Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eg7XGkC1dDm4ewJTELb7dTLe7_w.roa
File: Eg7XGkC1dDm4ewJTELb7dTLe7_w.roa (raw, json)
Hash identifier: Rkw/s5AXrxIgPbJN0DRovOZc+iA7GTxmFcDD4i57xtE=
Subject key identifier: 12:0E:D7:1A:40:B5:74:39:B8:7B:02:53:10:B6:FB:75:32:DE:EF:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF6EE406304722A273128217D1030CF7A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eg7XGkC1dDm4ewJTELb7dTLe7_w.roa
Signing time: Tue 03 Oct 2023 19:05:23 +0000
ROA not before: Tue 03 Oct 2023 19:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f6ed:c4f8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:ee:40:63:04:72:2a:27:31:28:21:7d:10:30:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 19:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120ed71a40b57439b87b025310b6fb7532deeffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:2c:28:62:ec:97:ba:aa:9d:24:2c:47:b4:
b0:28:af:c2:29:ef:e0:8d:c7:d2:92:a3:04:7a:9b:
fc:ef:d0:39:cb:92:43:ed:0a:7c:e3:b0:03:50:9e:
47:61:50:76:b7:18:8a:6d:27:03:de:2f:f9:d1:89:
26:78:28:a9:ab:0c:2d:39:9f:3e:a1:dd:8a:e9:b9:
65:a8:d8:98:de:84:26:af:b7:23:50:e6:c9:26:72:
26:22:55:32:8a:e9:71:45:c3:aa:6a:74:a9:e8:91:
b9:e4:42:67:27:c0:c7:c1:d1:4a:ea:35:28:ad:a1:
49:5c:a0:c1:18:27:38:02:af:85:29:f5:35:b5:e4:
e8:9f:96:65:d0:4d:f8:ef:46:26:8f:1c:06:95:ea:
8d:ef:61:27:47:23:bd:54:b6:03:c4:cc:ce:9e:df:
59:10:1f:4b:45:b9:6f:c0:7b:ec:fc:aa:7c:27:3a:
b7:7a:7c:f0:df:68:ab:13:56:12:3f:9b:9c:11:b9:
54:de:79:96:ed:df:6d:e7:86:34:db:84:eb:38:aa:
a2:20:43:f2:64:0c:25:80:e6:ed:01:51:f8:80:e0:
a4:7e:89:d5:73:41:5c:92:db:7b:1d:40:b1:17:60:
c2:15:8c:41:b0:f1:8e:fd:6b:04:f4:3f:d7:04:40:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:D7:1A:40:B5:74:39:B8:7B:02:53:10:B6:FB:75:32:DE:EF:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Eg7XGkC1dDm4ewJTELb7dTLe7_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:40:e8:d8:28:60:61:a0:30:eb:0c:d2:96:17:64:09:ce:bf:
89:b0:95:b3:43:c5:f5:e0:cd:4e:6c:dd:5a:ec:9a:3c:50:23:
93:dd:16:a6:13:f4:7e:f5:0a:a1:66:d3:37:95:36:05:03:80:
30:bf:e5:f6:e4:6c:f9:57:56:90:1b:bd:46:e4:12:18:5e:8a:
12:cc:dd:34:3c:56:bc:0a:d0:91:b7:ee:eb:a7:5a:c2:b0:3f:
a3:64:71:db:40:74:6d:18:06:ae:7a:29:cc:2b:40:05:56:f4:
a2:1d:c3:25:b1:c6:9a:99:47:fa:04:6a:84:d9:f0:57:a7:7d:
e8:22:d8:04:70:33:e8:d0:6f:10:40:b2:ba:ae:6d:f0:b5:d1:
a0:71:e6:72:44:b5:fd:ef:04:53:de:3d:78:72:ea:e5:4c:bc:
de:91:e3:f7:3a:88:cf:29:79:f4:48:8b:7e:d5:88:09:71:e6:
35:8f:dc:ff:d4:c7:a4:c1:77:d2:ee:89:cc:d9:47:b6:be:6b:
1a:88:f3:bd:47:fc:05:21:cf:7d:59:be:d0:b7:77:c6:f8:8d:
e4:d7:bd:66:56:46:d8:f4:dc:0a:01:df:03:81:d7:40:59:92:
ef:71:7a:79:16:09:c6:f4:60:f8:27:c7:a8:8e:7e:67:f6:bc:
d1:aa:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:33:22 2025 by rpki-client