Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ev-EIarDOIxl-PYfN34GZxvni8s.roa
File: ev-EIarDOIxl-PYfN34GZxvni8s.roa (raw, json)
Hash identifier: Pe4KTmvhQhGVa5qajzkRTxjB2ExPnerrtPQ7vshPep8=
Subject key identifier: 7A:FF:84:21:AA:C3:38:8C:65:F8:F6:1F:37:7E:06:67:1B:E7:8B:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD38FBC9F9C01B250496AB8A89DF8BC51
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ev-EIarDOIxl-PYfN34GZxvni8s.roa
Signing time: Tue 26 Sep 2023 22:15:27 +0000
ROA not before: Tue 26 Sep 2023 22:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:8f:bc:9f:9c:01:b2:50:49:6a:b8:a8:9d:f8:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 22:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aff8421aac3388c65f8f61f377e06671be78bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:79:39:c7:82:10:44:f2:aa:95:15:81:75:
93:71:d2:ac:f5:c3:99:b8:40:a4:78:71:fb:6a:78:
f4:b1:c5:46:ec:e9:06:2f:f0:db:1f:8d:39:39:88:
30:75:ce:25:b4:02:62:0f:f8:30:7b:7e:b4:52:48:
04:55:2c:2d:4f:c1:06:70:33:e4:0b:23:91:61:d3:
7a:16:c4:8d:99:a4:58:b8:58:a6:6e:f0:5a:fa:59:
38:36:b6:ef:3b:f7:1e:b7:ff:b3:d7:06:ed:20:bb:
b2:aa:78:64:b9:1d:eb:6e:1f:f6:41:f1:dd:67:84:
88:6b:82:62:29:c2:07:c5:77:c1:13:91:40:90:84:
d4:ec:19:f3:f4:20:19:33:2d:12:87:da:80:32:31:
cd:5a:07:fd:5a:df:a3:5d:1d:cf:1b:3c:12:f6:00:
d5:35:5e:1b:2d:0c:47:5d:3f:49:d9:d2:a1:60:57:
11:70:55:b2:4a:33:b1:cc:88:a3:aa:0e:a1:df:75:
a3:bb:66:a0:4f:ad:14:2f:0b:4f:2c:d5:26:db:65:
8e:4e:80:0a:74:21:87:f9:a3:07:03:b5:e0:45:31:
d4:ff:f7:8a:5e:87:16:1a:91:a5:90:53:d2:1d:79:
84:15:38:9e:21:25:15:47:8e:26:12:83:6a:32:99:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:84:21:AA:C3:38:8C:65:F8:F6:1F:37:7E:06:67:1B:E7:8B:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ev-EIarDOIxl-PYfN34GZxvni8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:47:d9:10:24:00:87:89:2f:96:e9:a0:b7:17:ba:96:cf:83:
1a:95:84:ef:a4:be:bc:8f:13:eb:fa:2e:e2:30:1f:1b:9d:e2:
27:06:d7:67:a7:38:25:1f:39:b9:e0:0c:b1:ca:ee:7f:ca:7a:
4b:7e:5b:38:79:90:06:e0:71:02:60:8a:d3:a0:98:57:67:23:
2c:88:eb:67:54:6d:e5:a0:f1:49:09:12:74:42:fe:83:01:51:
0c:01:4b:46:c4:7d:7b:90:6e:a5:f4:48:a9:19:0e:97:cd:19:
12:da:00:74:10:ac:eb:7b:43:a3:e5:51:47:e8:02:97:24:42:
c6:38:13:b1:5d:4f:45:fc:3f:92:5a:26:c1:c4:87:5d:75:ba:
c1:c6:06:f3:65:73:19:06:4f:11:8e:23:97:29:18:ff:d7:c3:
5a:5b:58:f0:7b:07:2d:4a:48:2e:5e:ad:c2:97:13:d9:b9:ae:
6b:15:9f:e7:7e:6f:86:2a:a1:d6:b2:51:66:1f:42:ae:a0:ff:
53:21:e8:a3:26:c6:4e:4c:61:c7:22:1b:25:33:a0:b4:d3:22:
2f:01:54:fd:12:3d:f6:33:4e:f3:d0:54:3f:4e:f3:0a:d7:a1:
11:4b:7e:d7:a3:1d:f1:62:22:11:ac:35:9a:39:03:25:f6:b0:
3a:47:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:49 2025 by rpki-client