Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eU8aaXkuFv8npjdHhLu4fMy1GyE.roa
File: eU8aaXkuFv8npjdHhLu4fMy1GyE.roa (raw, json)
Hash identifier: 2H9fu+1csG8eIMmevh8icNsGVlbWpGVSRcSbwcgIaeM=
Subject key identifier: 79:4F:1A:69:79:2E:16:FF:27:A6:37:47:84:BB:B8:7C:CC:B5:1B:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA33B53B3D67D4907FD2CE01E69D8EE78
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eU8aaXkuFv8npjdHhLu4fMy1GyE.roa
Signing time: Mon 06 Nov 2023 06:04:16 +0000
ROA not before: Mon 06 Nov 2023 06:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:a33b:40ab/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:3b:53:b3:d6:7d:49:07:fd:2c:e0:1e:69:d8:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 06:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794f1a69792e16ff27a6374784bbb87cccb51b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:4e:d3:4f:7b:12:f7:4a:6b:29:05:07:c2:
a2:38:5b:31:e4:3c:b1:a1:06:cf:73:cb:01:cd:ba:
da:14:6e:31:5e:1e:dd:95:ad:10:55:aa:b0:f9:47:
54:27:e9:e5:2a:d2:73:65:1b:07:7f:60:3f:2c:86:
af:dd:02:11:ad:2a:0c:d7:92:41:7e:06:fc:51:14:
82:d4:25:e1:b7:26:d6:98:d3:ad:ba:69:49:61:76:
2d:e9:8a:7e:99:8d:69:11:12:e6:e0:09:0c:37:fe:
19:00:07:7b:5b:7e:08:cf:4d:98:e4:75:d5:95:0e:
f7:04:0b:92:78:9c:92:bd:d6:ca:ef:75:64:7d:30:
12:db:bd:93:1e:b2:a9:2d:88:ee:29:8e:2c:3e:9f:
2d:16:19:81:8f:77:b3:33:e0:a2:e8:d2:e9:02:32:
48:b1:94:db:7e:28:c6:f1:61:0d:0b:e3:5b:e9:34:
fb:f6:df:d3:10:cc:e2:b2:fa:ec:55:04:5a:fd:f3:
b8:61:78:eb:4e:c8:cf:46:3b:c8:ff:21:18:d1:ea:
76:8b:f5:9c:c1:03:5c:08:12:17:55:2e:00:b5:1c:
63:10:91:7f:ba:f4:ba:84:02:7c:df:3e:64:f3:5c:
2a:c1:9e:d5:c3:10:6e:69:b2:a1:38:33:18:9e:b6:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:1A:69:79:2E:16:FF:27:A6:37:47:84:BB:B8:7C:CC:B5:1B:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eU8aaXkuFv8npjdHhLu4fMy1GyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:47:dd:d8:98:89:e0:0a:35:11:c3:d6:44:58:fd:cc:5e:6d:
d9:a5:f3:48:29:08:49:67:6c:f2:f2:0c:83:3b:28:4a:47:e6:
d1:0e:bd:94:3b:8c:ff:7c:e5:2a:a1:26:48:0b:fe:21:d1:c5:
fd:9d:ed:34:b6:86:1e:00:e2:1b:8b:13:b9:19:f0:c6:7e:8c:
f4:98:24:68:e2:2c:b0:33:36:da:35:e5:4a:ba:fe:bd:7b:9c:
45:7f:9c:dc:65:a9:19:d7:fb:d6:ab:a0:81:9b:56:0b:c1:e2:
36:dc:96:16:aa:2e:18:03:21:e7:ff:5f:91:c9:f3:ca:6f:8b:
83:65:1f:98:33:64:40:b4:f4:2d:9a:c3:6e:8f:ef:f3:cb:5c:
e6:cb:57:61:3c:b2:33:a7:37:71:17:f6:ee:f0:45:f4:65:0e:
1c:5f:d1:10:4a:98:21:21:a1:80:59:12:22:b5:fe:a4:da:6c:
11:e8:75:2d:a7:3a:15:e2:73:ff:40:c3:b3:50:db:76:8f:7a:
ae:61:81:9a:07:bf:90:73:56:04:c6:7c:d6:a7:ca:a2:62:0b:
f8:3f:28:71:3c:f1:32:a5:29:8d:91:4c:63:cb:e3:c2:9b:47:
6f:9e:18:73:de:bf:ff:08:93:c9:32:e6:34:61:1a:77:c2:80:
45:8d:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:48:51 2025 by rpki-client