Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7yfpCvHtw5xI7lnIVEg_G0O00kk.roa
File: 7yfpCvHtw5xI7lnIVEg_G0O00kk.roa (raw, json)
Hash identifier: eXXIFSMu+QmgFt5fYdFy5ghEWSzcL8dBShJpEiv15jM=
Subject key identifier: EF:27:E9:0A:F1:ED:C3:9C:48:EE:59:C8:54:48:3F:1B:43:B4:D2:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE6D60362681393A3C0DFFED28B19D76B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7yfpCvHtw5xI7lnIVEg_G0O00kk.roa
Signing time: Sat 30 Sep 2023 16:04:59 +0000
ROA not before: Sat 30 Sep 2023 16:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e6d5:d85c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:d6:03:62:68:13:93:a3:c0:df:fe:d2:8b:19:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 16:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef27e90af1edc39c48ee59c854483f1b43b4d249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a1:e7:f5:7b:04:06:cd:30:e9:29:69:26:9e:
ee:4a:0a:dc:d4:d1:f6:70:2d:61:f6:cf:13:d0:d4:
07:4c:3e:6b:57:a9:1a:e0:ef:3a:0d:83:ef:7e:95:
b1:71:38:d9:15:98:26:9e:ae:10:77:55:cb:d1:6e:
15:1e:7b:50:e7:4f:7e:a1:dd:8f:e0:4c:0c:dc:71:
d7:55:7a:d0:a8:15:94:de:ad:24:dc:7d:c2:d6:78:
41:c4:c0:24:00:0d:f0:87:4c:1a:5a:ca:29:c1:8f:
64:24:90:97:0c:69:8c:58:02:c6:fe:52:51:40:77:
c6:c8:80:fe:ec:ec:50:2f:a9:f8:ef:b2:68:8a:22:
0b:1d:df:81:63:38:1b:32:19:c8:ef:b8:0a:dd:e3:
e7:3b:f0:8a:ad:12:a9:80:45:7f:0d:ae:50:7d:37:
ea:87:ff:3a:64:ac:4b:a7:0a:20:7f:26:99:21:47:
d5:df:27:f4:27:c0:b3:dc:ed:5f:23:59:42:b8:58:
a1:01:38:57:57:37:2c:96:52:6b:35:47:c1:04:27:
24:d4:5e:0c:70:47:8d:ad:0d:a5:e7:38:df:c2:15:
d7:26:e6:b3:73:3f:83:5f:bb:05:a4:47:2e:ca:b2:
ec:9a:69:46:8a:79:9c:31:7e:16:14:da:04:8e:af:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:E9:0A:F1:ED:C3:9C:48:EE:59:C8:54:48:3F:1B:43:B4:D2:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7yfpCvHtw5xI7lnIVEg_G0O00kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:23:b4:61:57:34:c2:18:3b:b8:9f:94:06:44:0d:10:91:e7:
ba:68:63:ea:d2:ba:8e:69:df:74:25:b2:b3:db:86:9f:ab:a5:
f4:5d:39:ee:a1:eb:e3:47:94:14:9b:08:65:79:73:bc:ed:e5:
b0:02:c9:1f:a8:d9:80:bd:de:0d:dd:d2:c8:98:e7:af:33:c6:
06:51:31:01:dd:a4:6d:ea:bb:a9:67:6f:39:57:d3:cf:6a:3a:
34:cf:67:67:c2:c6:c6:25:17:62:f8:be:20:d9:be:4a:a3:78:
79:a5:65:eb:99:92:d2:45:7b:1a:1d:ef:d1:1f:b5:ec:ed:3a:
c1:94:92:08:26:2b:1f:40:af:e9:7c:37:67:de:d0:5c:ee:ce:
96:ae:c3:60:82:56:35:e9:3f:c4:27:a8:dd:80:3d:1c:c0:27:
3e:ac:33:d7:62:06:b1:29:03:c2:c9:01:62:b0:c1:93:c5:d1:
02:a6:f3:54:d4:ae:36:89:02:e8:e3:51:43:c3:68:07:c2:7c:
5b:42:ad:39:cb:ce:be:64:d8:7f:c0:4f:03:87:2d:bd:9c:e6:
94:7d:60:02:a8:ec:ef:72:6b:ed:1f:7f:c7:98:62:33:74:d6:
86:2a:e0:ae:d5:8e:bb:8d:a7:cb:8e:31:4c:e4:fa:a4:9c:33:
58:35:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:34:30 2025 by rpki-client