Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eEQruhXBxdTrK3QwH15cqp6icqw.roa
File: eEQruhXBxdTrK3QwH15cqp6icqw.roa (raw, json)
Hash identifier: OOnr4M/w/ltjvvqaQQiHIXfxW9+YjRvxmrBNuKY1ZT4=
Subject key identifier: 78:44:2B:BA:15:C1:C5:D4:EB:2B:74:30:1F:5E:5C:AA:9E:A2:72:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0E236A31A388C54488518FBA100AD068
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eEQruhXBxdTrK3QwH15cqp6icqw.roa
Signing time: Sun 08 Oct 2023 07:14:43 +0000
ROA not before: Sun 08 Oct 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:23:6a:31:a3:88:c5:44:88:51:8f:ba:10:0a:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78442bba15c1c5d4eb2b74301f5e5caa9ea272ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:66:85:18:06:e9:10:bf:1e:13:b0:7a:3f:
92:98:22:ee:46:f1:fb:bc:66:e8:be:e8:e9:32:cb:
21:c0:e2:40:5c:fe:bf:e4:ab:92:6d:74:f7:d3:46:
c0:6f:18:46:0f:e6:d6:80:61:18:18:07:20:fb:68:
1b:e5:02:8a:4c:19:36:cb:66:ca:5d:99:96:c2:3d:
88:52:22:b8:00:f6:b7:e4:a8:34:8d:67:9e:7f:a1:
ed:cb:f6:93:11:02:83:7c:22:46:32:a1:b8:16:16:
11:70:29:64:5e:30:82:18:2b:74:f7:85:b1:2f:63:
1f:52:4e:7b:1c:65:06:b7:e6:23:f8:5c:3b:20:a5:
42:d9:21:5e:26:1e:4c:ef:62:09:7f:35:0a:23:80:
f8:f5:c3:83:6d:62:e4:fd:80:ab:45:da:55:25:2a:
4d:14:f3:88:31:0d:ab:4b:08:e9:4c:da:16:f0:8b:
81:ef:15:25:1d:5a:18:60:c4:64:ac:b1:72:13:0e:
d1:c6:3a:bf:40:77:dc:9e:08:c0:02:40:66:12:97:
13:e6:dd:a8:6f:90:44:85:a3:62:be:e0:35:01:ad:
61:2a:a4:48:fd:c3:85:c6:cb:f6:0c:d0:e2:21:b6:
d9:07:c1:e7:9a:a2:1b:f6:fa:f9:53:80:d1:14:81:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:2B:BA:15:C1:C5:D4:EB:2B:74:30:1F:5E:5C:AA:9E:A2:72:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eEQruhXBxdTrK3QwH15cqp6icqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:32:ba:3e:91:f4:57:58:f4:30:b9:83:18:c8:e1:1e:17:20:
95:70:f2:4e:69:4d:f2:72:fc:16:b9:40:39:e6:70:a1:8a:eb:
ef:90:30:85:8a:01:fe:63:09:0e:e7:5d:d5:5c:30:a2:5b:17:
d2:b8:5a:c3:08:fd:86:e6:e3:08:36:2c:93:e8:90:f9:3a:7d:
2c:83:77:2b:7d:4a:04:8b:d6:ba:c1:bf:fc:a0:be:cf:ce:66:
cc:ee:38:ed:3b:db:fd:d6:6b:e2:08:b9:07:4f:44:30:de:b8:
d4:1f:e4:4d:95:95:c5:7e:bb:40:2c:49:2d:49:39:e9:5a:3f:
52:51:4b:e3:4e:e6:08:5c:a5:68:b3:83:4e:88:84:b6:d6:03:
20:3c:9a:f5:0f:19:29:62:0a:e7:90:78:cc:0f:0a:fe:22:7a:
31:62:3c:98:22:06:36:fe:2a:1b:ba:86:21:a9:5c:99:80:c7:
f9:10:64:fd:2e:c9:f6:df:8f:35:e0:01:67:12:5c:62:9c:12:
f5:41:3f:31:09:43:44:56:e8:47:ac:b0:97:b5:10:ad:2b:ce:
fd:77:6a:dd:0b:50:ed:32:8c:c5:02:ea:26:81:79:da:41:5c:
0f:5e:66:28:fb:57:4c:55:e3:ea:bc:e9:3f:13:f5:8e:ab:b8:
e8:b5:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:13 2025 by rpki-client