Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eXIL51vmaXG7o76uRI2admCIBs.roa
File: 2eXIL51vmaXG7o76uRI2admCIBs.roa (raw, json)
Hash identifier: C8CPNGIeVW2IV1vqJwlZosfYv8+Xvw5e4NcFqGCB91U=
Subject key identifier: D9:E5:C8:2F:9D:6F:99:A5:C6:EE:8E:FA:B9:12:36:69:D9:82:20:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C16EAE3D80D33EEC0813A6C025F81C09A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eXIL51vmaXG7o76uRI2admCIBs.roa
Signing time: Tue 28 Nov 2023 17:12:21 +0000
ROA not before: Tue 28 Nov 2023 17:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:ea:e3:d8:0d:33:ee:c0:81:3a:6c:02:5f:81:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 17:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e5c82f9d6f99a5c6ee8efab9123669d982201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:8d:18:4a:56:64:55:9f:c1:fb:3e:74:fc:
b8:98:a7:a7:f0:3b:cf:12:db:e1:90:f6:1e:d8:67:
1a:a1:d9:ad:68:0e:94:63:a2:ce:ae:d5:24:1e:48:
8e:71:47:82:5f:2e:ff:9d:cc:45:0c:99:89:89:cc:
0e:80:99:f6:6a:a9:20:f0:ec:b9:08:b3:eb:f0:37:
c9:2b:78:35:07:9d:19:4c:ca:3e:6b:dc:4b:d3:42:
1e:cc:60:ac:69:b2:87:ae:53:47:5c:c0:90:1e:33:
6e:1f:8d:dc:8c:fc:3e:5b:70:bc:3c:9e:31:d3:07:
7e:4e:56:d8:b4:6c:63:3a:29:63:dc:f0:4c:c8:8d:
98:29:2c:01:fa:e7:20:c3:92:58:5f:ce:83:56:78:
96:58:53:7f:89:72:f5:63:5e:50:8a:22:21:9b:21:
aa:20:1b:71:29:23:3a:28:d6:b4:e4:d0:73:63:18:
95:ba:82:71:ea:bc:55:09:53:7e:72:17:d4:6f:55:
a4:a2:71:b3:d2:c7:32:72:55:e4:c4:0b:9b:12:0b:
bc:fd:6f:80:f8:53:0c:6c:a8:2f:ab:2c:cf:67:9e:
b7:30:e9:0c:da:de:05:49:a5:f6:01:bd:7e:8e:5e:
65:54:4d:f8:72:19:b3:88:6c:a5:28:2f:a3:a4:1d:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:C8:2F:9D:6F:99:A5:C6:EE:8E:FA:B9:12:36:69:D9:82:20:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2eXIL51vmaXG7o76uRI2admCIBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:aa:e5:74:de:59:4b:a9:03:53:63:4d:33:c9:e3:77:70:97:
2c:ff:ac:82:01:8a:2e:bf:35:44:ca:3a:e6:e8:ab:08:30:4d:
a9:80:3f:8b:32:69:f5:a1:4f:e3:4b:c4:0e:9e:15:37:f7:88:
30:8e:e7:57:e2:d3:3f:9a:e7:3b:71:3d:cc:d1:dd:e3:ab:22:
ac:73:b4:de:12:3e:5c:22:e8:43:f4:ba:93:bc:37:49:b5:eb:
4c:c7:92:1c:ee:9d:1d:8e:17:93:cc:2b:59:f7:f7:40:33:b3:
58:2b:62:56:2a:cf:bb:d8:91:b2:45:73:26:e2:5c:75:a1:b8:
b5:5d:c6:e6:16:91:f8:df:64:a6:ce:a1:16:40:60:bc:b9:43:
ea:53:2b:a0:f7:a9:69:2a:84:f5:ca:6e:ac:65:ed:43:f0:85:
1f:68:fc:a5:c4:12:33:81:32:1b:a5:2b:3b:da:d0:15:8a:a7:
6b:11:e6:78:c7:77:ae:b1:88:ea:40:46:58:4e:f7:36:15:a6:
40:8f:74:18:22:75:29:9e:cb:a7:08:f1:9a:8b:3a:6e:41:66:
3e:ea:d5:a9:d5:4b:13:62:4c:9f:95:9e:7f:aa:12:aa:be:a3:
e7:46:9f:5c:be:26:5c:e3:c8:e9:cf:47:4b:6d:7b:74:94:de:
ff:72:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:06 2025 by rpki-client