Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7uhTEI3dX2vSBr8fy5cPXk_xqZI.roa
File: 7uhTEI3dX2vSBr8fy5cPXk_xqZI.roa (raw, json)
Hash identifier: 92ANxzDv54B4m+LvhDkbDL5ObYbg7QltUwFMKGPVTvc=
Subject key identifier: EE:E8:53:10:8D:DD:5F:6B:D2:06:BF:1F:CB:97:0F:5E:4F:F1:A9:92
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C303754EBB75E73083534242D97DBCF55
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7uhTEI3dX2vSBr8fy5cPXk_xqZI.roa
Signing time: Sun 03 Dec 2023 15:06:21 +0000
ROA not before: Sun 03 Dec 2023 15:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:3037:2d5e/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:37:54:eb:b7:5e:73:08:35:34:24:2d:97:db:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 15:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee853108ddd5f6bd206bf1fcb970f5e4ff1a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:77:af:4f:fa:c9:54:f1:8b:d5:6b:0c:3e:
8d:d4:cc:42:ee:f5:8f:e7:9e:cf:63:17:ba:be:2a:
99:58:2a:70:4d:c7:40:1d:99:ff:c3:3c:22:09:a9:
ec:11:bf:45:3c:f8:c1:f0:3d:bb:36:3a:92:b5:44:
92:9a:11:5c:4e:81:85:3f:73:c0:e2:aa:e3:f7:bd:
3f:0b:2f:fb:23:a5:1e:2f:16:ed:8d:de:05:90:57:
60:ed:e8:74:9f:11:ac:f1:61:cd:55:d7:59:94:e5:
06:85:14:1c:53:a0:ce:1c:f0:e5:54:78:e9:1b:0c:
cd:61:f6:dd:fe:e2:7c:4e:d3:be:84:a5:31:09:43:
61:72:20:87:e5:64:3b:ee:1b:ba:33:a7:95:7f:0a:
bc:57:e1:77:d7:70:f7:1d:2e:fe:b4:b8:f2:f4:79:
d5:87:1d:69:b7:b7:f8:cd:fa:2c:39:1c:79:44:8e:
6a:62:67:f7:48:8a:8b:67:ee:67:9f:c9:a0:14:2c:
cc:cf:64:16:ff:1e:6c:a5:a9:95:4c:b3:86:a7:35:
c2:bb:9e:4a:d9:30:8f:d8:8e:5e:09:18:bf:b5:52:
33:9b:71:90:61:51:c1:e0:f2:86:d3:0f:6e:71:18:
c5:7b:9b:28:7b:38:63:28:01:e7:7a:f6:b1:ab:ad:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:53:10:8D:DD:5F:6B:D2:06:BF:1F:CB:97:0F:5E:4F:F1:A9:92
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7uhTEI3dX2vSBr8fy5cPXk_xqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:e3:95:5c:86:e6:cd:4f:4c:27:83:be:70:f9:c7:35:37:82:
ba:3c:33:37:50:f1:f1:57:a7:8a:8e:50:0f:72:59:e7:79:b4:
e3:b3:4a:df:e5:b2:82:a6:d9:70:75:97:50:fe:45:76:51:e8:
d0:58:c7:3e:17:94:8e:2f:39:db:b8:53:65:cb:50:7f:72:bf:
32:2e:df:38:97:10:41:3d:5b:22:b2:20:9f:20:5c:3e:c9:22:
48:9f:36:e3:b5:89:b6:6d:ed:60:e7:8d:35:74:4b:4d:2e:15:
32:74:84:0d:5e:ac:f6:09:b3:42:51:b0:5f:a1:ba:5a:a3:1d:
a6:49:90:b4:ed:b4:75:2e:17:dc:f2:a3:84:b3:89:71:27:db:
20:9a:9c:fe:cd:96:92:7d:67:e8:03:28:16:f4:e8:18:cf:cf:
cd:70:05:53:ee:09:72:69:b8:83:c8:c2:4a:04:1e:5f:4f:cf:
04:49:68:5b:74:3f:27:d2:be:21:13:dd:0a:93:0b:7a:6e:1b:
85:c7:d8:f0:b9:da:dd:fc:c1:cd:79:8f:b2:8e:b5:24:14:4a:
5e:6b:d1:27:77:05:0a:dd:a8:33:a8:7d:b7:19:bf:93:42:e6:
08:d0:da:0e:32:4b:f0:67:06:8d:f0:bd:96:d5:65:5b:5a:f3:
ef:ed:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:41:04 2025 by rpki-client