Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOOOc2R6IZgob7Vw1mp_t9zHk9Q.roa
File: EOOOc2R6IZgob7Vw1mp_t9zHk9Q.roa (raw, json)
Hash identifier: Gtp8SK27w3YNirT46zRLWH+CdKSq18KCEqB9pmJjN9s=
Subject key identifier: 10:E3:8E:73:64:7A:21:98:28:6F:B5:70:D6:6A:7F:B7:DC:C7:93:D4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC3A4E16E7588575FAC8374B1EC5DBFB4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOOOc2R6IZgob7Vw1mp_t9zHk9Q.roa
Signing time: Sat 23 Sep 2023 20:04:37 +0000
ROA not before: Sat 23 Sep 2023 20:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c3a4:9049/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:a4:e1:6e:75:88:57:5f:ac:83:74:b1:ec:5d:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 20:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10e38e73647a2198286fb570d66a7fb7dcc793d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:85:8c:19:ad:7a:96:12:a8:79:3f:f5:73:
7f:d1:c5:90:b5:28:dc:a9:47:27:9c:1b:eb:d4:85:
49:2d:74:bb:36:fd:e4:f1:4b:3d:a5:b1:7a:76:a2:
bd:a8:30:f8:cf:c1:c0:15:2e:31:f3:5a:d0:b8:31:
47:32:bd:c0:8f:60:43:ca:c7:06:7b:db:64:57:6d:
cf:63:68:57:d1:91:95:73:27:31:79:26:69:d9:64:
ef:a1:bd:15:c5:48:2e:a6:23:24:27:19:61:da:12:
39:f1:28:d4:12:34:7c:6c:6f:9c:64:82:68:05:02:
cc:e5:1e:4e:37:f3:51:38:63:57:94:dc:7c:52:ac:
fd:59:14:42:05:27:df:68:1a:78:2b:25:c3:70:6f:
25:e4:ff:01:8e:28:a4:4e:b5:9f:47:e8:ae:a9:f0:
21:d6:46:0a:9c:36:ef:2e:71:1e:d8:59:1d:3a:0a:
20:19:7d:61:6b:22:68:c1:63:a5:db:97:34:d0:11:
33:92:8b:3e:e9:8b:76:17:68:0a:51:60:56:24:4b:
25:18:cd:5f:5b:81:46:e6:29:46:b3:ad:2d:fd:28:
03:c0:59:11:8b:6a:34:19:2a:67:43:4a:84:86:1e:
71:1d:bc:16:b1:e5:33:89:50:81:1b:e6:db:66:c6:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:8E:73:64:7A:21:98:28:6F:B5:70:D6:6A:7F:B7:DC:C7:93:D4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EOOOc2R6IZgob7Vw1mp_t9zHk9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:77:d8:5a:c1:40:b8:41:e3:16:83:f1:9b:a2:be:63:07:5c:
74:48:30:39:91:15:ba:4d:d3:ed:53:c5:68:f7:1c:42:ec:68:
09:30:75:41:8f:b0:0b:76:28:05:d1:5f:ed:3b:d2:8d:5e:ae:
b1:77:b1:85:99:74:d3:0d:fa:47:b9:8e:ee:7d:0b:ec:bb:a1:
d4:e7:0e:a6:f1:0d:09:0f:c3:59:6c:db:44:de:9d:41:6e:a2:
8b:2c:0a:4c:f7:90:a1:23:e2:53:a5:8b:31:dd:10:6e:5d:bd:
8a:ad:38:34:70:3c:07:66:84:ab:59:de:3f:c3:51:7c:c9:af:
60:07:82:7d:11:2c:a6:01:74:7d:65:f9:a8:bb:d9:51:56:2e:
22:e8:4c:13:e9:38:f8:8a:0b:32:a4:3a:c5:1e:f9:64:3f:de:
2f:b0:7e:d3:5f:d7:65:08:1c:e5:2c:0d:f1:5a:aa:b0:f5:5d:
f4:b4:d0:97:d4:6d:65:a6:41:16:8d:83:3f:1a:4b:76:c4:36:
88:35:f6:11:17:2c:f1:10:1e:f0:1f:72:b4:97:68:f4:10:ba:
9f:db:11:35:0a:48:56:59:dd:af:0b:a4:6f:6c:80:eb:9d:e7:
fe:44:0c:a8:ba:dd:5c:d0:d8:9e:cf:f5:13:c9:ff:c5:0a:c5:
7a:db:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:22:37 2025 by rpki-client