Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EtnlaITX4V3mxhE3E5-fEe8x3rU.roa
File: EtnlaITX4V3mxhE3E5-fEe8x3rU.roa (raw, json)
Hash identifier: nha4blc3lmkRi74RGvkWJsGu2BGNzEYbnz60qRkphyE=
Subject key identifier: 12:D9:E5:68:84:D7:E1:5D:E6:C6:11:37:13:9F:9F:11:EF:31:DE:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEDE79ED5C9C7A1DC4B1A5103D276677D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EtnlaITX4V3mxhE3E5-fEe8x3rU.roa
Signing time: Mon 20 Nov 2023 18:04:21 +0000
ROA not before: Mon 20 Nov 2023 18:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ede7:9ad6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:e7:9e:d5:c9:c7:a1:dc:4b:1a:51:03:d2:76:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 18:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d9e56884d7e15de6c61137139f9f11ef31deb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:de:0d:99:36:e4:2c:bd:77:9d:1a:bd:fe:
8a:d6:29:da:be:cd:9d:ec:3f:13:3b:07:48:21:52:
24:d8:4c:87:23:d0:5f:c4:36:c4:46:b3:d7:e5:2f:
f1:e5:ea:d6:b4:11:04:48:42:12:dd:81:82:a6:d4:
65:84:36:6c:ed:c5:fe:d6:bd:0f:8c:63:48:39:4f:
db:b8:af:b2:cc:ff:29:92:2d:c2:fc:f3:04:24:ad:
6b:4a:06:3b:4f:1b:72:6b:c2:09:11:62:33:d6:d6:
f3:75:fd:f7:84:43:94:ff:fe:bf:15:cb:c8:02:bd:
24:20:55:ae:81:f6:ec:19:19:42:3a:3c:46:96:96:
ab:8d:f1:87:d8:9e:8f:e9:17:2e:7a:d1:c2:31:0f:
55:f4:42:a5:a7:61:ca:3b:51:78:d6:90:e0:3f:50:
38:85:ae:bc:6f:9d:9c:5d:0d:d0:f5:1e:9c:f8:00:
43:9e:b3:ef:59:a1:81:9b:2b:1b:af:8e:3e:e8:fc:
20:9f:59:63:40:20:ce:da:6f:46:dc:01:c9:0f:7f:
be:ba:69:b2:c2:32:e3:22:3c:cb:5a:87:6a:97:0c:
3b:95:8d:a2:74:71:69:8d:7e:ec:76:b6:90:bb:90:
c8:6a:3d:f4:2e:93:c8:2f:24:e3:92:db:68:88:37:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:E5:68:84:D7:E1:5D:E6:C6:11:37:13:9F:9F:11:EF:31:DE:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EtnlaITX4V3mxhE3E5-fEe8x3rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b6:82:b3:c4:5f:08:59:68:d2:dd:ed:85:42:d1:b7:91:78:
d7:6a:14:50:28:73:31:b7:05:02:b4:61:43:a4:9d:d9:99:54:
52:13:06:7e:1a:28:70:73:2e:eb:f5:8f:d5:49:62:7e:c6:d3:
34:11:c8:2b:06:2e:00:da:c1:21:00:b6:95:78:57:ba:7e:04:
fa:ff:6c:63:db:bb:e9:32:f8:34:31:03:d7:64:65:4b:a4:f9:
bc:63:40:77:f7:77:d6:75:5c:48:78:74:2a:9a:64:b9:55:13:
1f:a0:c4:b3:ef:8f:bd:e3:a6:2d:9c:4a:ac:c6:bd:73:8f:62:
bc:a8:de:45:4b:f6:4a:ff:5e:20:2e:8c:92:8b:52:ca:89:1a:
4c:a3:f4:65:3a:75:b3:17:8c:15:97:70:48:17:ee:03:bf:c0:
69:64:07:a4:01:c5:83:82:9d:3b:ce:ac:c7:70:af:71:45:69:
9a:90:6d:09:e4:e1:ef:46:85:de:f8:a8:4a:30:53:57:b9:b3:
a5:66:ab:fb:75:7a:6e:9d:9e:39:5d:d1:5d:37:77:72:14:47:
ff:a4:4c:d8:f1:8c:37:da:71:1f:4b:68:c6:ea:bc:7a:26:90:
45:9b:73:de:5f:e1:19:8c:64:1c:0f:96:42:80:37:fb:7e:c7:
83:80:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:45:02 2025 by rpki-client