Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEQi8O99HoUSxXOzpZK2QECiEzo.roa
File: kEQi8O99HoUSxXOzpZK2QECiEzo.roa (raw, json)
Hash identifier: pY7gXkEl/i+ajM7gI45eXgH4ZK50pYzzz23HSO9tccg=
Subject key identifier: 90:44:22:F0:EF:7D:1E:85:12:C5:73:B3:A5:92:B6:40:40:A2:13:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7D0E12090B503C575A2E3BB923DE194A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEQi8O99HoUSxXOzpZK2QECiEzo.roa
Signing time: Sun 29 Oct 2023 20:09:15 +0000
ROA not before: Sun 29 Oct 2023 20:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:0e:12:09:0b:50:3c:57:5a:2e:3b:b9:23:de:19:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 20:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904422f0ef7d1e8512c573b3a592b64040a2133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:f2:87:40:f2:b8:6f:61:e1:5b:04:20:df:
92:22:ce:d5:be:18:f6:17:92:e6:d5:fe:63:b5:53:
f9:0d:ff:08:a4:47:89:e1:02:94:f8:ba:c8:5b:e1:
30:d3:24:4c:e8:de:ea:27:47:db:30:af:5e:df:20:
79:4d:ec:66:e6:8e:fe:a4:83:8a:5c:57:f5:e8:b6:
a2:b4:a9:54:fc:2e:4a:85:8e:4d:05:7c:2c:0e:e9:
23:d0:37:cf:84:40:92:bd:a1:2f:33:48:06:4a:29:
c5:48:24:41:53:65:29:a2:a1:c5:1a:70:28:f5:5c:
25:55:22:fa:a4:a8:cf:18:f4:bb:46:df:57:2b:fb:
4d:88:57:09:80:81:9a:6b:bb:16:13:ef:13:19:89:
39:de:11:dd:09:4e:62:21:d7:0a:1f:7c:27:d3:aa:
15:f1:28:a7:20:f8:a3:81:03:d9:40:89:98:3e:cd:
59:58:f6:e5:e7:91:b6:07:71:7d:f6:5a:11:4b:f1:
ea:c5:32:7a:c9:cc:f6:6b:af:5d:77:af:72:92:56:
02:56:87:2d:f4:bf:51:d5:db:0c:97:5f:1d:55:e4:
84:14:a4:5b:18:4a:af:f3:f1:e3:02:b6:d2:e2:a7:
91:23:8f:04:3f:0a:92:ab:35:49:5a:31:fe:a0:db:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:22:F0:EF:7D:1E:85:12:C5:73:B3:A5:92:B6:40:40:A2:13:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEQi8O99HoUSxXOzpZK2QECiEzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:a1:be:b4:05:65:d5:3d:b9:b2:81:17:a0:3f:ed:7b:e0:16:
98:bb:74:85:83:83:e4:5b:ad:aa:c4:75:12:0b:d8:6a:32:48:
5e:4c:1d:7a:f7:f8:e5:39:28:65:f5:d4:e9:8c:be:8b:ec:76:
ab:9e:5b:04:63:2a:08:9e:40:7f:de:a2:d1:62:b6:ac:47:2a:
fa:cf:4f:a2:2d:ea:ef:dd:37:54:f3:bb:7b:11:fa:43:9b:97:
1f:b8:b6:80:6f:f7:55:13:17:fa:08:56:0f:f5:1e:a9:80:69:
5d:60:df:70:03:46:d4:6f:de:d2:1e:6f:93:2f:5d:4e:52:20:
b6:31:8d:39:21:7e:44:3d:fa:e4:72:ac:5a:c7:65:61:95:61:
1a:e6:59:00:21:00:2d:84:4d:08:88:86:67:29:47:1d:6c:b6:
3c:9c:fe:27:ec:e3:51:67:8f:eb:9d:51:3a:8b:05:e6:95:56:
4e:cf:e8:74:3c:35:64:56:50:f6:bc:df:07:b8:b7:8a:e2:4c:
be:1c:c6:da:03:18:ed:7f:b2:cf:c7:0f:77:47:b6:87:35:01:
6e:71:68:89:aa:09:57:96:a6:df:95:66:b4:52:81:ad:ea:02:
df:13:80:c2:5c:fe:32:a2:f0:7c:b4:ab:2c:55:c6:cc:a6:9a:
c4:c7:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:16:04 2025 by rpki-client