Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ESpGew-r0MsVy925s7Ojq_33bQU.roa
File: ESpGew-r0MsVy925s7Ojq_33bQU.roa (raw, json)
Hash identifier: 9pS6qWJPh8uuLw2qy5q7PF+XzkECGrHl8T7ttMjFoFA=
Subject key identifier: 11:2A:46:7B:0F:AB:D0:CB:15:CB:DD:B9:B3:B3:A3:AB:FD:F7:6D:05
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE144256C59B5BA0FBEE9AE399113D8BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ESpGew-r0MsVy925s7Ojq_33bQU.roa
Signing time: Sat 18 Nov 2023 07:10:21 +0000
ROA not before: Sat 18 Nov 2023 07:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:44:25:6c:59:b5:ba:0f:be:e9:ae:39:91:13:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 07:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=112a467b0fabd0cb15cbddb9b3b3a3abfdf76d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:93:4d:60:31:08:d7:5b:f7:40:5d:3f:d0:
82:0e:dc:4f:4c:82:64:70:7f:d0:9c:99:a6:dc:7e:
f5:a9:a7:90:6f:55:97:c5:c1:29:a5:fd:97:35:4f:
54:75:63:f9:1c:af:0a:8a:41:72:39:9f:14:d6:25:
75:3a:7a:b7:43:ae:23:09:41:db:1a:93:a5:d1:53:
a4:0c:ca:f8:c9:6c:af:61:4f:db:dd:f4:ae:b9:d2:
c6:90:32:44:8c:c4:9b:f2:40:33:8d:73:59:a2:de:
ac:6d:c5:31:0f:59:78:dc:4a:6d:b8:eb:3d:40:89:
1c:2e:65:f1:87:e0:30:a9:ee:3e:49:9c:32:95:41:
8b:f7:0d:34:8c:19:3e:83:92:01:d4:dd:12:95:a8:
15:80:28:8d:66:46:f7:23:b1:f8:8f:d9:c0:4b:cb:
eb:f0:a7:11:e6:90:bd:4c:e7:03:64:cc:b5:98:cc:
cf:f9:07:37:c3:ad:5a:5c:23:7e:28:3f:05:1f:aa:
fd:1c:b4:7e:51:66:41:43:0f:db:e0:12:b6:09:6f:
8d:eb:b8:f2:9e:ae:ae:48:73:92:4d:2e:70:b6:13:
ea:de:d1:55:44:73:03:4d:23:82:11:11:d4:ca:a7:
aa:80:e2:af:89:7f:cb:a6:7d:d3:c1:a4:bf:cd:a0:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:46:7B:0F:AB:D0:CB:15:CB:DD:B9:B3:B3:A3:AB:FD:F7:6D:05
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ESpGew-r0MsVy925s7Ojq_33bQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a4:23:10:34:39:60:ff:75:af:48:0d:2f:48:89:53:56:91:
7a:f7:87:e5:ed:59:32:36:c6:a7:cc:e0:c6:32:73:84:20:df:
2a:f1:ab:0c:67:0b:b5:74:7c:83:13:c6:45:95:20:40:a9:b5:
6d:9c:9c:e7:5b:11:28:66:2f:43:70:20:75:56:02:ff:8a:8c:
3e:2b:cb:96:23:99:cd:ff:8f:d1:a9:58:05:e3:d3:ba:c8:f0:
e6:2d:da:cc:ff:84:57:3b:05:de:55:b1:48:21:a5:3e:50:c4:
89:29:de:80:9e:1f:25:42:ea:c1:8d:87:78:09:d7:8c:10:03:
0c:b9:af:8b:ae:b2:0e:fb:e7:8d:53:a7:8f:8a:4d:fd:e0:c7:
ce:c8:9b:9a:e8:36:aa:d2:f9:30:af:33:4d:fb:47:af:33:34:
8e:c5:a7:14:7d:97:11:d9:35:e3:42:25:8e:25:df:1b:13:3a:
ac:eb:c7:83:20:2c:42:fa:ef:de:16:0a:ed:54:57:6b:7a:9a:
26:ca:b1:da:ef:5e:62:85:73:33:23:ae:09:fb:87:da:28:cf:
a5:ea:c6:d4:16:7f:f9:e0:55:48:97:41:ce:d4:7f:9c:93:6e:
da:3d:16:d0:64:af:20:1b:80:32:fd:3c:83:d4:1a:7c:20:68:
57:d6:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:23 2025 by rpki-client