Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7-kFxZSOiltI1t_KAu8qFWOxDaA.roa
File: 7-kFxZSOiltI1t_KAu8qFWOxDaA.roa (raw, json)
Hash identifier: 5Q5ObBCQmAYlqFF5zPPX9nxX1G65FH0Iwy603N5y2oU=
Subject key identifier: EF:E9:05:C5:94:8E:8A:5B:48:D6:DF:CA:02:EF:2A:15:63:B1:0D:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B31C32A11D5CF4F2A71AE90BA4B8FC1B2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7-kFxZSOiltI1t_KAu8qFWOxDaA.roa
Signing time: Sun 15 Oct 2023 05:15:55 +0000
ROA not before: Sun 15 Oct 2023 05:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:c3:2a:11:d5:cf:4f:2a:71:ae:90:ba:4b:8f:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 05:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe905c5948e8a5b48d6dfca02ef2a1563b10da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:cf:55:93:02:c5:00:a0:de:03:45:32:0d:
ad:2b:4e:27:c7:c5:93:1f:b3:88:6b:e0:51:8d:d4:
6d:db:28:21:12:43:fd:02:d9:b0:a9:a5:b8:4b:7a:
c1:76:1f:7b:74:1b:88:b7:f4:af:48:fe:c6:93:fe:
e4:21:e2:be:cd:91:c6:2e:e0:5b:d3:c5:33:0d:80:
e1:d3:33:67:0e:0c:a5:da:ae:dd:e2:53:bd:3e:18:
b4:2d:8d:bf:60:0b:93:7a:d6:8b:c5:ee:f4:2e:24:
98:f6:f1:d6:b6:eb:23:30:bf:5e:73:e4:1f:0d:09:
d6:25:ce:32:ae:9c:71:52:2c:04:bc:a2:c7:f6:56:
65:30:c9:5b:54:d1:0a:19:c7:c9:34:e6:bd:02:e0:
d8:78:8c:38:d7:64:5d:dc:6e:61:e8:7f:30:ab:f2:
19:6e:88:fb:b3:59:55:75:a1:d7:d2:80:87:6b:ed:
db:fc:6a:96:c7:76:89:50:fa:a7:a4:b6:5a:87:ba:
fc:b1:6a:04:8a:a4:19:67:81:78:cd:74:f7:b5:d0:
25:35:d7:52:2c:d5:ac:46:95:83:17:84:49:6a:11:
bb:61:4c:34:b5:74:55:5d:0c:84:76:b2:7f:2f:a8:
d4:81:7a:db:4e:84:52:77:51:ad:4d:26:57:6d:f7:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:05:C5:94:8E:8A:5B:48:D6:DF:CA:02:EF:2A:15:63:B1:0D:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7-kFxZSOiltI1t_KAu8qFWOxDaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:12:e6:2c:ca:0c:2d:52:ef:a9:61:d0:95:ce:b1:df:9b:00:
ec:af:00:37:db:ce:5e:b4:e8:b5:eb:b5:38:53:24:4c:53:d8:
59:8b:03:6a:b3:1a:12:3d:b5:d9:cf:47:11:77:3d:0a:e4:07:
66:25:21:8f:d3:50:ff:99:5d:81:d7:eb:4a:0c:c4:4a:a8:ca:
47:55:d0:a7:0c:4a:e5:61:3a:4b:69:f0:7e:b7:a4:f6:1c:07:
68:52:7c:e2:80:3d:59:58:19:51:cf:ca:08:0a:48:18:49:83:
42:0c:50:a6:47:a2:7f:c9:55:af:3b:bc:1a:10:19:68:b9:ab:
f1:87:d2:5a:34:4e:12:6c:c3:fb:3c:35:37:7a:b4:32:37:f7:
94:c3:36:59:ea:41:06:c1:73:50:56:37:7a:77:fa:40:d2:a2:
cb:b6:01:5b:83:23:4f:c1:7d:7e:72:80:8a:1f:92:47:56:5b:
7c:59:cf:66:82:d2:8b:53:96:73:ea:6d:df:9d:3e:99:e7:d6:
df:1d:44:1a:f0:d0:8d:eb:c1:e0:91:83:08:f8:6e:68:94:1e:
81:c7:01:97:8a:18:54:c7:25:7c:5f:b6:b6:53:ca:df:c1:ac:
3d:aa:50:b7:11:20:a8:a3:34:d8:a2:04:67:f6:eb:8a:15:9a:
ab:1c:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:32:46 2025 by rpki-client