Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emkm_qugaP0bfwYCTUfjpRMy95o.roa
File: emkm_qugaP0bfwYCTUfjpRMy95o.roa (raw, json)
Hash identifier: SduMyf6PUGY5NQSil37kWR6QBU9WIv8xGHvedvZkd4U=
Subject key identifier: 7A:69:26:FE:AB:A0:68:FD:1B:7F:06:02:4D:47:E3:A5:13:32:F7:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3BCF0B8DD7D853BC22826427F993FB4D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emkm_qugaP0bfwYCTUfjpRMy95o.roa
Signing time: Tue 17 Oct 2023 04:05:06 +0000
ROA not before: Tue 17 Oct 2023 04:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3bce:b9fb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:cf:0b:8d:d7:d8:53:bc:22:82:64:27:f9:93:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 04:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a6926feaba068fd1b7f06024d47e3a51332f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:87:a8:8e:a4:2e:fc:d1:de:32:9e:18:21:
d7:dd:55:de:d9:94:8f:96:6a:c0:3b:f1:27:72:51:
0e:0a:8e:35:0a:86:ad:73:60:fd:f4:7a:04:9f:e7:
74:b1:4f:99:2c:ce:4c:f8:78:22:91:a7:e2:7e:a5:
63:6c:52:b8:b9:5c:49:89:61:7b:10:35:b1:7a:e2:
bf:31:52:1e:05:e3:e4:ec:60:c4:44:40:3c:0a:52:
88:11:70:e5:b3:34:8c:09:2e:55:76:9f:e2:6f:dd:
7a:f3:c7:ac:f8:b5:01:51:f3:86:a1:a2:c0:3f:a1:
8b:cd:4f:c0:65:fe:da:76:55:16:a6:4a:ac:ce:64:
a1:36:cf:8e:44:66:66:13:69:78:ef:50:d1:c2:59:
65:32:a8:8b:52:71:7b:91:7c:4f:ed:f2:84:d9:9b:
1a:2f:38:75:84:0e:31:d7:f8:ef:7c:66:dc:12:e2:
6c:b2:d9:e4:e5:d6:43:03:ce:3c:bd:d3:9f:1a:a7:
f6:9b:af:bf:6d:1a:56:f1:8e:55:6f:c0:55:ee:fa:
b5:38:59:3e:74:df:9f:00:5d:b7:ee:28:b0:55:18:
78:22:f4:e1:64:4c:75:9d:b0:81:cb:d1:c2:b4:6e:
27:fc:2a:70:0d:af:eb:6c:b5:90:a6:1a:2e:6a:2f:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:69:26:FE:AB:A0:68:FD:1B:7F:06:02:4D:47:E3:A5:13:32:F7:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emkm_qugaP0bfwYCTUfjpRMy95o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:cd:5f:d2:19:96:75:58:b8:cd:7f:35:b3:b6:65:82:ba:ca:
d1:e5:83:fb:e3:af:53:f4:ea:c2:54:f4:21:c5:3c:97:34:4f:
32:2f:54:d8:3d:82:46:d2:ef:d4:66:5b:5c:26:ae:b4:33:79:
63:ee:3d:3f:f3:f6:2d:43:36:03:66:cb:4b:50:a4:2c:84:71:
03:4b:fb:fb:64:c1:83:18:e0:c8:63:b9:f3:2d:f7:66:cc:68:
2d:62:d5:ae:b8:e0:be:69:a2:3a:ed:8f:0a:0d:8b:ca:aa:89:
63:a1:d4:40:25:ba:64:a5:54:b7:16:2c:e7:b1:da:a1:ea:9b:
c7:64:f7:94:7a:3e:af:e8:54:7e:1e:71:c0:d4:0d:b1:e6:89:
32:68:0e:a0:29:a2:8a:65:df:ab:79:b9:20:11:7f:8c:e6:ad:
49:6b:18:77:90:1a:c7:0c:4c:34:ab:cd:83:fb:3a:73:da:47:
3a:0e:ee:22:02:a6:d9:5c:fc:73:d6:cd:54:91:7c:0e:11:52:
d3:3e:4d:70:e3:f7:d6:42:51:f1:a5:35:48:f1:ba:a2:3b:1e:
26:87:c0:62:68:49:2e:35:89:3a:8e:7b:4d:a6:f2:81:6f:34:
32:65:91:a5:a6:8a:5c:99:55:ec:bc:a8:8d:f7:fb:69:15:b0:
d3:8a:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:05:08 2025 by rpki-client