Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejXO19gKeIGVbsVFVjw1e4ZD2eE.roa
File: ejXO19gKeIGVbsVFVjw1e4ZD2eE.roa (raw, json)
Hash identifier: /LAKvM8uFtwHOJe3OhDBAKS8YiviQzD8m+i6K1ltPP8=
Subject key identifier: 7A:35:CE:D7:D8:0A:78:81:95:6E:C5:45:56:3C:35:7B:86:43:D9:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0BF2F7937AF975ED5B883EE679D97217
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejXO19gKeIGVbsVFVjw1e4ZD2eE.roa
Signing time: Sun 26 Nov 2023 14:05:21 +0000
ROA not before: Sun 26 Nov 2023 14:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:bf2:609f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:f2:f7:93:7a:f9:75:ed:5b:88:3e:e6:79:d9:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 14:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a35ced7d80a7881956ec545563c357b8643d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:57:50:d4:fc:ce:01:ef:d8:c6:81:57:5d:
87:4c:31:55:08:64:b5:98:3b:a9:9f:0d:e7:62:7d:
65:60:7c:71:94:ac:9b:16:af:37:e1:d0:b0:72:05:
68:64:fe:6a:a7:19:7e:1f:85:88:6a:6e:b7:ad:82:
19:da:9b:e0:a9:cb:aa:c8:d5:c5:ec:03:4d:7d:9b:
95:20:81:54:d2:fd:c5:89:01:7b:23:ef:8e:62:bf:
09:b8:e9:ad:c4:52:27:1d:ab:bb:34:50:aa:29:7a:
67:21:2f:b3:ff:91:c7:1f:97:05:da:ae:59:93:c8:
cf:63:52:ff:60:50:01:e9:6c:30:a9:21:d1:7d:17:
71:a4:25:ee:0b:6b:3f:43:05:14:62:6f:9a:78:2c:
3c:2b:0e:ae:5b:5c:c5:37:2a:75:6e:17:2e:3a:18:
eb:92:c4:fa:19:e2:32:ca:47:91:3c:9c:1d:cb:d4:
6a:b5:ea:ef:84:be:54:e4:4f:a1:a2:f9:eb:e4:4d:
3a:1d:b5:43:0f:5b:eb:67:cf:79:51:99:16:22:03:
b2:89:2a:d0:e7:b3:cf:18:d8:c3:79:a9:b0:38:4b:
fd:ae:58:f3:33:e6:48:a9:16:ce:c4:82:df:ce:32:
48:45:ef:f0:30:f1:05:b5:fb:67:fd:5a:71:53:0a:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:CE:D7:D8:0A:78:81:95:6E:C5:45:56:3C:35:7B:86:43:D9:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejXO19gKeIGVbsVFVjw1e4ZD2eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:bc:f5:c1:51:a2:f2:e7:08:a2:9d:be:98:cf:55:9f:93:ad:
87:b3:e0:29:cc:65:f9:c2:77:bf:fe:bc:81:4c:2a:23:69:9a:
25:aa:9e:03:5a:9a:93:3a:77:7e:ea:78:48:f0:6c:1e:f2:7e:
62:9f:dc:cf:cf:4d:58:52:ed:6b:70:75:9a:3b:f1:c4:e1:59:
59:be:e3:53:3f:2d:db:f9:fd:73:40:9e:5c:38:5c:b0:f1:22:
16:e0:2c:11:c2:3e:7f:4a:66:37:09:10:54:d9:bc:11:be:06:
b7:66:53:83:10:9f:b0:eb:0f:f6:26:ce:e4:b6:09:c2:c3:d0:
93:5a:9e:78:e9:81:26:14:f5:8e:89:f1:7b:88:84:5e:b4:68:
f0:3f:5c:09:6e:d9:3a:f4:72:5b:02:ed:0d:cc:dc:e5:25:fb:
cf:4b:e5:83:61:ed:0e:1e:61:c6:dc:e7:7b:a4:db:e7:a8:d6:
3c:1c:28:55:11:4f:ec:50:7d:a1:ee:2a:e9:14:b8:bb:ba:21:
a6:1a:f2:43:d8:ed:46:9c:68:18:c1:f8:a8:f1:64:20:39:5c:
4b:ab:96:ab:88:fc:5c:39:e8:bf:db:fa:f0:73:73:94:50:be:
a8:61:2f:4e:b7:bb:95:c2:c0:1e:42:a9:93:38:e2:a8:d6:33:
20:49:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:50:01 2025 by rpki-client