Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7EARL1NgPK-cA8Y9eCfPfrU1WNY.roa
File: 7EARL1NgPK-cA8Y9eCfPfrU1WNY.roa (raw, json)
Hash identifier: CH9zCWj7r0snDBf9DNC61vllV/p7+a4eiyWFN15Hgqo=
Subject key identifier: EC:40:11:2F:53:60:3C:AF:9C:03:C6:3D:78:27:CF:7E:B5:35:58:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C65A4283C777EC29D8E0141DFA75DCBE8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7EARL1NgPK-cA8Y9eCfPfrU1WNY.roa
Signing time: Thu 14 Dec 2023 00:05:06 +0000
ROA not before: Thu 14 Dec 2023 00:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:65a3:5756/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:a4:28:3c:77:7e:c2:9d:8e:01:41:df:a7:5d:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 00:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec40112f53603caf9c03c63d7827cf7eb53558d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:b7:d9:71:0e:c2:71:4e:75:4c:27:b9:92:
e6:36:e9:28:0c:17:5d:ad:33:31:bf:3e:50:95:cf:
45:6d:4b:34:49:32:4b:22:c7:f3:e9:1d:cf:8e:a4:
a4:f1:f3:6b:ed:69:cc:93:a2:8a:69:d4:5d:37:44:
33:94:97:38:5d:54:11:90:9d:de:29:44:cc:a5:81:
16:28:57:c3:25:66:8c:a3:8a:e6:ef:7e:a9:be:58:
ed:2f:73:99:6d:8f:b9:85:0e:66:b8:8b:62:10:4c:
a7:a9:cd:11:14:af:de:fa:b4:73:63:1c:85:04:6a:
a4:b4:72:38:80:24:1c:3f:4b:99:d6:7c:c3:f0:44:
9a:13:a6:eb:de:a5:89:2a:1e:17:ef:f5:50:e5:80:
08:2f:1e:ec:fd:76:69:d0:75:68:73:80:86:e0:cc:
a3:ac:fb:67:b5:2a:48:e0:d0:d6:e5:12:a8:ec:52:
6e:b3:4b:48:59:c6:e1:c8:0e:ea:3a:17:e6:91:2f:
b5:c4:1a:1f:c1:3b:81:1c:fd:a9:b5:67:30:0e:75:
3e:9c:93:a5:5c:81:6b:d1:61:5b:da:ce:29:4f:cc:
e4:02:60:06:ae:2e:74:2e:28:a4:a8:b6:29:21:4c:
e2:cc:9f:a4:d5:6a:1c:e5:6a:32:ee:dd:81:17:63:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:11:2F:53:60:3C:AF:9C:03:C6:3D:78:27:CF:7E:B5:35:58:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7EARL1NgPK-cA8Y9eCfPfrU1WNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:65:44:08:38:3f:98:af:2c:9c:5b:40:40:b1:d8:29:da:3a:
69:f8:04:24:c7:3a:4a:8a:35:a3:9c:7a:e1:d8:ef:c7:e5:98:
dd:35:5d:2a:c9:fe:f8:e3:1a:af:29:e8:bd:7e:ab:58:3b:1f:
40:37:f4:b2:e8:f3:d7:27:e3:a6:9d:2f:24:a3:d4:78:77:87:
a8:2c:e1:ca:4d:0e:b1:cd:f5:bd:14:70:fd:37:c0:a7:da:1d:
b0:10:f7:41:e4:8b:d2:b1:e2:8f:77:8a:1a:a9:2d:72:48:60:
ea:86:ae:7a:07:3b:fe:92:f0:db:c4:cd:16:22:da:74:7f:f5:
a6:0d:45:52:36:e2:fa:ff:db:e1:e0:40:dd:e4:d7:bd:bf:4a:
2e:9b:fa:1a:6c:1f:1e:ec:8a:e9:77:68:b8:33:62:0f:6b:d9:
5c:2a:0b:e3:ae:c9:10:29:6f:11:32:29:52:dd:1c:37:14:db:
1e:bf:e1:86:d9:61:f9:21:22:95:14:a3:ec:f7:22:fc:29:5d:
17:1e:8f:13:8b:21:1d:a5:28:89:e8:d9:86:0d:ba:b7:d1:7d:
f0:13:e1:73:53:5f:22:2a:13:f0:26:73:6d:14:49:a8:ea:7e:
3b:dc:b3:96:f7:de:4f:48:d3:c6:a2:23:e2:c2:44:0d:89:8f:
f4:f1:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:41 2025 by rpki-client