Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eO-LEBk7F31p2jlgnY5L-FSD70E.roa
File: eO-LEBk7F31p2jlgnY5L-FSD70E.roa (raw, json)
Hash identifier: VfLEL6xX+SuQRqowskjzjFpPbpF5fcEmb8fRLYfW9lA=
Subject key identifier: 78:EF:8B:10:19:3B:17:7D:69:DA:39:60:9D:8E:4B:F8:54:83:EF:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4BAFF4230E979E542C96BE22F6481101
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eO-LEBk7F31p2jlgnY5L-FSD70E.roa
Signing time: Fri 08 Dec 2023 23:07:51 +0000
ROA not before: Fri 08 Dec 2023 23:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4bac:80a1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:af:f4:23:0e:97:9e:54:2c:96:be:22:f6:48:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 23:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ef8b10193b177d69da39609d8e4bf85483ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:97:e8:71:c3:c7:07:19:be:e9:fa:42:b0:
fc:ee:42:e6:26:bf:8e:ed:0b:57:53:3f:ec:ae:b6:
5b:1c:e2:b8:79:7a:fd:20:6c:18:ec:ab:50:9d:69:
39:71:69:2b:7f:f5:d1:a6:32:ec:3a:9e:82:7a:d9:
45:4b:cd:78:4b:8d:2e:b3:33:f2:55:84:e6:20:11:
0d:25:c9:72:59:93:2d:44:cb:0e:2c:04:df:5c:91:
fa:a3:db:2f:c0:ac:9a:30:85:53:5d:da:4b:5f:e8:
3a:a1:b0:27:3c:3e:3a:b0:a8:a5:e9:76:f4:ad:31:
96:6e:62:58:5a:b0:5f:2c:4f:b5:8a:86:d9:2d:b8:
6b:b0:27:f3:80:f6:7c:e8:9e:1e:ae:74:63:d0:4b:
8c:21:58:b0:a3:3e:53:85:b8:f1:b8:d3:6a:9d:66:
ee:73:f7:56:a2:f5:bc:dc:dd:ef:0f:23:cd:90:f7:
ca:af:96:31:5f:5c:3a:3b:2a:e7:7d:79:99:a9:52:
f7:44:98:91:53:11:70:9f:c9:12:cc:df:12:58:6f:
d9:2b:b5:9e:1c:6d:81:9e:6d:aa:23:e5:c6:07:ed:
8f:8d:c4:71:8d:6f:71:39:79:10:24:73:d7:2a:a2:
e6:9a:53:1a:54:83:2f:8d:41:65:85:9b:52:97:d4:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EF:8B:10:19:3B:17:7D:69:DA:39:60:9D:8E:4B:F8:54:83:EF:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eO-LEBk7F31p2jlgnY5L-FSD70E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:86:77:6d:5c:5b:03:78:b7:f9:05:62:f6:d8:19:30:bc:ae:
ea:e8:84:91:73:e4:d3:c9:ec:7e:ac:1e:59:7f:43:8a:49:b8:
fd:e9:ec:2e:ee:67:84:f6:60:4f:7b:75:2a:ce:e2:1b:32:f3:
4b:44:6e:da:e9:9e:b4:06:b5:f2:29:d0:92:fb:9c:d2:40:3d:
52:d5:98:c3:bb:14:4c:43:19:9c:d5:24:0c:82:66:c8:c4:98:
07:39:70:1f:74:0e:dd:63:c9:72:61:c5:65:3e:9a:38:d0:bb:
7a:56:7a:58:4b:88:b4:e8:2e:10:5c:71:af:16:35:69:ae:86:
67:8d:10:67:88:13:59:1d:8f:15:8e:d0:98:4b:05:73:ef:4c:
ae:94:ed:7c:9d:e5:59:db:2b:ff:f4:0c:63:26:80:27:ef:ae:
c8:26:e9:15:81:3b:5f:01:a0:4f:81:0b:33:e5:d2:c2:36:40:
b3:8e:75:9d:7d:c4:e7:ca:45:a6:e2:61:36:9b:75:6f:7b:2e:
84:0d:80:98:8f:1a:3c:df:7c:85:16:27:e7:44:36:23:82:54:
c6:f4:fc:0a:28:33:65:c6:05:2a:bf:73:24:0c:d6:e9:33:76:
a3:90:d3:58:6f:17:16:f0:6e:bb:fd:08:6b:ae:40:3c:00:19:
fb:8d:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:57:57 2025 by rpki-client