Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edqbxa4mQUuSB1C-Ou61c9HeNOU.roa
File: Edqbxa4mQUuSB1C-Ou61c9HeNOU.roa (raw, json)
Hash identifier: HgIMl00oOZCm48gHnonsvrpwJR19OM4y2dgpI88O/7E=
Subject key identifier: 11:DA:9B:C5:AE:26:41:4B:92:07:50:BE:3A:EE:B5:73:D1:DE:34:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6C5347435FCABC4F9B3E7C9C9D54FCBF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edqbxa4mQUuSB1C-Ou61c9HeNOU.roa
Signing time: Fri 15 Dec 2023 07:14:06 +0000
ROA not before: Fri 15 Dec 2023 07:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:53:47:43:5f:ca:bc:4f:9b:3e:7c:9c:9d:54:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 07:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11da9bc5ae26414b920750be3aeeb573d1de34e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:09:57:4c:02:6e:df:61:ab:1e:dc:46:d6:
a5:a2:63:7a:1a:13:9f:02:0f:f7:14:d8:ca:9a:2a:
01:7e:66:76:d4:a4:2f:62:4c:3e:2f:30:5d:48:18:
7f:23:9c:7d:cf:e2:8a:2d:c0:98:cc:aa:cc:86:07:
be:24:ae:79:af:e3:ca:fb:24:66:0b:34:b4:1b:d0:
2e:ce:27:c2:ca:29:9a:b1:94:f7:41:09:26:75:cf:
d1:8c:a7:3a:04:b3:95:b9:47:c6:e5:47:80:d0:10:
31:65:68:5a:ef:e7:1d:f0:c8:60:11:c2:7c:0a:fa:
d9:2a:ba:14:dd:a4:70:36:cc:1c:00:cb:2b:10:6f:
01:be:57:1c:c8:3e:e1:2c:67:ab:9e:8e:1b:ff:33:
bb:9f:3f:15:cd:aa:5b:cb:fd:3a:04:d5:5b:48:a0:
12:a3:7a:a5:90:22:5a:c9:45:f4:44:a0:36:61:b2:
74:e4:be:df:b8:f4:3e:ff:6b:cb:d7:35:f4:2a:ae:
62:5a:dd:33:e7:d4:75:9e:90:6f:15:55:47:79:38:
3d:1a:99:ff:79:c9:cf:18:c6:82:df:35:14:92:c3:
8d:b4:b2:08:d4:fd:ed:f0:45:e3:72:af:dc:33:fa:
bb:96:c4:49:b2:81:dc:c9:2c:7e:00:5e:00:a3:9c:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:9B:C5:AE:26:41:4B:92:07:50:BE:3A:EE:B5:73:D1:DE:34:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Edqbxa4mQUuSB1C-Ou61c9HeNOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e7:8b:f8:da:eb:2b:5d:e3:25:f0:dd:d3:fb:d2:53:66:32:
40:a4:c9:94:04:b5:c3:3d:20:f2:82:a9:e7:fb:7f:0c:97:a5:
82:0a:a3:9b:c4:2a:6e:88:b8:5a:80:8f:f5:b5:f7:c9:e7:43:
1b:4b:74:c7:74:a2:7e:f5:41:34:ca:68:68:00:5d:e9:13:ca:
c7:64:0f:bc:5a:20:0a:c5:a5:53:f9:c3:b2:c0:08:b2:23:48:
88:a7:8a:9f:f4:ed:22:d4:81:26:a4:30:35:14:e1:cd:67:c3:
ba:d9:5f:f4:45:c1:94:60:d8:29:d7:b0:66:bf:6e:1c:cb:3c:
40:c8:a6:7f:e9:4d:57:d2:82:69:2f:f4:c3:74:9f:8c:f8:eb:
0a:6a:04:f5:93:37:a4:69:ae:de:f6:c8:98:59:04:64:5a:03:
12:a4:be:51:09:ab:7d:0d:6a:2d:f5:14:d2:2d:72:25:a6:2f:
bc:d1:d9:83:eb:07:b8:f6:ed:cb:92:3b:42:47:08:18:ef:16:
a8:6c:dc:39:cd:47:ec:d8:e0:66:a8:ba:55:88:ea:10:c3:be:
01:7e:e3:27:37:cc:aa:31:51:0a:2d:6f:29:15:2b:36:bb:d9:
fd:94:c1:9e:6a:23:91:9a:06:f2:fc:a8:f6:c5:c1:a5:9f:cc:
4b:4c:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:32 2025 by rpki-client