Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reuojttaX6BMlKDsprn5ldowuwo.roa
File: reuojttaX6BMlKDsprn5ldowuwo.roa (raw, json)
Hash identifier: Md+iLZpp16Sl1eDpVlVxbE/9mGUpRxR32/sriPRshmg=
Subject key identifier: AD:EB:A8:8E:DB:5A:5F:A0:4C:94:A0:EC:A6:B9:F9:95:DA:30:BB:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AED45F6431DB4D820B1C7B73A6946565A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reuojttaX6BMlKDsprn5ldowuwo.roa
Signing time: Sun 01 Oct 2023 22:04:59 +0000
ROA not before: Sun 01 Oct 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:ed45:2e85/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:45:f6:43:1d:b4:d8:20:b1:c7:b7:3a:69:46:56:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adeba88edb5a5fa04c94a0eca6b9f995da30bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:e3:ed:44:4b:da:f4:9a:02:76:83:52:29:
41:e5:61:69:e6:e6:94:2d:03:a8:b8:e3:9c:2f:98:
75:15:56:ee:11:b0:87:3d:e3:22:42:d2:e8:35:cd:
02:96:f9:9d:b5:88:89:01:2e:6a:9d:0c:47:b6:38:
00:e3:6d:a2:fa:10:21:3c:de:56:8e:12:bc:93:7d:
4b:b4:25:95:04:db:8b:24:6a:be:83:7b:5d:f0:59:
fa:7f:d8:41:ff:0e:64:51:fa:cb:d2:01:17:41:6c:
40:b2:d9:33:22:0e:45:de:47:4a:75:66:76:0d:73:
4d:be:e2:77:24:e4:61:a8:f3:b5:71:56:50:c5:83:
c4:b2:b8:83:ad:bf:da:75:b6:ec:ef:12:c9:46:26:
a9:03:93:ea:66:8b:86:dc:17:03:10:80:2e:aa:59:
4b:13:a0:cc:cf:f6:c3:8d:5f:61:3d:ea:69:a9:ea:
be:ab:5e:48:e6:49:54:18:da:73:bd:85:76:73:3f:
77:5c:16:3f:10:ad:59:de:ad:e0:20:4a:3d:15:d6:
0e:2f:85:b3:7f:e2:e6:98:cd:8d:dd:1d:81:c8:d6:
c8:4d:09:89:99:03:e9:1d:50:47:91:bd:3f:73:df:
dd:35:ed:22:ad:58:96:30:d3:b4:d3:35:65:21:d2:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:A8:8E:DB:5A:5F:A0:4C:94:A0:EC:A6:B9:F9:95:DA:30:BB:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reuojttaX6BMlKDsprn5ldowuwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:e9:24:92:24:2c:19:b4:b7:70:f7:30:05:13:1b:df:10:f9:
36:9f:a4:06:39:1c:2f:9c:56:9e:5f:fb:13:dc:88:32:4e:c1:
dd:d8:d1:c4:b7:43:6c:27:29:38:24:5e:31:aa:74:c8:b7:9b:
23:f7:ca:ba:da:b3:3f:1a:ab:72:fe:fd:5e:e6:64:e5:a8:ae:
dd:c7:ef:20:30:c8:e2:6d:35:74:e4:53:e2:16:81:80:45:6c:
ec:1e:d5:c6:3c:e5:e4:db:5d:74:65:d9:f2:4c:99:61:21:37:
87:a9:33:d8:10:1a:03:fc:20:f9:92:7b:fa:2c:f6:ab:0b:38:
72:da:eb:65:24:86:c6:ed:c1:ae:73:8a:6f:97:63:a6:cc:56:
7c:2d:46:1b:54:99:4d:33:43:71:d7:6a:2d:e3:47:6a:e3:0d:
cd:62:7f:96:bb:d7:3f:24:c2:2e:cb:84:6e:41:e1:21:b1:82:
92:4f:f7:53:1c:10:3e:21:3b:64:05:e0:dd:90:df:53:10:8c:
35:50:6a:21:5f:1c:fb:ba:6e:71:e7:ae:bb:63:7f:43:58:8f:
7b:3f:4d:24:de:e1:ab:74:62:0d:f4:50:a2:13:63:6d:22:d6:
3a:4d:7f:5d:b8:50:58:4c:cd:7c:2d:0b:56:04:d3:c0:66:f6:
02:93:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:07:56 2025 by rpki-client