Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBpWQDT1MMDm3kAOrICj2bA8NKo.roa
File: EBpWQDT1MMDm3kAOrICj2bA8NKo.roa (raw, json)
Hash identifier: cFyswnL/f5FqXrz2nf10ktP+Jsi/kk80vxGXUUU1uzc=
Subject key identifier: 10:1A:56:40:34:F5:30:C0:E6:DE:40:0E:AC:80:A3:D9:B0:3C:34:AA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2E4806D1923BCC3B522275CDE11DA936
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBpWQDT1MMDm3kAOrICj2bA8NKo.roa
Signing time: Sun 03 Dec 2023 06:05:21 +0000
ROA not before: Sun 03 Dec 2023 06:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:2e47:6810/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:48:06:d1:92:3b:cc:3b:52:22:75:cd:e1:1d:a9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 06:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=101a564034f530c0e6de400eac80a3d9b03c34aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:b6:ca:d9:d5:37:61:2a:53:79:fa:3d:91:
d3:17:dd:09:b0:ad:62:0c:82:40:3a:9c:3a:63:02:
f3:f2:42:7a:fa:8c:3e:c5:1f:be:b3:95:32:6e:80:
69:e4:fd:aa:82:1a:5b:d7:3e:53:68:fb:ab:c3:0a:
70:65:ea:c6:4d:03:6c:89:07:3a:e9:2e:64:43:a7:
89:dc:9d:46:1d:1d:05:7d:e2:e1:d6:4d:56:c2:b1:
ff:b0:bf:7e:ae:a4:c4:46:21:36:2d:02:80:7c:b1:
e0:05:67:2c:08:0a:26:fa:39:ea:95:21:15:d1:6a:
78:d5:d8:f1:4e:54:d0:b2:33:3c:5e:81:32:74:2a:
1b:7b:ee:62:99:2f:3c:6b:5a:dc:ed:90:ad:2f:ed:
44:74:c0:4e:f4:91:a2:d3:e6:f5:0a:7d:36:03:80:
8e:e4:66:6c:75:b2:1f:1c:02:b0:3c:ff:87:4f:83:
07:77:eb:fc:8c:d1:a8:a2:5e:a4:33:c6:0f:6c:08:
fa:d9:1b:d0:ed:e0:7e:d4:48:83:b6:d0:c5:aa:a1:
00:6d:d4:f4:ab:b9:a3:be:34:fb:6f:33:d4:a7:6a:
2d:b7:b8:6c:2e:56:d8:b2:31:b9:0d:1c:bd:07:2f:
69:4d:86:b0:9b:5f:e0:d1:0a:0d:88:36:9b:33:2f:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:56:40:34:F5:30:C0:E6:DE:40:0E:AC:80:A3:D9:B0:3C:34:AA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EBpWQDT1MMDm3kAOrICj2bA8NKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:61:bb:91:1b:b6:9a:8f:e0:80:2c:c7:71:c5:64:8c:0a:22:
b6:bd:cb:82:1a:89:86:56:ed:38:05:f7:90:74:ff:28:50:99:
1e:1b:03:b4:5b:22:57:c3:7c:fb:06:92:4e:5f:20:f0:47:be:
14:1d:83:ef:64:d6:83:27:bf:6a:c5:e0:27:4e:7d:dd:5e:7f:
fb:90:7c:15:2e:8f:f8:3c:ae:7a:36:67:0f:b5:74:23:da:e0:
a1:86:32:9b:c4:77:80:df:2e:18:ce:44:e6:28:42:0d:16:de:
eb:54:55:42:ba:9e:0e:c1:6d:48:d6:16:3e:67:e3:d9:c1:b6:
12:64:51:95:ff:65:f1:41:fb:0e:1d:f4:01:a7:91:a2:bf:31:
95:d8:64:e7:93:25:36:4a:b3:8d:98:27:ae:28:3d:da:b6:62:
01:01:8f:9a:90:aa:0f:79:54:22:04:2d:ac:fd:9e:5d:33:85:
e7:b5:bf:f5:a3:76:ce:a8:27:61:17:2c:42:a3:3e:11:87:a0:
3a:f8:e5:22:86:29:34:c1:6b:e7:44:a3:31:17:64:7b:48:be:
14:64:ae:b1:ca:fb:d5:44:a2:db:a7:e7:36:71:15:1e:bb:80:
fc:ad:5d:5d:4d:42:b1:3b:ff:16:ab:31:7f:8d:87:bf:26:39:
d6:bd:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:07:40 2025 by rpki-client