Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/evaR65m_cAyot5DrS7fO1FMXeOo.roa
File: evaR65m_cAyot5DrS7fO1FMXeOo.roa (raw, json)
Hash identifier: N2vml4nt00N3eeHgqwiND8ntKqhzG7ixNzPBe0w8/Rg=
Subject key identifier: 7A:F6:91:EB:99:BF:70:0C:A8:B7:90:EB:4B:B7:CE:D4:53:17:78:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1DC99F0B6BA4D33DBF6AB5AEB9E635E3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/evaR65m_cAyot5DrS7fO1FMXeOo.roa
Signing time: Thu 30 Nov 2023 01:13:21 +0000
ROA not before: Thu 30 Nov 2023 01:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:c9:9f:0b:6b:a4:d3:3d:bf:6a:b5:ae:b9:e6:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 01:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af691eb99bf700ca8b790eb4bb7ced4531778ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:c4:20:04:6a:c4:42:41:f5:b0:3a:74:14:
3b:24:ad:d1:cc:7e:7b:45:4d:36:64:c8:33:23:7f:
6d:72:ed:1d:3e:d3:cb:65:7c:c9:f6:fc:43:b1:63:
6b:e9:1d:c4:f3:71:7f:d1:c9:db:73:a6:cd:f4:62:
d0:a1:7b:41:97:8c:33:8f:94:26:1d:ba:88:7e:9d:
70:39:70:0a:3f:7b:d4:95:5a:78:98:b5:5d:a8:7e:
55:e5:b1:df:c9:37:9b:ac:3c:83:ab:e0:d8:a2:2a:
4b:a2:c0:34:a9:19:66:a5:1a:cc:c7:48:07:4a:47:
b8:cd:c0:e7:e4:0a:95:84:87:68:02:00:48:af:f0:
60:e3:a2:fc:e3:11:8d:5a:3e:60:13:64:a3:a9:49:
db:48:8d:41:a2:21:55:28:d1:be:ae:47:11:2b:e9:
2d:91:f1:df:54:b0:df:55:2f:1a:99:42:12:b5:06:
16:8f:53:15:6a:d9:36:f4:77:86:55:97:8f:a5:2d:
16:e8:f5:d8:28:d7:1d:d1:ce:fc:84:72:a6:92:ff:
ca:a7:12:36:a1:8a:f6:96:46:9a:c8:a3:7d:c8:f7:
c1:19:f4:9e:a7:c3:2f:eb:c6:97:7a:e1:ae:4a:dc:
6c:41:e5:2d:69:55:3d:39:ee:5e:4f:37:9e:7b:c2:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F6:91:EB:99:BF:70:0C:A8:B7:90:EB:4B:B7:CE:D4:53:17:78:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/evaR65m_cAyot5DrS7fO1FMXeOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:79:9b:ff:84:59:a5:29:9f:ba:58:29:ad:71:b6:06:ce:e7:
4e:b3:0b:a4:12:e9:db:93:21:f7:73:ca:c9:31:d7:a2:c0:ee:
d9:15:ea:a0:8a:b5:18:f0:28:32:2a:8a:15:63:89:c0:aa:68:
40:f7:2a:9a:ec:11:cb:94:83:51:cb:5b:86:32:e0:e9:f7:75:
8c:ad:53:ce:5b:17:32:6a:40:f2:c3:f5:17:01:93:03:8c:46:
08:f8:5e:a0:b8:da:39:e9:b5:c8:b6:a4:d6:54:9d:79:6f:69:
54:fc:3a:f8:6d:4d:25:f5:bf:a4:74:f9:98:89:dd:9b:fe:91:
eb:e9:80:b0:c4:49:8e:27:64:c0:3c:2f:77:e8:d9:66:ab:b0:
3f:b8:3c:90:93:bd:a2:7d:d0:96:77:8c:f0:63:16:e3:ff:7c:
b4:50:43:68:75:01:8f:c7:b0:8d:4e:d2:f3:da:13:26:6c:d8:
01:07:84:5f:a1:0a:6b:33:bc:fe:69:75:50:37:16:af:c5:c1:
97:e2:63:6d:7f:b6:65:62:fa:04:4c:bb:69:88:01:bf:7d:76:
a7:e6:bb:e1:4d:6a:15:4f:61:99:01:06:a4:01:ca:cf:aa:d2:
92:56:d0:2e:73:06:ff:a6:03:ba:78:c5:6c:ee:1d:6a:7e:42:
04:ac:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:51 2025 by rpki-client