Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGVQY5Xl_jrViuBFvD9R0wAKi20.roa
File: eGVQY5Xl_jrViuBFvD9R0wAKi20.roa (raw, json)
Hash identifier: K6rCwV/k7zpMQ1IWfL+HGVmZL9AtCrMdIFLh+p+OwUE=
Subject key identifier: 78:65:50:63:95:E5:FE:3A:D5:8A:E0:45:BC:3F:51:D3:00:0A:8B:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B528DF248045C3FC17BF9D81ED6A76D0B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGVQY5Xl_jrViuBFvD9R0wAKi20.roa
Signing time: Sat 21 Oct 2023 14:05:16 +0000
ROA not before: Sat 21 Oct 2023 14:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:528d:471b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:8d:f2:48:04:5c:3f:c1:7b:f9:d8:1e:d6:a7:6d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 14:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7865506395e5fe3ad58ae045bc3f51d3000a8b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:a0:90:23:e3:ff:7a:81:be:d1:62:6d:ca:
8b:a2:9e:76:19:8e:59:cf:83:3f:82:3a:ad:98:34:
4f:ec:e7:2a:dc:d0:56:88:94:41:4a:39:e9:b4:f6:
5c:5c:aa:55:b6:d5:47:ce:ed:0f:fe:40:50:2b:4c:
c8:5f:c9:44:90:a4:1e:a8:37:49:00:a6:26:a5:9e:
63:99:42:f1:85:a6:51:db:97:17:4a:22:cf:6b:e9:
a7:30:a6:e6:97:e3:ff:e8:ff:fd:24:26:53:ef:a4:
cd:1d:b9:94:db:6d:67:25:d6:1a:10:e7:84:f7:cb:
42:1a:7c:7b:89:a7:d3:67:65:b0:67:71:c9:1e:dc:
e6:89:62:7e:a5:ce:3b:68:38:06:00:f0:db:eb:80:
bd:b8:65:75:f9:a3:78:e4:f1:05:75:94:37:ed:98:
5a:f9:78:83:ef:3c:b2:bd:77:64:40:84:23:30:f0:
e7:40:d1:dc:67:c4:4f:ec:7f:59:01:3b:9b:3c:a9:
21:c3:df:b1:e8:3a:b2:4c:58:83:8c:97:d3:20:71:
b4:be:3f:8d:36:38:c7:76:a6:da:46:f9:c8:47:71:
f5:b5:61:de:75:eb:09:bb:44:26:f3:5a:e3:d1:11:
8d:10:da:e3:9d:36:05:0d:a4:dd:d2:99:3f:5d:c9:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:50:63:95:E5:FE:3A:D5:8A:E0:45:BC:3F:51:D3:00:0A:8B:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGVQY5Xl_jrViuBFvD9R0wAKi20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:f0:72:7f:0a:b6:ce:b9:28:41:38:07:72:95:42:f9:ea:50:
f1:e7:a5:b6:7b:83:91:1f:98:72:7c:d8:a6:84:c8:16:ce:a5:
3f:d0:44:58:95:26:46:55:3d:a1:8b:dd:4a:8d:c7:9d:c5:d8:
6c:af:8b:eb:b1:9a:c5:15:58:ba:7f:8b:4e:d9:af:61:90:bf:
55:4f:8a:65:24:de:b9:f6:4f:ab:19:72:c9:2e:4e:a5:b1:86:
5a:85:df:1b:7a:e2:65:ae:e2:e3:21:e4:3c:29:97:28:17:aa:
69:8c:3c:0f:91:e8:51:dd:83:08:12:1c:09:e4:bd:08:e8:54:
8a:40:6e:9b:b7:23:da:78:65:7d:75:e1:26:85:1c:5b:e3:90:
1a:d5:9c:73:c9:1d:48:dc:84:1d:53:c5:91:31:f0:22:1e:51:
9c:52:13:5b:ee:26:3a:74:01:f2:68:77:0e:68:d5:d5:86:a6:
03:1e:0f:4c:2d:b6:ec:a5:74:ee:39:f4:ff:55:3c:a1:ce:1d:
d0:0b:a8:7e:2b:34:7f:25:0b:57:31:5c:5a:b1:9c:26:7d:e0:
38:ab:e9:cc:8a:82:cf:6e:08:2f:31:27:86:6e:9d:1e:0c:ef:
80:87:3b:5c:20:d8:05:2f:e0:7a:61:3e:f5:99:86:19:eb:b1:
6d:dc:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:27:15 2025 by rpki-client