Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Evhbi3GbHRYg7ui5GQA3CkwbWFY.roa
File: Evhbi3GbHRYg7ui5GQA3CkwbWFY.roa (raw, json)
Hash identifier: iJtzV5ggRpI/wQ3p3afU8iNhjoz0i6NlUGtsxTTpaWs=
Subject key identifier: 12:F8:5B:8B:71:9B:1D:16:20:EE:E8:B9:19:00:37:0A:4C:1B:58:56
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0F324352447A90F3C492D4EF752C1470
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Evhbi3GbHRYg7ui5GQA3CkwbWFY.roa
Signing time: Mon 27 Nov 2023 05:13:21 +0000
ROA not before: Mon 27 Nov 2023 05:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:32:43:52:44:7a:90:f3:c4:92:d4:ef:75:2c:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 05:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12f85b8b719b1d1620eee8b91900370a4c1b5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:00:56:06:e0:7b:78:fb:f8:60:8f:6f:de:
01:60:54:28:a8:ea:ae:ca:70:f1:65:68:4f:a2:1d:
c7:e8:5b:6b:6c:04:ab:f0:3c:6a:9c:a5:4b:db:0b:
09:95:54:83:ab:69:cc:87:90:10:4c:9f:0a:1a:40:
53:84:bc:3b:99:61:17:4e:b7:66:e7:2c:92:5f:4d:
68:7c:87:d9:a9:33:57:7d:5b:f5:60:02:c3:ef:c7:
78:39:8f:f5:66:23:a1:b2:03:58:d6:54:7d:21:11:
cd:28:62:ad:62:58:77:88:14:37:16:4d:87:ee:f3:
54:f1:8a:62:cc:09:6f:68:7f:70:c0:fa:53:52:80:
88:74:c0:a4:a4:34:98:07:a2:9b:e6:3f:0c:d6:99:
8f:6f:10:99:40:35:c8:7e:4b:1d:2a:6f:c6:b3:5c:
7f:ef:f8:69:13:35:d2:f6:e8:87:e8:ec:8e:d0:73:
f5:ba:0c:fb:9f:5a:6b:be:47:21:82:b8:1b:e4:fe:
6c:96:b7:8a:49:16:72:84:e8:a9:d4:9d:50:7c:d1:
1f:c5:df:86:c3:a4:68:16:6a:38:f3:19:f8:c1:52:
ec:ed:93:d8:ee:be:ec:3f:d8:e3:e2:c1:ce:88:43:
09:05:46:60:5a:15:ff:03:e9:99:80:28:0f:73:5c:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:5B:8B:71:9B:1D:16:20:EE:E8:B9:19:00:37:0A:4C:1B:58:56
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Evhbi3GbHRYg7ui5GQA3CkwbWFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:68:32:62:99:24:ff:03:ba:6f:be:ae:ef:2a:21:1d:b0:3c:
29:85:ea:4d:07:a3:07:66:d1:71:7e:66:12:ea:e5:e3:6f:a7:
0b:9b:47:71:ba:ce:f5:49:3d:8b:38:f8:bf:c3:bf:98:56:c7:
43:44:3e:d2:f4:ab:57:5f:37:19:74:34:fa:44:f0:5b:45:4d:
a4:17:6c:c5:71:99:d2:92:d8:2f:52:f6:c6:75:f6:49:10:79:
61:14:72:93:fe:88:89:25:95:f2:e5:8c:31:27:92:49:6d:41:
23:9b:80:b2:b0:39:31:83:14:97:9f:f3:00:97:b0:fd:16:04:
2f:38:9c:1f:dc:50:8c:1a:3b:57:af:f3:b2:5e:8d:ea:30:d5:
49:18:a6:b7:55:6c:37:2b:3e:d0:94:6a:43:38:22:30:41:84:
47:3c:ac:ed:a6:be:05:cf:7a:13:2b:34:c8:de:7f:70:43:20:
90:84:8d:78:4d:94:9e:97:39:e9:02:71:27:aa:bf:20:12:2b:
f9:e0:51:d3:04:ae:5f:84:cf:50:47:a8:a7:d6:cd:e9:01:cc:
3b:9e:2c:d8:8b:2c:08:12:8b:e8:d3:cf:36:6e:71:99:65:85:
20:3c:6e:6a:6d:f9:54:37:7b:96:6f:64:1a:76:e1:ab:0e:88:
0f:4b:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:23:40 2025 by rpki-client