Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEpadAbUn5GMxNgojnOWKOjbLIs.roa
File: kEpadAbUn5GMxNgojnOWKOjbLIs.roa (raw, json)
Hash identifier: SpaJsgDf3hjIVlRc2HeObYuPve0n41M9PV2uJE0tiCs=
Subject key identifier: 90:4A:5A:74:06:D4:9F:91:8C:C4:D8:28:8E:73:96:28:E8:DB:2C:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4655D89C16E23C81B41C47AEEF0F637D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEpadAbUn5GMxNgojnOWKOjbLIs.roa
Signing time: Thu 19 Oct 2023 05:08:32 +0000
ROA not before: Thu 19 Oct 2023 05:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4651:faf9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:55:d8:9c:16:e2:3c:81:b4:1c:47:ae:ef:0f:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 05:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904a5a7406d49f918cc4d8288e739628e8db2c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:4c:3e:1d:4c:85:69:82:19:be:59:a1:f7:
43:98:2d:ba:70:b8:32:99:13:18:fa:89:ae:89:e0:
d6:be:4c:23:4e:93:7e:85:97:64:48:71:64:4d:c8:
31:54:24:81:31:be:e9:3a:3b:6e:3b:a5:13:c0:da:
7c:0e:50:99:41:74:bf:a6:05:90:65:54:0f:f5:06:
d8:31:f2:af:4e:f9:53:1b:22:25:15:59:54:d3:cc:
79:ad:20:a2:c9:fe:b6:ed:be:01:af:31:a2:66:be:
10:9d:13:f0:86:8c:9e:63:f8:da:d0:a3:d9:b9:b7:
01:88:2b:2f:ad:d3:b3:83:44:bf:97:32:02:28:f7:
f8:28:63:1d:b7:a1:f7:a2:22:4e:3a:68:4a:18:75:
3a:51:3e:74:0e:44:2d:ef:f7:c5:b9:1d:bd:b5:ec:
82:46:28:a4:d3:1a:87:a1:26:58:a3:5b:3f:82:11:
66:42:d1:f0:40:46:86:d0:c9:7a:e6:c9:06:10:42:
d6:83:d4:ee:72:ed:af:34:d7:d9:bf:4f:69:56:fb:
de:b9:6b:e3:20:40:5f:00:b4:5d:5e:22:36:d4:75:
a4:3f:76:2b:79:e6:59:c8:c1:86:15:6f:52:19:8c:
db:d8:a0:8c:1f:b4:95:07:1b:b9:31:69:7b:23:80:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:5A:74:06:D4:9F:91:8C:C4:D8:28:8E:73:96:28:E8:DB:2C:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kEpadAbUn5GMxNgojnOWKOjbLIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:9e:20:71:20:a2:5a:c3:eb:1d:b0:ce:18:0a:15:6d:12:bd:
96:de:a8:8f:88:c0:f1:ea:09:75:38:5a:57:2b:b0:1b:14:cc:
35:e3:06:c8:ac:a7:9c:51:15:0f:fd:fe:b7:ba:72:aa:be:e9:
cb:c7:bf:87:12:2a:95:02:e3:b0:95:80:d7:e7:41:2c:0f:03:
86:8d:d3:5e:4e:35:84:7d:40:95:d5:ab:44:ab:8f:15:37:cb:
45:7f:aa:82:e8:c0:a9:63:ee:5c:66:fe:8c:cd:0f:2c:b0:d2:
b7:66:37:02:c7:54:74:f2:bb:31:69:d3:e6:7a:28:79:0c:d4:
53:ab:68:78:92:84:15:8d:d5:49:5d:06:0c:09:1c:57:a3:63:
47:dd:5d:c3:b6:7a:03:68:51:17:fe:70:40:19:be:25:18:f8:
40:cc:3c:57:cb:6f:d0:9b:6a:38:10:57:52:6e:c1:87:23:4f:
1a:89:a6:12:af:42:c2:61:40:c9:28:2c:b8:36:9a:32:9a:b2:
1e:cb:31:76:7a:53:e7:48:42:15:05:4e:ef:57:0c:67:5c:f0:
e8:64:1b:2b:7a:d3:48:08:1b:12:90:cf:b2:9f:0f:7f:60:af:
87:78:40:4a:11:98:6c:b9:eb:f8:6f:8e:c0:49:24:f5:c2:59:
9b:92:0e:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtGVdicFuI8gbQcR67vD2N9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDUwODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDRhNWE3NDA2ZDQ5ZjkxOGNjNGQ4Mjg4ZTczOTYyOGU4ZGIyYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGtMPh1MhWmCGb5ZofdDmC26cLgy
mRMY+omuieDWvkwjTpN+hZdkSHFkTcgxVCSBMb7pOjtuO6UTwNp8DlCZQXS/pgWQ
ZVQP9QbYMfKvTvlTGyIlFVlU08x5rSCiyf627b4BrzGiZr4QnRPwhoyeY/ja0KPZ
ubcBiCsvrdOzg0S/lzICKPf4KGMdt6H3oiJOOmhKGHU6UT50DkQt7/fFuR29teyC
Riik0xqHoSZYo1s/ghFmQtHwQEaG0Ml65skGEELWg9Tucu2vNNfZv09pVvveuWvj
IEBfALRdXiI21HWkP3YreeZZyMGGFW9SGYzb2KCMH7SVBxu5MWl7I4CWfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJBKWnQG1J+RjMTYKI5zlijo2yyLMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEva0VwYWRBYlVuNUdNeE5nb2puT1dLT2piTElzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAqeIHEgolrD6x2wzhgK
FW0SvZbeqI+IwPHqCXU4WlcrsBsUzDXjBsisp5xRFQ/9/re6cqq+6cvHv4cSKpUC
47CVgNfnQSwPA4aN015ONYR9QJXVq0SrjxU3y0V/qoLowKlj7lxm/ozNDyyw0rdm
NwLHVHTyuzFp0+Z6KHkM1FOraHiShBWN1UldBgwJHFejY0fdXcO2egNoURf+cEAZ
viUY+EDMPFfLb9CbajgQV1JuwYcjTxqJphKvQsJhQMkoLLg2mjKash7LMXZ6U+dI
QhUFTu9XDGdc8OhkGyt600gIGxKQz7KfD39gr4d4QEoRmGy56/hvjsBJJPXCWZuS
Dvs=
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:08:00 2025 by rpki-client