Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eIDljKdBIf2jZNxEfZ45G4A-E9U.roa
File: eIDljKdBIf2jZNxEfZ45G4A-E9U.roa (raw, json)
Hash identifier: pbDLYCen75eZt59wNsMUyezNXIbpp7zywJvsOLPHLJk=
Subject key identifier: 78:80:E5:8C:A7:41:21:FD:A3:64:DC:44:7D:9E:39:1B:80:3E:13:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2FD0CC58B1F3499C86845BF7E8E9BDC5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eIDljKdBIf2jZNxEfZ45G4A-E9U.roa
Signing time: Sun 03 Dec 2023 13:14:22 +0000
ROA not before: Sun 03 Dec 2023 13:14:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:d0:cc:58:b1:f3:49:9c:86:84:5b:f7:e8:e9:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 13:14:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7880e58ca74121fda364dc447d9e391b803e13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:94:f5:35:0f:c7:73:81:4e:62:b2:68:10:
72:1e:e4:f0:69:f8:05:0f:56:f6:cf:db:83:93:dc:
4f:f1:5d:e4:2d:95:c6:96:e7:48:ed:03:ca:bb:10:
1f:cc:f6:69:e2:7a:37:03:38:c1:de:50:34:33:39:
b1:d1:67:30:87:80:99:82:0b:11:40:f5:f4:fa:1e:
6d:96:c8:90:b7:f7:e7:20:76:3b:aa:00:37:3a:2e:
69:68:16:c0:08:bc:f8:77:58:98:29:df:47:16:fc:
97:a6:a0:5c:b5:b4:58:03:0b:79:8e:1d:f4:f2:2a:
7e:84:1a:47:9e:d4:17:1c:c1:7c:a2:ed:a1:c8:7c:
bf:a3:a0:72:01:9b:1d:16:cf:dd:e2:a5:fe:d0:56:
7f:61:cb:13:9e:bf:3b:e3:29:21:61:6d:02:31:c0:
77:77:63:40:61:82:be:b5:b4:3e:88:4e:6f:62:30:
78:0f:0d:65:4c:d5:35:f8:f5:79:1e:7d:34:3a:de:
83:68:d4:30:be:5a:84:52:8f:5c:b6:d1:b1:f1:70:
52:c8:22:53:a3:e7:19:64:11:09:66:a2:ca:dc:16:
34:ab:4c:39:54:bb:85:f4:56:18:81:3b:b7:d9:4f:
95:f1:2e:62:60:c6:3b:b3:1b:eb:77:38:04:de:c9:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:E5:8C:A7:41:21:FD:A3:64:DC:44:7D:9E:39:1B:80:3E:13:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eIDljKdBIf2jZNxEfZ45G4A-E9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:65:4c:1d:c1:1c:d9:56:e4:f5:c1:b6:1e:21:3f:23:49:8f:
62:e5:e7:ae:2b:82:26:b7:70:e8:96:b3:39:62:fe:68:77:83:
dc:1d:31:80:cb:86:d6:5f:f0:a9:de:a2:4f:a5:26:8d:3c:f1:
8a:36:6c:4c:65:54:25:2f:c3:7c:ed:29:73:29:e2:4b:04:77:
22:74:0c:1b:f1:33:5d:77:fe:4b:7b:16:63:e9:a3:ab:2e:f0:
66:24:78:86:0c:92:0c:b7:7b:77:35:87:57:40:ce:a5:0a:05:
de:23:6e:15:4f:7e:7a:e7:c1:7b:19:3f:c9:17:13:07:da:e0:
e7:c9:73:73:09:c1:f5:a1:6c:56:18:22:ca:a7:74:6f:0e:a7:
43:2f:cf:f2:a1:59:55:97:d6:92:cb:4f:f9:3a:fc:c7:d2:21:
eb:45:8d:6f:54:0e:08:00:7f:39:ab:e4:e9:d9:2a:aa:45:77:
b1:33:45:35:92:04:db:ef:8a:65:6b:59:71:e0:02:17:1f:a5:
40:7c:1f:72:96:9c:bf:bb:aa:36:25:96:f0:13:5e:5a:c6:aa:
bb:3c:0c:03:b0:7b:d2:2f:94:80:89:95:d3:2c:b7:90:70:1a:
14:3c:af:55:93:da:55:44:ea:9a:b8:e7:61:3f:01:23:5e:b0:
e9:25:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:46 2025 by rpki-client