Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehF1EYQGpKIs1OPfpJEwzipZ3_s.roa
File: ehF1EYQGpKIs1OPfpJEwzipZ3_s.roa (raw, json)
Hash identifier: 3yl0gaWGYg8TnPMx88fUDJHU1kfx+oHBtZVKUfmCWJ4=
Subject key identifier: 7A:11:75:11:84:06:A4:A2:2C:D4:E3:DF:A4:91:30:CE:2A:59:DF:FB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3EDA28D178489F74FD2614EF99A6FACD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehF1EYQGpKIs1OPfpJEwzipZ3_s.roa
Signing time: Tue 17 Oct 2023 18:16:06 +0000
ROA not before: Tue 17 Oct 2023 18:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:da:28:d1:78:48:9f:74:fd:26:14:ef:99:a6:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 18:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a1175118406a4a22cd4e3dfa49130ce2a59dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:78:dc:5f:0c:8d:5f:3f:49:9f:8c:2e:7c:
97:40:c1:91:3b:ea:50:9f:80:76:32:f5:2f:4c:93:
5c:5e:28:6c:7b:14:b2:fa:4f:aa:5f:15:8b:b8:ed:
ad:f0:c3:66:34:79:5e:c2:45:d3:ce:b8:f0:53:4f:
16:0e:18:3f:8c:d7:7c:4f:06:db:07:2b:86:ae:52:
23:f0:92:b1:7c:74:40:58:04:5e:fa:0b:da:49:6d:
77:bb:4f:e1:d2:39:64:77:95:ea:41:07:2e:ea:a9:
ec:0d:5b:a6:f4:fe:11:d0:f5:fb:3d:bf:5d:68:14:
4e:17:3a:52:2f:0c:1c:0a:3b:62:8d:79:f7:1f:87:
a8:c7:3f:b7:da:ad:04:e2:0d:6c:8f:ca:69:bc:eb:
a8:73:e9:05:36:58:94:24:cf:72:97:02:97:9b:1e:
b7:81:36:6c:f7:a7:07:a4:29:9e:2d:a6:57:a9:5c:
9d:67:24:17:eb:8d:56:c9:79:50:c8:ff:5a:60:2c:
5f:8c:0f:bf:ba:3e:e6:60:6f:3e:6b:8f:b1:c9:14:
04:cf:73:c3:bb:3a:98:bc:87:3e:6f:96:aa:7a:14:
c4:03:42:4a:bd:00:26:0c:fe:b7:0e:5a:27:e1:45:
96:5d:e4:08:19:7b:51:2d:34:a6:63:ef:7f:be:ae:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:75:11:84:06:A4:A2:2C:D4:E3:DF:A4:91:30:CE:2A:59:DF:FB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ehF1EYQGpKIs1OPfpJEwzipZ3_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:fd:69:00:f0:08:38:5d:c2:5b:ad:a0:a1:27:fd:38:74:eb:
0e:de:34:8c:45:75:d4:94:7c:59:95:7c:e2:48:24:25:e8:72:
ad:22:53:57:8e:d4:25:80:f2:7e:fc:24:e4:11:b5:16:67:b3:
9d:00:02:d7:ab:f5:d0:4c:96:79:ad:98:2b:ce:0e:33:05:9b:
76:89:7f:c1:9e:bd:79:fc:8d:8a:d2:38:ad:f7:3e:ca:1c:d9:
fa:c2:5c:09:68:34:62:35:1d:2e:8f:85:25:99:cf:42:84:e6:
9c:d4:dd:5e:79:e0:21:b1:67:5d:2c:46:4b:68:54:68:a4:bc:
90:c1:3e:8c:f1:07:f9:76:0a:fc:c9:1e:21:48:68:4e:50:e1:
60:41:cb:4f:18:83:25:a9:34:7d:55:0b:2d:f6:5c:f7:c1:51:
61:1e:d8:61:e0:4d:30:25:1a:0f:e7:9b:b5:1d:7f:5e:61:75:
15:df:5c:67:03:b2:d5:34:f1:02:02:bc:63:20:6c:b3:40:bd:
25:70:8c:70:5b:44:3f:6b:f8:21:a3:29:57:25:e5:eb:b6:9b:
ec:d9:b4:30:4b:93:bf:94:23:5f:06:0b:5f:cb:72:c5:37:65:
51:eb:6c:36:2f:27:2c:85:26:c4:c1:b7:90:17:f9:27:b8:1c:
48:3d:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:26 2025 by rpki-client