Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/65xHfcOMosDjfEmr6o6AXkQMK2Y.roa
File: 65xHfcOMosDjfEmr6o6AXkQMK2Y.roa (raw, json)
Hash identifier: DN2yJtC/Evp8xzwGLGqYF/RbSaFVOFJ86lZDh9hZz1w=
Subject key identifier: EB:9C:47:7D:C3:8C:A2:C0:E3:7C:49:AB:EA:8E:80:5E:44:0C:2B:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB7DAE4A43EF75881D16FE5AB3BF90FF6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/65xHfcOMosDjfEmr6o6AXkQMK2Y.roa
Signing time: Fri 10 Nov 2023 06:10:57 +0000
ROA not before: Fri 10 Nov 2023 06:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:da:e4:a4:3e:f7:58:81:d1:6f:e5:ab:3b:f9:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 06:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb9c477dc38ca2c0e37c49abea8e805e440c2b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:d9:a4:6a:92:8e:6f:32:94:0b:ac:bf:dd:
82:51:62:7f:c3:b4:a3:a4:35:c8:97:46:16:7d:26:
6d:d4:01:f6:64:0c:6f:7d:49:ed:85:ba:de:f7:7c:
eb:3b:3e:82:2c:50:92:04:f5:e6:15:eb:7c:d9:74:
8a:45:78:9f:c2:77:8b:b4:b4:15:c1:46:18:ab:86:
f3:2d:dd:5c:bb:18:fe:d3:b5:a5:d5:2c:88:7a:b0:
3a:78:81:44:82:6d:1c:8c:ff:7a:26:a6:88:05:fb:
53:da:22:f3:54:d7:32:29:e8:ab:90:55:42:56:0c:
66:e8:78:fa:ff:28:26:c9:f8:d9:09:1b:7c:f0:6f:
dd:82:99:49:de:dc:39:26:13:4c:76:1a:af:57:ff:
79:08:61:13:e1:25:23:8f:92:80:7a:41:57:e8:e7:
f1:49:ae:81:fe:bf:d1:17:d6:f5:c4:44:18:f1:de:
56:2d:25:ea:f1:7c:92:3b:b5:00:58:23:48:7f:c5:
a1:74:8c:cb:e4:72:ba:5e:06:04:96:10:79:47:64:
9e:24:1c:a9:32:d5:ff:ec:18:6e:c5:f7:29:e5:c6:
d7:09:2e:63:22:d5:50:fd:8f:40:dd:f4:e5:8f:39:
58:ba:23:1e:23:1f:1c:32:d2:7f:a1:09:55:11:4b:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:47:7D:C3:8C:A2:C0:E3:7C:49:AB:EA:8E:80:5E:44:0C:2B:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/65xHfcOMosDjfEmr6o6AXkQMK2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:60:0e:7e:7e:b5:a5:81:ce:79:48:43:6a:b6:78:38:66:72:
94:cc:15:5d:e0:37:d8:2b:88:08:c1:34:1d:e2:78:a2:ed:dc:
d8:79:c2:33:9e:de:79:6a:95:9e:8b:3a:55:01:2f:22:a0:87:
f1:d7:e2:d6:1e:d0:41:62:4c:e0:85:8d:f2:fa:50:91:12:bd:
38:0c:38:2e:11:c1:14:c9:ab:48:8a:1e:a7:27:c2:df:2b:9d:
19:0e:49:02:1e:26:5e:9a:74:ff:25:97:c6:72:83:d9:28:f8:
70:50:4f:a8:14:da:1d:3f:fc:67:4d:72:2e:e7:c7:2d:5b:0f:
8b:8c:6e:e9:32:2d:45:38:4e:03:97:0b:bc:b4:72:a9:0b:4c:
15:6e:58:d4:9b:f7:b5:35:72:ed:cf:a6:18:f3:8f:68:3d:ef:
56:17:4b:ad:1f:95:0e:c9:ff:1e:38:b3:61:aa:3c:28:f8:e0:
ba:30:ad:24:17:b9:10:21:72:51:e3:9d:62:79:46:2b:57:47:
45:8c:f5:d4:42:30:60:df:2d:f9:30:f6:68:ca:89:5e:df:48:
e4:3b:fa:bb:5e:2e:de:94:96:73:50:9a:14:89:16:35:bf:2f:
a4:e7:d4:9d:3c:d7:9f:8f:bc:19:fc:27:cc:46:6d:ba:c0:db:
38:14:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:35:48 2025 by rpki-client