Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGQ3UPJSgFZd2er2HSTXB6CIf-M.roa
File: eGQ3UPJSgFZd2er2HSTXB6CIf-M.roa (raw, json)
Hash identifier: 10gkPyK3wbxb9trYO6vJoSbv8GV4vxYvSUm4kpLteMI=
Subject key identifier: 78:64:37:50:F2:52:80:56:5D:D9:EA:F6:1D:24:D7:07:A0:88:7F:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABFC81C89B77BCE8FD664876E4251D3F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGQ3UPJSgFZd2er2HSTXB6CIf-M.roa
Signing time: Sat 23 Sep 2023 02:04:37 +0000
ROA not before: Sat 23 Sep 2023 02:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:bfc7:e8bc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bf:c8:1c:89:b7:7b:ce:8f:d6:64:87:6e:42:51:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 02:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78643750f25280565dd9eaf61d24d707a0887fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:08:2b:f3:49:44:e9:94:a4:00:d4:ba:08:
b9:d5:26:bd:67:d0:80:5d:15:ae:00:d7:c1:b3:fc:
4d:b2:c0:66:87:e0:d0:ef:da:2d:43:76:11:20:45:
7d:cb:56:42:10:44:a0:19:50:b2:ab:b3:54:eb:8d:
72:47:b5:6a:92:05:ff:38:55:0b:da:c7:9a:57:0f:
25:80:53:f8:15:ab:e8:b5:d2:1d:a5:a2:e7:d7:7a:
9f:ca:d5:da:c6:80:14:34:ca:0a:fc:04:cf:42:93:
41:cf:38:6e:09:5c:70:99:46:1a:2a:c7:1f:b0:b7:
c8:c4:68:e2:b5:71:2f:aa:c5:f9:7e:e4:43:9e:c3:
3b:97:12:30:6a:76:18:dc:d1:79:8b:7d:c6:9a:9e:
8b:69:a8:75:19:1c:7a:62:ec:25:df:e5:ec:44:88:
ad:07:ed:f7:0f:bd:80:83:ac:ce:73:fd:0d:16:d9:
58:50:a6:39:c3:a3:9e:2f:35:01:fd:f7:7a:ea:90:
44:10:1e:c7:73:b4:26:8e:2f:79:21:e3:ef:22:97:
b6:3b:09:3b:21:0d:dd:ab:74:76:eb:ad:db:24:45:
70:ef:b3:c8:c7:e7:3b:9a:e7:81:88:4e:31:60:60:
d7:99:49:57:73:46:a0:66:5d:09:b7:d0:68:96:3b:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:37:50:F2:52:80:56:5D:D9:EA:F6:1D:24:D7:07:A0:88:7F:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eGQ3UPJSgFZd2er2HSTXB6CIf-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:24:15:d0:8f:d2:ea:a8:e9:78:07:ce:e2:65:fc:42:8d:3a:
7e:f0:3d:d0:1c:44:60:e6:94:e5:00:63:83:76:d2:15:d1:9c:
cc:43:28:f6:93:8f:0a:f5:fc:42:de:66:24:c6:df:46:00:75:
92:90:1f:80:28:ec:8a:51:b2:23:77:ce:d4:0f:76:83:ed:33:
23:91:29:78:7a:f2:95:c6:ad:20:c9:ff:e2:c2:85:97:b3:ba:
eb:9b:ea:30:e3:80:c0:12:f3:89:95:9c:66:33:9b:eb:1a:90:
16:76:2a:7c:c0:35:6d:67:dc:44:cf:05:4f:c3:24:5d:d7:4c:
09:e5:fe:1f:e2:6a:e3:f6:31:f6:32:64:6f:72:c2:84:f8:5a:
9c:01:3d:30:9b:41:de:d1:8c:3a:e5:9e:d5:9d:6d:24:f7:fe:
67:76:fb:f5:e3:bd:09:c3:e9:5f:7c:48:80:d4:76:a9:2f:d2:
7d:f2:5b:de:df:34:f9:89:e7:1e:86:0c:75:88:4d:b6:5f:e8:
a8:30:9b:37:ff:ab:02:23:b6:d3:df:8d:ed:02:4e:d4:ea:6a:
4a:78:17:9a:1b:29:a7:f8:c5:91:19:f5:38:17:d4:94:4e:d8:
ad:0b:a8:87:79:73:c0:39:9e:f7:d7:8e:90:e2:87:f5:0f:9d:
d5:1d:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:16:45 2025 by rpki-client