Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7v2ctMmWBu7zEMSda_aYizI3ZEQ.roa
File: 7v2ctMmWBu7zEMSda_aYizI3ZEQ.roa (raw, json)
Hash identifier: k70LehWM1Oypi16HL4yj9r2T2ppipfJCBn/jHtS73BM=
Subject key identifier: EE:FD:9C:B4:C9:96:06:EE:F3:10:C4:9D:6B:F6:98:8B:32:37:64:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC55EA9AFE73BFD92913A7CEF206DF487
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7v2ctMmWBu7zEMSda_aYizI3ZEQ.roa
Signing time: Sun 12 Nov 2023 21:09:57 +0000
ROA not before: Sun 12 Nov 2023 21:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:5e:a9:af:e7:3b:fd:92:91:3a:7c:ef:20:6d:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 21:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefd9cb4c99606eef310c49d6bf6988b32376444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:9b:a5:be:33:3b:91:34:92:71:91:89:e4:
32:c6:aa:f2:f9:d8:cf:7c:fe:25:f9:0d:fa:8c:44:
f5:8d:36:f0:2f:ec:41:86:42:fc:11:64:5b:81:e1:
ac:bb:2c:70:22:79:64:61:c6:99:2a:97:ce:5b:cb:
2b:a0:64:ce:55:4b:fa:95:b8:90:a9:2a:58:a5:4d:
07:18:40:1e:15:a6:31:d2:13:49:8b:c9:e4:51:97:
5d:37:a0:ad:bd:67:b7:d2:8e:31:bc:18:a2:3c:75:
de:8a:8f:38:69:2d:5f:37:df:8a:40:e8:7b:bf:cd:
66:2a:c5:6f:5a:4e:68:13:dc:a6:19:a9:39:98:14:
1a:9d:40:e1:15:01:e5:ec:ad:db:4f:2f:7a:b0:82:
1e:49:a0:e1:eb:2d:2c:de:ce:5d:72:fd:7d:b8:ab:
1b:5d:79:6a:c5:e5:42:c9:1a:bd:1d:65:5b:98:d3:
e2:4a:86:ec:ba:36:24:ec:61:3e:71:bd:91:b4:d3:
17:73:2d:ed:07:ce:a6:15:a7:8d:36:2b:2e:b1:ea:
e3:94:9d:18:f7:f8:89:22:9d:ed:99:13:a0:f5:21:
45:8b:29:60:b7:29:fa:70:86:a3:10:04:6c:74:ee:
5a:3e:e8:b8:f6:4c:88:c7:b3:e3:15:54:d4:dc:1b:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:9C:B4:C9:96:06:EE:F3:10:C4:9D:6B:F6:98:8B:32:37:64:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7v2ctMmWBu7zEMSda_aYizI3ZEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:ba:62:3f:25:8c:77:21:ba:50:cd:2d:d8:71:ea:14:a7:3c:
4d:4f:77:c5:70:4a:1b:a7:88:81:45:d6:02:b5:bc:56:1f:60:
e2:b4:d6:4d:9d:82:84:79:91:8f:bd:27:bc:c6:e2:52:34:8e:
73:38:0c:34:23:f6:f9:89:7d:7f:3e:19:28:0d:10:d9:17:46:
9a:d4:ae:d8:22:df:75:72:ad:fc:a7:09:46:b5:31:9c:31:07:
7a:5f:04:0c:20:0b:4c:7d:e7:1d:36:a8:bc:b4:fd:11:b1:71:
99:b4:52:90:b4:20:d7:2e:b5:6f:f4:97:86:81:cf:7d:b5:38:
8b:ff:af:26:c5:69:07:f2:f7:89:2f:67:52:33:66:c7:9e:47:
58:62:7f:56:61:01:db:37:fb:b9:23:e8:72:ca:df:a0:b9:d8:
1f:29:4b:4c:54:32:8e:49:08:0b:8a:a4:8b:58:a2:2b:ba:de:
6b:0d:8b:19:50:76:a0:48:43:5a:fe:38:a4:d5:0d:31:ad:00:
1e:75:55:5e:81:1d:9e:64:81:66:3a:d9:48:9b:8b:86:1e:87:
0f:3b:b2:5c:8d:63:d2:8e:3e:8e:1a:68:1d:06:44:77:a5:ed:
a2:7b:57:48:6f:a6:a9:4c:5b:f0:73:2f:2b:84:61:93:35:d9:
1e:41:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:56 2025 by rpki-client