Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EpWVmaZEXg0kbc_IB1IW-qO0Hwo.roa
File: EpWVmaZEXg0kbc_IB1IW-qO0Hwo.roa (raw, json)
Hash identifier: XnvepbfZ2wx43bqApGTq36AsM/iz+cLtHRPDiR0GcP4=
Subject key identifier: 12:95:95:99:A6:44:5E:0D:24:6D:CF:C8:07:52:16:FA:A3:B4:1F:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFD5B9D37638A9DFBBA1B1F1F6FE6205B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EpWVmaZEXg0kbc_IB1IW-qO0Hwo.roa
Signing time: Thu 23 Nov 2023 18:05:21 +0000
ROA not before: Thu 23 Nov 2023 18:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:fd5a:d7ea/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:5b:9d:37:63:8a:9d:fb:ba:1b:1f:1f:6f:e6:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 18:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12959599a6445e0d246dcfc8075216faa3b41f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:cd:23:32:17:b6:0a:81:ce:61:e1:ee:02:
9e:e2:f9:a1:9f:34:b4:3e:a2:fb:be:54:6c:db:f1:
bb:0c:fc:db:99:d3:de:e5:f4:bd:7a:62:11:90:7f:
0e:5e:b9:1a:93:b9:01:11:e8:18:38:e8:38:8a:40:
53:6e:cf:c8:11:d5:04:95:a7:ca:7a:8a:a1:ea:fd:
4f:60:71:c0:f9:16:10:42:ca:49:d9:9e:c3:2f:2c:
fc:ec:75:50:c5:d1:3e:e2:6e:6b:df:3d:a4:3e:c5:
dc:e8:4e:12:cc:31:25:25:58:5a:5c:5d:62:55:4e:
23:22:de:5a:15:72:95:29:1e:87:ec:24:69:cf:66:
e6:06:d6:e3:8a:52:c8:00:ee:c3:24:72:8e:37:19:
d9:53:02:0e:61:62:ab:3c:2f:ea:de:85:8d:0f:51:
c9:ce:4e:96:b7:0e:ff:bc:43:11:b2:24:51:64:a4:
9e:a5:6a:fd:26:ec:f7:64:80:e9:3f:06:ad:59:c5:
4a:a5:91:e2:c4:25:60:93:1d:e0:dd:be:88:01:1a:
83:e6:e5:e1:e6:78:e5:f9:f4:38:ff:af:0c:93:60:
09:b2:0e:2b:c2:56:9b:7a:2f:0d:91:d4:96:7f:a3:
a3:5b:4c:f8:63:7b:61:09:ca:55:37:b8:71:f5:62:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:95:99:A6:44:5E:0D:24:6D:CF:C8:07:52:16:FA:A3:B4:1F:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EpWVmaZEXg0kbc_IB1IW-qO0Hwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:14:c0:ac:d4:e9:59:17:6c:5c:cf:70:47:cb:b8:71:00:6a:
ed:95:50:eb:f0:6f:b5:48:bb:39:32:2e:b9:68:93:b0:b5:a7:
c1:c1:bf:50:79:86:09:ac:ae:24:35:9f:2c:a0:61:f3:62:26:
d4:0d:6b:7e:ba:65:0f:95:75:38:e5:63:f9:9b:06:a1:d4:bc:
65:5a:2c:bf:d2:91:37:26:a4:48:7a:9b:a5:38:b3:a6:9c:4b:
32:34:23:3c:53:8e:6e:85:24:58:a5:f6:54:b3:58:97:61:31:
c1:00:40:b9:6a:9e:39:0d:49:6a:7d:46:dd:15:00:92:9e:be:
40:f8:d3:15:d1:d6:8b:8c:64:ea:be:3d:ab:f2:5b:76:4a:f3:
f2:ee:6a:24:1a:80:67:a6:9e:a4:76:61:b3:9c:85:48:c6:bf:
a8:9b:65:e0:a5:f9:2e:d5:3b:3c:6b:e0:7e:76:60:fa:6d:37:
ad:60:c2:e1:2a:64:20:a9:d3:76:25:85:de:f8:19:30:06:bb:
7f:27:ea:a5:a6:03:16:ef:92:90:f9:60:ea:7c:84:00:4f:a8:
96:5d:69:df:1d:d2:36:42:96:9f:bb:4b:51:f5:82:59:ac:c6:
04:d4:b8:6e:86:dc:d7:8f:85:b5:5d:77:2a:8f:2a:1b:89:cb:
85:21:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:15:55 2025 by rpki-client