Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eac1WGNV1APmjKecxGeSK73r-GA.roa
File: Eac1WGNV1APmjKecxGeSK73r-GA.roa (raw, json)
Hash identifier: evkTX0UpVUKOU4U7xkrdAdlCiqfGMKHlLX8wciLqQiI=
Subject key identifier: 11:A7:35:58:63:55:D4:03:E6:8C:A7:9C:C4:67:92:2B:BD:EB:F8:60
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C397679C9BE8C6B3CA1590B224EB2797F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eac1WGNV1APmjKecxGeSK73r-GA.roa
Signing time: Tue 05 Dec 2023 10:11:54 +0000
ROA not before: Tue 05 Dec 2023 10:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:76:79:c9:be:8c:6b:3c:a1:59:0b:22:4e:b2:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 10:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a735586355d403e68ca79cc467922bbdebf860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:93:6c:d5:de:9c:fe:e3:5b:9e:fe:b1:7e:
c7:ba:1e:4e:6b:1a:b5:13:67:ad:51:b0:38:cf:87:
4c:2a:c0:93:bf:46:cc:bb:39:e0:cf:ac:c8:1d:9b:
79:31:00:92:4c:74:b7:16:e6:ee:59:51:75:4e:db:
9e:02:52:1b:98:53:4d:4b:31:8e:29:c1:01:ab:8f:
96:5c:9b:f8:33:5a:68:bd:ae:8e:86:63:b7:78:ea:
58:9d:a0:fd:9b:f1:f1:4d:2e:a2:e3:62:e5:dd:a2:
e2:ff:c7:29:96:e5:0c:18:3d:33:2f:af:08:1b:04:
74:25:55:7d:03:95:9c:c9:7a:cb:31:ed:97:c5:de:
d0:9b:ed:6e:c2:2b:c1:ff:c6:e1:72:0e:77:5e:87:
e3:b1:64:0d:13:a6:b7:ab:8d:ad:b0:91:90:d9:fa:
21:a8:9b:00:32:c0:e2:ae:f7:36:a0:50:10:d2:de:
9d:4f:51:33:88:8e:21:ca:46:53:5e:1d:15:af:77:
42:cd:24:93:8e:e4:1b:11:06:1a:7d:c5:7f:59:d4:
45:df:76:05:05:8a:3a:b9:fb:c8:98:18:97:ac:f7:
c2:74:23:b6:52:aa:a4:1a:e7:92:fa:55:c4:07:94:
d2:1d:1b:ee:99:85:1b:3a:82:0a:cb:45:50:7d:b1:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:35:58:63:55:D4:03:E6:8C:A7:9C:C4:67:92:2B:BD:EB:F8:60
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eac1WGNV1APmjKecxGeSK73r-GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:6b:df:9b:89:14:d8:7a:ee:34:31:fe:d9:ab:15:09:e1:2f:
7a:c5:90:f5:70:7b:b3:e7:55:f8:41:a8:5d:0a:c4:6c:79:ba:
90:0c:d4:0f:cd:e3:62:d0:51:4a:b6:35:d7:cf:70:d0:63:6c:
ea:90:00:ed:a1:6d:26:2e:67:fe:75:13:b3:54:e5:5e:3e:d5:
22:b5:fa:eb:92:fc:86:c9:3f:53:42:f0:9f:fa:0d:f8:11:c5:
7c:0b:22:c6:39:38:e0:0f:4f:e3:a1:7b:13:51:a0:a0:e7:de:
c2:d1:2f:16:c4:ec:d8:62:18:69:f0:2a:23:b7:86:97:ee:9d:
ad:99:5f:c7:c9:25:ec:b4:db:e4:93:78:dc:fc:4c:eb:8f:f9:
3a:70:72:04:b7:d2:aa:d7:f8:d0:5e:8b:ff:ab:cd:be:4f:ad:
56:9e:99:38:f6:be:86:a0:6e:be:54:45:2b:21:db:e0:6d:fe:
a1:65:40:6c:4f:d7:27:1f:af:9c:0d:0d:41:73:91:49:30:52:
74:86:98:8d:4f:a7:9f:5e:20:e1:14:12:c2:76:25:b3:0f:f6:
a1:28:a3:02:0e:9a:28:43:e5:c1:ff:d9:65:b2:8c:99:6f:a2:
0d:87:6a:ee:f6:2b:f5:8e:22:02:61:7a:32:f5:e5:8b:1c:2e:
72:5c:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:51 2025 by rpki-client