Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKJu-O7hRGywItxCK5YIFwNuar4.roa
File: eKJu-O7hRGywItxCK5YIFwNuar4.roa (raw, json)
Hash identifier: GEZakKfJsOLAQnQb21e06eMAY8A5Q23xEBCIKdgJZOA=
Subject key identifier: 78:A2:6E:F8:EE:E1:44:6C:B0:22:DC:42:2B:96:08:17:03:6E:6A:BE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E686E55A1D57B8F39477B8C9ABB2594C2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKJu-O7hRGywItxCK5YIFwNuar4.roa
Signing time: Fri 22 Mar 2024 23:10:45 +0000
ROA not before: Fri 22 Mar 2024 23:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:68:6e:55:a1:d5:7b:8f:39:47:7b:8c:9a:bb:25:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 23:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a26ef8eee1446cb022dc422b960817036e6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:dd:87:5a:3a:44:ee:f6:f0:8f:5c:fc:20:
6a:f1:c2:f0:50:03:99:da:44:f1:47:52:1b:06:c0:
ba:28:50:9b:54:cb:c1:95:8f:e6:e2:6f:ff:7e:bd:
66:e4:33:26:ee:e4:03:9d:ec:85:a9:e9:49:7a:6c:
7c:8b:2a:b8:c9:52:72:d3:87:1a:13:76:89:ef:d5:
22:3d:0f:66:72:2c:95:f2:50:e7:e6:a6:34:59:21:
f4:dd:a0:e8:86:76:46:c4:3b:23:c1:16:b1:8a:e2:
69:9b:59:86:a1:60:20:b1:9a:a1:a2:8a:02:7e:58:
f5:9a:24:a1:d0:38:5c:81:8b:6b:5f:14:d8:11:f1:
a3:f3:c4:8c:df:60:3b:c2:33:18:f4:96:11:6f:28:
1a:35:c5:06:78:a7:b7:dc:a7:3c:95:75:10:ed:8c:
25:a8:7a:b9:0c:47:39:0a:1c:fd:07:ae:c1:ea:ff:
a2:48:5e:da:5b:16:5f:44:db:cc:35:31:4f:75:e3:
90:df:21:ee:1b:02:be:79:db:6c:ce:a0:d0:4b:0a:
93:63:5d:2a:eb:17:1e:9d:84:14:6d:dd:2a:ae:e8:
40:05:32:53:9c:62:c7:9c:c6:b1:74:cc:b1:30:59:
67:c4:29:1c:48:2b:81:9d:f5:c1:97:d9:78:c6:67:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:6E:F8:EE:E1:44:6C:B0:22:DC:42:2B:96:08:17:03:6E:6A:BE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKJu-O7hRGywItxCK5YIFwNuar4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:13:07:cc:d3:1b:c7:a9:68:b7:d7:c3:af:2a:9c:ea:82:59:
77:76:41:69:bd:ce:0a:3a:05:a3:ec:b7:5f:9a:8e:1e:4a:1f:
bf:87:f3:0a:4d:1f:11:44:e9:43:b9:bb:59:6b:c3:3d:82:ef:
35:72:33:ff:f9:b6:17:7d:68:c1:30:ba:45:f8:9c:9b:e2:6c:
06:2e:b6:ad:75:12:d1:7e:e2:f3:48:3c:e1:2d:30:71:10:39:
50:94:d5:ee:ea:58:c8:26:3a:45:2b:51:c2:93:26:e7:36:bd:
39:26:ff:0a:5e:18:f7:62:3f:45:8b:eb:a7:99:76:f2:bc:26:
1f:76:fb:4c:9b:af:7d:54:23:2e:f8:69:85:54:17:33:17:f8:
90:32:03:7e:c2:eb:11:90:61:cc:59:2a:bd:85:35:2c:43:a7:
bd:78:e6:ac:7c:18:c0:98:0d:ae:92:49:7a:d8:d1:16:05:1e:
8a:e6:1f:21:8b:45:57:74:8c:44:5d:c0:80:b7:1e:6e:90:2e:
a2:f7:54:93:14:36:92:0b:b9:f5:8c:b4:74:b1:2d:5c:24:1a:
c2:54:19:71:f1:ea:13:68:7b:52:3d:9d:d0:66:2d:7b:b7:41:
db:a8:8d:e8:e5:2b:43:f9:2e:d4:d9:04:f6:1a:ed:4a:45:4f:
7c:37:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:47 2025 by rpki-client