Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Ki3M_cTctXaYmYgt0HOHNTdyUc.roa
File: 7Ki3M_cTctXaYmYgt0HOHNTdyUc.roa (raw, json)
Hash identifier: suMlm1Ui/PNNABeqp2RJJpsCEmNcQJVqTnfV5Eh2l9Y=
Subject key identifier: EC:A8:B7:33:F7:13:72:D5:DA:62:66:20:B7:41:CE:1C:D4:DD:C9:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAAC807A5C36D70CB2EFE6DBCB18C6113
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Ki3M_cTctXaYmYgt0HOHNTdyUc.roa
Signing time: Tue 07 Nov 2023 17:15:17 +0000
ROA not before: Tue 07 Nov 2023 17:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:c8:07:a5:c3:6d:70:cb:2e:fe:6d:bc:b1:8c:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 17:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca8b733f71372d5da626620b741ce1cd4ddc947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:af:3b:db:2e:74:5c:85:ce:ce:95:29:3d:
58:5c:34:4d:0f:32:fe:a7:38:b7:64:35:4d:57:e9:
ff:9b:61:e3:3e:d4:ba:98:48:57:07:53:00:11:b2:
d1:58:37:3d:aa:5a:71:ae:cb:07:d2:63:59:f0:f4:
79:e5:b2:0b:25:00:0e:7c:06:08:08:d7:e1:c4:b4:
67:e8:9e:11:e2:78:b4:0e:fc:15:ea:8d:52:d5:45:
46:fc:41:3d:07:7f:7d:c3:62:c4:ab:fb:f5:c0:69:
0a:e1:e5:90:ae:b3:a5:65:74:41:24:41:9d:f4:48:
33:cd:32:06:9a:72:29:57:ca:8f:dd:f8:26:4b:6c:
99:bc:c6:d8:1e:d3:3f:85:79:ec:e5:d7:5b:1d:ec:
38:11:eb:7a:f5:6c:32:01:7a:b9:49:af:7c:ac:35:
bb:b9:67:a6:1d:1d:f9:2c:3d:2c:28:44:cb:75:86:
5e:09:3c:54:7f:06:01:14:da:c6:9a:af:b2:23:99:
56:ce:6a:fb:22:9c:15:9c:4f:70:cf:12:e7:a6:9f:
ce:91:65:91:b1:ec:f2:b1:c3:22:4c:e4:85:c3:03:
8f:6b:c7:b3:78:86:b2:e9:b4:45:dd:62:11:3a:5a:
9d:e7:f8:e7:0a:09:55:e1:35:90:d6:20:83:81:be:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:B7:33:F7:13:72:D5:DA:62:66:20:B7:41:CE:1C:D4:DD:C9:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Ki3M_cTctXaYmYgt0HOHNTdyUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:98:a8:75:b2:2e:3c:94:bf:ed:cd:32:94:0d:ca:4f:68:e2:
92:ce:91:73:13:e1:37:21:ff:7e:55:c1:64:d3:95:88:ea:c0:
d5:1d:d7:a8:3e:f8:f8:cc:fb:e3:1f:d3:eb:78:a7:49:7b:b2:
31:63:02:d5:5e:9b:b9:13:c9:89:bf:20:c4:2f:e5:56:4c:86:
e0:5f:2c:92:8f:cc:93:38:fc:1b:99:51:20:f1:3a:fa:62:c7:
4b:01:ff:a8:09:ef:9e:63:25:bc:35:21:a5:db:ed:a4:e9:72:
54:13:c5:79:32:3e:8d:2c:6e:f0:d4:9f:96:6c:b6:8e:23:b2:
5b:46:88:36:45:b6:c8:47:55:44:0e:eb:c9:16:18:f4:0d:ef:
48:8c:d9:15:be:4e:c2:db:c5:42:91:51:aa:a1:46:4e:54:2c:
18:2c:ab:89:cd:7e:01:70:71:50:c5:8f:05:f4:17:e8:24:17:
89:46:9f:1a:58:07:0a:60:30:ca:86:06:ed:63:08:54:71:1f:
6a:ed:5a:24:25:1d:76:3b:2d:2e:ba:37:c4:38:bc:92:f2:24:
6d:52:b2:12:ed:ab:5f:bc:1e:31:68:32:07:74:05:5f:44:02:
1b:e1:d7:77:a7:fe:0a:1a:0d:48:ce:a6:06:ec:c4:c1:81:2e:
e8:0b:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:44:51 2025 by rpki-client