Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7pIXhKh6JmrYphQuWHxQC9dUo4s.roa
File: 7pIXhKh6JmrYphQuWHxQC9dUo4s.roa (raw, json)
Hash identifier: QzAmVhKY3x+V5bInZpRrqTX4in4yWcn6jHvw0YdSg2M=
Subject key identifier: EE:92:17:84:A8:7A:26:6A:D8:A6:14:2E:58:7C:50:0B:D7:54:A3:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6129EB84AA41E9FC4643532324F6594A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7pIXhKh6JmrYphQuWHxQC9dUo4s.roa
Signing time: Wed 13 Dec 2023 03:13:06 +0000
ROA not before: Wed 13 Dec 2023 03:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:29:eb:84:aa:41:e9:fc:46:43:53:23:24:f6:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 03:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee921784a87a266ad8a6142e587c500bd754a38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:b5:b3:ef:ee:c3:84:be:7d:13:b1:54:27:
e9:71:1f:30:60:47:4a:48:5e:77:ac:84:86:01:42:
f6:89:fd:3b:63:cf:cb:f7:ed:4d:7b:6f:0e:ef:a5:
ec:da:57:fb:db:65:49:68:8e:fb:fa:29:6f:d2:b6:
61:23:43:b4:dd:10:d6:3c:64:7f:03:47:65:fc:75:
47:c0:80:27:45:37:6f:df:fa:6f:b2:fd:61:71:5a:
0e:96:59:1f:63:4e:ed:ec:2d:31:68:60:fb:88:b6:
2e:3d:94:aa:d7:67:0c:9a:e5:05:18:aa:8f:62:fa:
3a:95:ea:cd:0e:51:8b:e1:d4:e7:f9:3f:27:36:ae:
02:d2:2e:ff:82:85:74:fe:ee:9a:03:d0:c0:66:b8:
31:ba:67:7a:ea:c6:da:c8:ea:3e:07:49:42:c1:a8:
9a:e2:d6:f8:77:ea:7e:32:58:a6:70:34:76:6e:7b:
89:ad:be:79:32:6f:0d:ea:54:f7:00:b9:54:f9:6a:
bd:6c:ad:0c:e1:0f:e4:85:d4:8a:3b:f6:14:90:fa:
3c:9a:e3:fb:e5:86:f7:e8:5c:27:51:c4:cf:0d:43:
9b:43:c0:05:c3:c9:8b:1d:9d:51:03:d7:60:a1:ff:
9f:3d:a1:58:82:b8:c2:ce:96:74:96:cc:07:7f:31:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:17:84:A8:7A:26:6A:D8:A6:14:2E:58:7C:50:0B:D7:54:A3:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7pIXhKh6JmrYphQuWHxQC9dUo4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:b4:e7:08:fe:9e:45:47:70:79:6b:99:44:28:10:5b:25:98:
08:cb:41:11:e4:20:8e:ff:99:e5:f1:b4:e6:34:d9:60:8e:b8:
6e:72:35:64:dd:c7:7f:e4:b3:40:f4:5e:c9:6a:72:58:f0:8c:
25:88:a7:6d:1e:7e:28:07:fe:60:43:d4:8c:ac:95:70:7c:30:
f3:37:83:b3:e0:1c:67:b3:cf:ae:af:1a:8e:ff:6f:16:f8:69:
ea:aa:27:2b:ab:3c:ff:6b:e7:04:9a:9b:9b:46:ea:3e:38:a0:
0a:ea:2a:e4:95:3f:7e:ff:0f:8c:4e:ad:28:d7:7b:f5:a9:40:
a1:16:66:bb:7c:37:e9:c3:49:36:93:ad:2e:98:b2:0b:ba:1d:
7c:32:5a:e4:c4:f5:30:1b:fc:81:74:97:03:98:3c:ea:2c:4b:
0a:27:29:ea:22:7a:b7:82:70:a0:ea:bc:ae:a0:51:ec:b8:14:
7b:1c:85:d3:d2:f3:79:62:97:e4:54:91:e3:f6:ad:a4:5f:29:
37:0e:ec:3e:b5:1f:a0:f2:41:df:0f:03:e8:81:a4:18:39:e0:
83:58:a9:d2:a5:37:db:76:f9:16:df:10:5d:a9:f7:53:21:43:
bf:e8:96:0e:d2:fd:93:46:f3:91:ea:bb:14:62:a2:f6:5a:b0:
af:85:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:29:06 2025 by rpki-client