Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svEta4boue7GnJfqdGen8t1qq2Y.roa
File: svEta4boue7GnJfqdGen8t1qq2Y.roa (raw, json)
Hash identifier: MXgIHLdacwA5Le9nAfTImxuAX0mU+jEs7xenAP5U+n4=
Subject key identifier: B2:F1:2D:6B:86:E8:B9:EE:C6:9C:97:EA:74:67:A7:F2:DD:6A:AB:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF160DD96228FF544D1D81D7F2768A264
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svEta4boue7GnJfqdGen8t1qq2Y.roa
Signing time: Mon 02 Oct 2023 17:12:51 +0000
ROA not before: Mon 02 Oct 2023 17:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:60:dd:96:22:8f:f5:44:d1:d8:1d:7f:27:68:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 17:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f12d6b86e8b9eec69c97ea7467a7f2dd6aab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:bd:2f:50:6b:f5:70:03:79:3b:05:3a:c4:
03:48:7f:8e:21:6b:45:b5:14:e1:4b:61:25:04:30:
30:56:0f:3a:68:c3:c6:30:23:99:3e:bd:a9:a9:16:
d6:37:4e:75:d3:33:54:e9:f7:1a:f0:18:c5:52:5a:
68:f7:58:8f:e8:31:58:26:c7:4f:f7:83:d2:e5:24:
f4:62:1f:7d:8b:2c:a1:82:2e:b1:bc:46:7a:be:3c:
63:eb:00:9e:52:e1:a5:5f:cc:c7:74:a0:e7:6e:39:
7e:fe:a3:fc:18:cc:61:41:40:5b:4e:6a:84:9c:03:
9a:10:04:30:f0:3d:82:18:73:1b:a0:98:e4:ba:eb:
bc:e0:4d:93:dc:98:b3:9e:9f:90:c1:a7:13:54:d9:
f6:8e:91:28:55:d4:a9:05:f1:4f:34:54:33:7b:48:
a7:e6:77:2b:c3:b4:5c:ea:03:10:01:14:de:9c:0c:
5f:a2:4b:1b:ef:c2:fa:98:e8:d7:49:82:0f:fd:7e:
90:8a:52:4f:27:11:b5:48:20:c0:0a:31:40:e6:01:
48:07:5b:39:7c:e5:7a:48:a0:d6:96:d2:4e:a3:16:
92:96:d3:53:f6:d2:04:e4:fe:76:fa:12:95:70:40:
39:e1:17:6d:f6:78:00:e1:62:a7:73:9f:db:3b:4b:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:2D:6B:86:E8:B9:EE:C6:9C:97:EA:74:67:A7:F2:DD:6A:AB:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/svEta4boue7GnJfqdGen8t1qq2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:3f:af:af:41:2c:9d:f5:8a:bf:ac:9f:f6:62:a5:6e:74:2f:
32:06:16:ca:50:eb:d9:7c:6d:38:54:3c:ea:6f:4f:30:50:e1:
60:cd:0a:64:a6:6f:10:45:20:d3:8a:3b:c0:7e:96:32:b5:d5:
8e:83:b2:c7:e7:5d:b7:fa:48:16:01:37:bf:1d:a8:f1:24:da:
28:54:c7:95:e7:9e:cc:71:79:1a:57:d4:ff:ef:d5:af:f3:e3:
6a:8d:e1:4d:6d:fb:74:36:e8:ab:ef:21:c7:5e:58:00:19:01:
18:7a:96:cb:14:20:29:b4:db:d1:97:57:7d:91:1b:3e:59:44:
0a:ac:92:a9:f2:4a:f8:45:89:bf:a6:9d:ff:9d:7c:ad:72:2f:
c1:d5:4e:f3:ee:e7:3b:17:a4:a4:40:d8:82:e1:2d:4f:43:46:
8f:cf:e4:c0:7b:d6:ee:1b:35:8e:57:61:c9:b8:15:ad:d9:66:
23:b7:83:0c:ba:a2:c6:5c:ca:6b:ed:89:15:7a:dd:27:f3:72:
ef:bc:ae:38:2e:8a:6a:12:17:a4:df:52:37:e3:25:e6:33:76:
74:21:a1:ac:0a:44:f0:c2:82:b0:e6:87:fa:ab:e2:65:e7:f9:
22:23:cd:9b:14:31:cc:0a:fb:5f:c9:68:e3:25:d1:99:7e:14:
8e:e6:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:52:18 2025 by rpki-client