Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7FfELbqtNiwoTkIx_ra_tE2VAsI.roa
File: 7FfELbqtNiwoTkIx_ra_tE2VAsI.roa (raw, json)
Hash identifier: OkRj+2ORm9XOpMYzxTSHuRdaNL3+uyGvIKsfls4Lz4g=
Subject key identifier: EC:57:C4:2D:BA:AD:36:2C:28:4E:42:31:FE:B6:BF:B4:4D:95:02:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF6F7678BCCDD26F45AF8D371C96A87B4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7FfELbqtNiwoTkIx_ra_tE2VAsI.roa
Signing time: Tue 03 Oct 2023 19:15:23 +0000
ROA not before: Tue 03 Oct 2023 19:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:f7:67:8b:cc:dd:26:f4:5a:f8:d3:71:c9:6a:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 19:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec57c42dbaad362c284e4231feb6bfb44d9502c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:41:6b:9c:a5:c7:5c:67:1e:71:c6:8f:3e:
ea:3c:7a:ff:e1:6b:2b:70:ab:e4:be:5c:01:41:92:
06:bb:03:94:e9:1e:af:1f:1e:e4:53:51:4f:0d:09:
54:3a:46:b8:28:3f:c2:15:71:c8:75:f4:2e:39:1f:
ed:75:b4:43:51:d6:85:b4:29:35:6e:cf:f2:e3:8a:
b9:2b:62:6f:12:2f:5d:04:e3:a4:39:45:74:c5:5c:
db:82:12:e9:fa:ee:90:86:03:b9:6e:61:a7:21:d0:
49:7e:d0:2b:33:b7:22:31:80:82:d5:c6:ae:44:82:
8e:6c:59:a3:22:e7:b3:0b:90:e9:c7:ff:4c:02:2b:
75:1a:57:17:c7:4b:c2:62:c0:fc:01:3f:03:42:dd:
0a:0e:ec:99:b8:ea:5c:d8:4f:8d:f2:7a:a8:23:ea:
be:38:c6:1e:f4:33:35:5c:67:a5:c0:2e:a9:a4:f5:
92:1b:4c:f8:dd:35:a4:a5:e6:c7:5e:c9:16:2f:e2:
b7:e5:9d:87:37:b3:fb:79:06:3e:41:02:53:c0:99:
e0:fa:c4:7a:61:b8:38:59:0a:2b:39:7d:dc:64:b7:
37:a3:b7:53:35:a0:ba:a6:8e:0b:c5:d9:f7:fd:40:
99:bb:82:d9:46:59:93:20:47:d7:1d:ec:04:c3:77:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:57:C4:2D:BA:AD:36:2C:28:4E:42:31:FE:B6:BF:B4:4D:95:02:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7FfELbqtNiwoTkIx_ra_tE2VAsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:af:de:80:23:33:95:69:47:6b:31:7d:3a:45:71:e4:06:44:
e5:b9:f5:59:2b:12:d7:62:ff:7a:51:77:a5:c8:5e:17:59:39:
56:6c:08:6b:bd:a7:40:4f:14:98:e8:b8:7a:17:da:03:18:2e:
dc:c3:49:df:78:30:4d:0b:43:aa:aa:e5:ee:a6:de:da:ac:0d:
eb:ea:bb:35:50:19:04:8d:63:86:33:7d:f7:e0:42:01:e1:d8:
c5:72:ec:c3:3f:ba:68:8a:7d:b8:14:1c:02:53:da:7c:1d:2a:
df:8f:53:7a:cf:f2:f6:bd:50:00:94:c1:eb:e9:ae:8f:59:a5:
72:1b:a3:81:a9:d1:8a:2e:15:21:17:e4:db:4b:98:29:1c:94:
58:24:f8:28:f4:69:d9:19:aa:f5:46:35:4f:82:c7:6f:05:90:
c6:4b:ae:40:ee:27:7d:aa:cd:bb:69:b5:08:dd:72:df:61:7e:
85:d2:ba:7e:4e:26:eb:17:84:83:c7:47:ec:8a:13:83:47:da:
34:04:a0:17:ed:e9:70:a5:21:6f:65:3e:e4:5d:a9:73:32:d2:
c3:a9:c1:92:ad:f6:b8:1c:75:14:66:d2:64:8c:19:e6:3c:1b:
4b:03:be:c0:27:97:c3:36:f6:0d:f4:fb:6f:4e:6c:b3:63:2c:
12:6a:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:23:09 2025 by rpki-client