Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ENjrajwrMve-KoU3wAVS7jp3vUQ.roa
File: ENjrajwrMve-KoU3wAVS7jp3vUQ.roa (raw, json)
Hash identifier: baOJloL3nugOtvVOdxdmSg+ZiZx6aQYH9qvGzPQQdc0=
Subject key identifier: 10:D8:EB:6A:3C:2B:32:F7:BE:2A:85:37:C0:05:52:EE:3A:77:BD:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8048CA9023DA0CD6C8FFCF2A41CB13BD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ENjrajwrMve-KoU3wAVS7jp3vUQ.roa
Signing time: Mon 30 Oct 2023 11:12:15 +0000
ROA not before: Mon 30 Oct 2023 11:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:48:ca:90:23:da:0c:d6:c8:ff:cf:2a:41:cb:13:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 11:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10d8eb6a3c2b32f7be2a8537c00552ee3a77bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:2d:56:86:02:e5:57:54:4d:54:e0:87:46:
cb:ab:68:b4:a6:3c:45:dd:24:cd:86:1f:09:b8:80:
5e:01:37:9a:1b:46:33:fd:1a:2c:50:a3:31:f8:3d:
f5:53:70:11:4f:cd:8c:0a:4b:1e:b4:74:af:15:1e:
86:a2:49:c2:63:a1:c7:18:17:86:56:a1:8e:9b:ac:
cd:15:9a:cb:b7:23:c1:a7:49:ae:8e:ea:b3:32:87:
28:af:2d:48:9b:a7:da:b1:ed:70:e7:56:dd:87:e5:
b6:99:89:e1:ef:46:9b:4a:08:1e:13:82:88:80:ba:
69:a6:08:cf:d2:7f:32:e5:0e:9a:c6:fe:9b:b3:95:
27:0c:a2:46:0d:9e:b5:62:e3:77:d4:50:57:25:95:
5c:93:72:d8:02:eb:67:c7:cf:f7:cc:c9:58:46:d0:
d7:46:d8:68:09:a7:f9:db:13:1a:2c:0d:a1:91:a2:
e4:02:97:d8:c8:b6:82:db:80:1b:be:88:51:36:d6:
9a:32:d9:f1:f6:80:f0:ea:13:bb:5f:4e:54:ee:1d:
44:1b:9d:e2:3d:77:0a:9f:45:16:ac:1b:b2:ee:5f:
16:c0:cb:43:74:72:87:6b:36:9a:2f:4f:d1:f0:92:
be:a2:f4:f6:2e:fe:93:ec:aa:d6:56:58:d8:c6:9c:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:EB:6A:3C:2B:32:F7:BE:2A:85:37:C0:05:52:EE:3A:77:BD:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ENjrajwrMve-KoU3wAVS7jp3vUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:db:fd:a5:9c:db:e6:4d:69:98:f7:6b:3d:0a:b1:14:f9:81:
42:49:d5:0d:cc:ec:f1:4e:06:1f:76:4d:73:d4:f4:5e:19:d8:
b2:f8:7c:af:43:57:f4:62:fe:50:3f:79:76:33:43:d1:08:d9:
33:b6:41:e8:57:db:e9:ab:b6:23:48:6c:c2:5d:f7:38:14:b0:
90:9f:17:3a:0c:d6:bb:43:6c:70:b3:61:a7:61:45:5a:f6:74:
09:49:0c:d9:22:1b:ec:3f:31:97:d2:6d:6d:b1:84:6b:86:09:
f2:90:cd:02:35:73:8e:b1:85:83:f3:a8:95:86:00:fb:0c:2c:
24:5e:a0:e7:7f:77:d2:85:8a:5f:8b:f7:8d:30:3c:b1:51:3d:
b4:a9:67:23:01:70:48:fc:92:68:3a:a6:ee:c6:03:18:87:94:
fa:d7:31:12:ed:c6:cd:1f:59:34:50:a6:e2:df:d3:72:c2:50:
c2:f0:84:b3:25:86:14:f2:e9:33:d5:d0:6d:84:42:6d:ba:5b:
7a:69:10:b6:12:64:7e:07:3f:80:63:ac:ca:c7:77:c6:ef:87:
d4:77:35:ba:b0:42:2e:31:84:ac:c3:59:0a:1d:fe:ee:f2:25:
90:c1:6a:f3:3a:95:cb:df:f7:c7:31:1b:43:7c:c7:3d:6a:58:
96:3e:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:17 2025 by rpki-client