80:f9:e0:65:d9:e3:1f:cd:
9f:2f:00:62:ab:7c:2d:d5:6b:c9:5a:a4:52:86:ca:
90:d1:b5:85:71:c0:b0:e5:3c:09:7a:e0:24:6a:0f:
29:b1:cc:59:93:39:73:53:51:5e:63:ec:b5:25:81:
21:d7:38:1c:22:a2:c5:c6:f1:c6:9f:6b:92:37:26:
e2:84:31:d9:ae:8c:ce:3a:6d:8c:2e:9e:ca:87:65:
7b:2e:22:ab:0c:bd:17:ff:a7:ae:cf:8e:13:ed:e3:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:F1:13:5A:A6:F7:D5:FB:AB:E8:5A:E6:E7:7A:DC:8D:5F:D2:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eszxE1qm99X7q-ha5ud63I1f0lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:bd:23:62:b8:17:7d:b3:eb:88:2f:63:c2:86:27:44:8e:56:
d4:e9:23:f2:13:16:8e:ad:28:02:36:11:ff:35:71:b2:12:0a:
34:27:12:53:4c:13:34:c0:a7:06:1d:74:e3:26:47:bf:00:6b:
eb:3c:2f:4b:96:4a:fd:96:a9:4a:58:a3:fe:f6:f5:1f:e8:5b:
8f:12:63:58:1c:ea:b5:16:e2:e3:46:b9:4c:61:52:19:e2:e3:
ba:f2:eb:b5:85:eb:21:3c:d3:dd:fd:1a:7d:52:f7:b0:00:97:
b0:83:9d:ef:f3:60:71:26:4c:81:ca:4c:cb:56:d7:08:52:54:
6d:d8:fa:47:a4:6b:37:70:84:21:05:e9:dc:fd:c5:ef:01:fb:
e0:29:50:f5:13:2a:12:47:41:cb:7e:3c:9f:5a:2f:b4:25:d8:
7a:49:42:5c:57:ce:3b:ea:7f:29:81:e6:73:ee:b2:a8:01:3b:
1b:99:ec:14:f7:d8:6d:23:cf:9a:40:ab:0e:f0:36:1f:23:00:
65:63:63:5c:8f:38:15:d8:39:2c:eb:5e:ac:88:f8:5f:7b:08:
fb:9f:91:99:af:1f:2d:8a:9d:ed:08:a0:ac:a0:9c:73:cf:61:
37:b6:b3:f2:d8:b2:9e:62:7f:4a:83:e3:be:8d:07:b6:31:f1:
21:2c:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:26 2025 by rpki-client