Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/myEjrGxe-p8E5DetI7OtR7bZA5U.roa
File: myEjrGxe-p8E5DetI7OtR7bZA5U.roa (raw, json)
Hash identifier: R075Kd+gCex/eySsMxeeMsJB9MRF/yuexyGStvW6bBM=
Subject key identifier: 9B:21:23:AC:6C:5E:FA:9F:04:E4:37:AD:23:B3:AD:47:B6:D9:03:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1B029521F496E588D2F0104D3486BA89
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/myEjrGxe-p8E5DetI7OtR7bZA5U.roa
Signing time: Tue 10 Oct 2023 19:13:55 +0000
ROA not before: Tue 10 Oct 2023 19:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:02:95:21:f4:96:e5:88:d2:f0:10:4d:34:86:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 19:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b2123ac6c5efa9f04e437ad23b3ad47b6d90395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:67:a1:4b:01:ac:c8:49:bb:82:46:bf:c9:
2c:f0:b0:4b:50:30:8f:a8:37:b9:17:b2:8a:12:f0:
c9:de:62:65:8e:0a:ee:f0:9a:d6:50:18:cf:3b:3f:
27:82:0d:61:fb:01:22:d3:b0:9e:26:55:c2:64:98:
4a:23:8a:fa:b2:0f:28:cb:63:e9:6b:64:cc:73:d8:
b2:f1:14:99:6f:b5:82:fb:16:16:00:2e:a3:a5:2b:
78:9e:7f:3a:51:d0:24:29:96:7c:9c:ae:4f:14:cf:
bc:da:32:e5:74:dc:83:a4:db:b2:ad:9a:79:d8:65:
37:9d:cd:db:4d:86:bc:f7:df:5e:09:25:44:d2:a9:
1b:cf:9e:7c:a6:3b:ed:dd:35:67:12:9c:4e:12:a2:
88:05:bc:26:be:56:ff:b2:3c:e9:1e:40:5c:32:f7:
bc:0a:b2:be:0a:e3:c2:f0:5f:62:94:eb:1f:83:85:
73:09:8b:19:e4:c0:cc:d5:71:24:85:a5:9b:9e:72:
08:a7:7e:80:52:3f:82:a7:13:52:59:09:37:68:63:
ce:52:9b:69:48:06:60:3f:81:82:51:c9:33:d0:c6:
14:14:54:b2:26:52:07:ab:05:f5:19:96:50:1f:0b:
e6:8d:01:27:0c:a2:e3:12:c6:a8:4f:fc:66:7c:04:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:23:AC:6C:5E:FA:9F:04:E4:37:AD:23:B3:AD:47:B6:D9:03:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/myEjrGxe-p8E5DetI7OtR7bZA5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:41:23:41:97:ab:b9:d9:1b:a8:bc:c1:75:84:da:1d:cb:b6:
a8:e6:50:e5:9e:84:98:16:b3:64:cf:bc:32:8f:d6:de:7a:68:
b0:ff:e7:88:33:e5:95:72:21:f8:71:e2:1a:22:61:03:aa:e1:
a7:05:d5:d1:dd:de:db:1b:74:40:ae:3d:6a:18:e9:2e:fe:75:
c1:be:ab:6a:2b:69:16:62:c8:88:30:26:8f:a5:39:be:16:7c:
e8:b6:9d:4f:8b:42:aa:35:44:63:23:53:a4:4e:49:03:87:c5:
11:62:5b:a4:71:1e:3b:91:97:42:3d:75:14:46:4e:08:38:7c:
57:45:ca:f7:c7:a9:5b:ee:7c:5e:c0:aa:13:6f:53:e8:0f:48:
be:6e:74:0a:bb:be:3d:c3:39:1f:c4:fb:9c:92:61:14:59:c7:
51:48:9e:bf:17:2c:03:44:37:51:ed:a7:63:c2:31:cb:f1:04:
9a:13:7f:76:95:b9:59:76:e0:ad:36:82:3e:e4:e1:c7:4a:4d:
3a:a6:ad:3b:76:4d:1f:3a:00:5a:14:78:57:98:a7:d3:b1:8e:
96:11:bb:7e:74:36:2b:ab:cb:00:79:3c:21:6d:58:b8:5c:bd:
67:ff:62:72:f1:74:6c:b0:ad:6a:f6:64:10:0b:2b:1a:8a:ea:
e0:06:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:08:41 2025 by rpki-client