Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eywZXq-Z-v407Kw2KUh5_BZ2EzY.roa
File: eywZXq-Z-v407Kw2KUh5_BZ2EzY.roa (raw, json)
Hash identifier: rVjCr9vvhMTgr35S7DJa7lDk8sB+2qoxkATPhblUhis=
Subject key identifier: 7B:2C:19:5E:AF:99:FA:FE:34:EC:AC:36:29:48:79:FC:16:76:13:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACA14D3D3379F78CA7A0D03FC2AD9CC3E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eywZXq-Z-v407Kw2KUh5_BZ2EzY.roa
Signing time: Mon 25 Sep 2023 02:04:37 +0000
ROA not before: Mon 25 Sep 2023 02:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ca14:b424/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:14:d3:d3:37:9f:78:ca:7a:0d:03:fc:2a:d9:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 02:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2c195eaf99fafe34ecac36294879fc16761336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:b5:7a:2e:01:a5:03:bf:40:2d:76:45:f9:
c0:d8:d5:b6:54:ec:45:28:16:85:b4:e8:9f:5c:c9:
89:3a:62:77:5e:96:c5:be:53:76:05:b6:c7:55:75:
b0:a9:bc:77:bd:8c:bb:ec:15:f5:f9:48:da:d9:8f:
b6:14:75:10:5c:eb:39:78:6b:71:02:a7:49:c0:bb:
e8:83:29:1a:4f:bf:4b:9d:d4:1f:40:87:d2:4f:b1:
16:fc:bb:12:48:07:f9:48:dd:29:34:23:bc:24:f3:
77:4c:4b:97:c7:b3:a4:68:2c:08:39:d7:24:7e:22:
42:18:a0:84:5e:3d:cf:27:8e:f6:37:f8:9e:2d:56:
a1:b6:f6:f6:01:24:26:64:4d:fc:55:a1:5c:39:00:
dc:d8:9a:c9:73:65:10:e1:c8:23:fe:fa:c8:71:ed:
06:81:41:94:a7:b3:b3:60:0e:b1:1e:8a:68:b8:09:
40:9a:82:55:df:6e:6f:6f:9e:d4:56:c2:9f:67:8b:
b4:e4:fe:49:5a:f5:a3:12:72:f3:f6:2c:5c:c9:66:
00:ab:69:e2:6d:f6:4e:7e:4e:65:16:c7:90:f7:d3:
70:7a:46:99:e7:9e:9c:22:4c:f6:bd:ff:fd:95:c0:
01:56:e4:e0:d1:c7:50:a3:52:76:ea:fa:73:b5:ac:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:19:5E:AF:99:FA:FE:34:EC:AC:36:29:48:79:FC:16:76:13:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eywZXq-Z-v407Kw2KUh5_BZ2EzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:54:54:24:5f:83:95:45:46:c1:df:25:3f:dc:0b:c8:31:28:
2d:dc:37:34:df:7a:77:d9:37:d3:80:2d:f3:92:b8:ad:34:9e:
cb:16:df:0b:4c:8c:99:ce:9f:43:42:62:06:b9:49:db:88:e7:
30:9b:cd:c3:aa:35:8f:22:e0:6a:c9:1b:d7:16:72:02:e7:00:
be:54:f7:55:2e:7d:6c:2b:07:a1:28:65:dd:fe:78:22:6b:6e:
0d:3d:20:bd:7a:d7:da:1d:2d:63:39:6f:5c:e2:2e:34:a0:6a:
62:5c:8c:52:d5:3f:6d:cf:65:8a:a9:4c:9d:d9:54:08:dd:f0:
49:16:a6:0c:24:ba:79:65:4e:f2:7a:8f:3f:21:ff:a6:d5:58:
b4:37:94:59:d0:f6:15:05:68:45:5f:a6:8d:a2:9e:65:04:be:
10:df:74:89:cf:20:8c:67:42:9f:96:96:fb:04:29:38:6b:5f:
d9:49:45:c7:32:02:95:5e:34:b3:90:ef:de:8d:3f:a5:cd:b5:
7f:f2:ee:f2:b0:54:a9:9f:f7:51:55:f7:39:16:a0:0b:0a:0a:
d1:68:5b:0a:c2:c5:66:07:cf:54:25:d8:a8:cb:8d:ce:27:0b:
97:63:83:42:59:22:37:86:c9:41:d2:43:fd:ab:a3:32:bc:f6:
32:44:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:17:56 2025 by rpki-client