Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ePF3yGkOC3qZK6m6f5oiWBgd-A.roa
File: 2ePF3yGkOC3qZK6m6f5oiWBgd-A.roa (raw, json)
Hash identifier: l+w9if8XACif1b6WSyC2ijC3wpXYFaaHWl1uXadO+q0=
Subject key identifier: D9:E3:C5:DF:21:A4:38:2D:EA:64:AE:A6:E9:FE:68:89:60:60:77:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5B20824033E2DC664969581926D44001
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ePF3yGkOC3qZK6m6f5oiWBgd-A.roa
Signing time: Mon 11 Dec 2023 23:05:06 +0000
ROA not before: Mon 11 Dec 2023 23:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:5b1f:bc9b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:20:82:40:33:e2:dc:66:49:69:58:19:26:d4:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 23:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e3c5df21a4382dea64aea6e9fe6889606077e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:eb:c0:64:16:75:78:ab:d3:c9:f2:e0:e6:
64:45:99:f7:4c:f7:99:03:dc:53:db:b9:f6:48:57:
20:01:ba:05:9f:81:d2:f9:e1:4d:3b:e3:96:bd:09:
84:0d:dc:ec:03:6d:4c:7d:35:e8:70:0d:ff:63:26:
ac:a8:1e:57:78:30:a9:55:7b:dd:56:fa:79:14:f9:
2d:1e:90:fa:96:fd:8f:fc:8d:7f:2f:ed:18:4f:a2:
a1:4b:6c:ad:7d:cd:bf:15:88:a2:c1:30:9e:b7:30:
18:52:87:ff:a9:ec:40:07:8e:76:bc:c4:0e:22:51:
a7:8e:7c:c8:0d:31:fe:50:8b:a9:f3:9c:b3:5d:b8:
9b:31:de:e5:59:fc:a3:7b:9e:ed:ac:1f:99:97:50:
69:53:45:c6:1e:48:cd:34:71:af:18:02:a0:9e:34:
78:3d:47:22:b8:c4:55:0e:45:cd:15:69:82:ab:71:
b5:c5:12:df:de:9c:e8:6d:39:8f:c3:7f:12:51:74:
41:d1:73:9e:b1:1f:89:1b:4f:1d:81:91:33:4b:59:
b9:c2:a1:cb:5c:a9:34:c7:bc:6d:bf:f7:9d:28:9b:
eb:6f:ad:23:d4:87:82:8c:ef:38:7b:df:9b:3d:48:
80:2d:bd:89:50:0d:bc:3b:b1:b9:30:13:2d:60:9e:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:C5:DF:21:A4:38:2D:EA:64:AE:A6:E9:FE:68:89:60:60:77:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ePF3yGkOC3qZK6m6f5oiWBgd-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:bb:53:0c:5f:6a:b6:d6:64:3d:5a:7e:03:c4:fc:18:1f:35:
46:77:8b:f4:de:66:29:f5:cc:ec:bd:a4:c4:2d:3a:e1:08:14:
9d:b9:d9:24:ce:be:a0:47:ad:8f:92:f9:0b:51:6d:17:09:48:
dd:2e:55:d0:47:72:f0:e2:26:c9:c1:fa:ad:89:03:76:33:3b:
d0:15:6a:7c:24:23:45:de:d9:b7:b9:c2:f7:f4:8c:fe:03:a3:
09:2e:b2:7d:7e:82:8f:84:68:ca:f7:84:3c:2b:40:e7:ed:33:
5c:9b:c8:7f:d4:81:b1:cd:7e:2b:8c:f5:b5:56:55:56:a1:0b:
5a:d1:3f:ff:d8:20:96:3e:18:20:7e:1b:10:5a:a3:69:bd:14:
df:7f:7f:20:59:cc:74:0b:c1:62:ef:56:04:3f:6c:71:be:32:
31:6c:34:44:84:60:f6:87:5b:6d:83:68:11:36:db:ce:ab:55:
28:50:5e:f7:bb:bf:e0:8f:60:ab:6e:8a:7d:d2:cd:b2:ae:d5:
cd:81:64:dd:c3:3d:97:23:6f:15:20:7b:e8:a5:4d:04:dd:19:
f3:7c:c6:5a:09:26:bb:46:93:75:fa:e3:f1:f4:e2:19:71:90:
7f:94:d4:23:fa:78:bf:0d:c4:18:99:c9:25:b4:1a:14:ea:61:
fb:c4:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:52:13 2025 by rpki-client