Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqJKYCpRX8MNLwdqZ6AgxMjs3MA.roa
File: eqJKYCpRX8MNLwdqZ6AgxMjs3MA.roa (raw, json)
Hash identifier: vFNLnEVOoGXggIsFaT2DE16Ysrg0LOFN3W48s8zhifA=
Subject key identifier: 7A:A2:4A:60:2A:51:5F:C3:0D:2F:07:6A:67:A0:20:C4:C8:EC:DC:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C43563F82A12D7BE541E8595B3D6E6A8E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqJKYCpRX8MNLwdqZ6AgxMjs3MA.roa
Signing time: Thu 07 Dec 2023 08:12:54 +0000
ROA not before: Thu 07 Dec 2023 08:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:56:3f:82:a1:2d:7b:e5:41:e8:59:5b:3d:6e:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 08:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa24a602a515fc30d2f076a67a020c4c8ecdcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:9b:49:50:37:0c:75:ba:14:86:3e:2b:92:
70:5e:e1:3d:79:23:45:99:07:fb:02:11:55:35:a2:
7e:bb:5c:44:ea:48:bd:9f:64:02:be:dd:1b:29:44:
75:ba:dc:45:ae:c6:a1:8d:5a:09:5e:ce:37:a0:76:
0a:68:dd:35:46:d8:bc:55:5b:04:9d:f2:ae:77:67:
c0:4e:99:f8:d9:56:08:76:03:75:ba:a5:61:53:b6:
83:4e:f3:f5:49:3b:d8:7e:61:78:a1:51:e0:83:6d:
d9:6d:d7:0a:ff:8a:c5:a6:75:44:c2:45:c0:f1:72:
20:09:12:12:20:45:ed:d0:2f:7f:7a:49:bd:d5:13:
e3:d8:3d:88:ce:5d:6f:d4:9a:fc:c6:3c:56:25:1b:
d2:f2:c6:09:9f:ee:d0:16:32:cb:b8:18:43:0c:52:
70:ff:af:d6:84:6d:e7:ec:cf:e6:82:71:80:55:2d:
89:33:9f:18:ce:e1:1e:13:11:5d:c8:fa:c3:33:11:
56:fc:d7:fd:aa:93:8f:22:58:f5:ad:7d:58:f3:7f:
0c:6b:7b:32:d4:cf:5c:70:70:81:ad:89:54:fa:8c:
c1:6a:56:47:cd:79:55:17:59:7b:cf:0d:12:63:45:
1e:0b:b3:e9:ab:c5:73:32:22:5d:83:61:65:cd:7f:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:4A:60:2A:51:5F:C3:0D:2F:07:6A:67:A0:20:C4:C8:EC:DC:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eqJKYCpRX8MNLwdqZ6AgxMjs3MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:01:6f:13:af:91:05:9b:d9:b6:73:0b:9a:eb:23:36:cf:72:
be:fd:ec:73:41:c5:ac:1e:d9:d9:91:b0:98:78:0a:87:98:81:
1e:3b:6e:c5:5e:d9:08:47:6f:ba:dd:bf:d7:5c:1d:38:be:aa:
16:a6:06:f0:27:49:a4:c4:9c:0b:cb:46:94:29:ef:5b:82:73:
fc:00:3e:98:73:e2:73:c3:3a:21:61:20:f5:30:79:30:6e:59:
d5:8b:1c:21:02:e6:69:2c:f5:9c:99:76:ad:4a:28:96:92:84:
4d:41:c6:28:20:e8:e1:db:b7:b8:cf:2e:f2:a4:55:b3:59:97:
32:7f:04:92:ed:94:be:dc:20:a4:9e:2f:57:b1:22:0c:c5:f1:
34:ea:2b:02:ba:28:24:81:f5:f8:f4:fb:08:8b:34:3b:db:2b:
7b:9e:27:22:68:54:50:53:3c:cc:d9:f6:f0:63:e9:06:f7:1c:
a6:bf:60:3e:74:7c:f0:7b:bc:15:91:2b:e1:34:92:1c:26:49:
84:fe:ed:51:48:b7:c8:06:0e:32:82:db:e2:6c:c3:ac:a5:59:
7d:1e:f9:fc:c1:e5:6a:87:94:ed:60:93:8e:16:43:30:07:0b:
35:6a:b0:45:b0:01:d7:02:9a:40:30:ba:f2:f8:36:56:da:16:
bc:90:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:08:12 2025 by rpki-client