Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EyPcyKxRv7zzaKlhD1UhWzNitdw.roa
File: EyPcyKxRv7zzaKlhD1UhWzNitdw.roa (raw, json)
Hash identifier: QylZlJWHVgCpUXRjmPYz4WCoaDLsrxPrehdf8U9WcSc=
Subject key identifier: 13:23:DC:C8:AC:51:BF:BC:F3:68:A9:61:0F:55:21:5B:33:62:B5:DC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB10243702586E7CFC807E17D59C76973
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EyPcyKxRv7zzaKlhD1UhWzNitdw.roa
Signing time: Wed 20 Sep 2023 05:13:50 +0000
ROA not before: Wed 20 Sep 2023 05:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:02:43:70:25:86:e7:cf:c8:07:e1:7d:59:c7:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 05:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1323dcc8ac51bfbcf368a9610f55215b3362b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:a4:03:ea:8f:8d:e5:1c:92:c9:d9:71:70:
a5:79:77:04:68:4a:43:1b:75:e3:f8:8f:0a:f7:9b:
87:c5:20:58:8b:96:fd:f2:85:b9:e6:ac:87:ab:91:
b1:69:fd:40:b4:10:22:b4:e0:d4:1a:47:be:a9:29:
af:18:05:c9:9e:46:5b:d7:98:27:d8:ba:59:ba:44:
30:40:e9:1b:f4:74:cf:4f:df:4f:70:b2:d6:c8:97:
48:73:a0:ef:f9:b2:de:45:ff:98:49:28:9d:77:ea:
8e:5f:db:b4:72:79:8f:0c:f0:ce:14:59:c3:26:66:
32:42:53:c6:5d:78:19:1b:a6:fa:dc:67:cf:d2:06:
eb:ba:de:78:1c:d5:6d:16:b0:fa:14:33:e0:6f:f0:
f8:96:3c:01:35:9d:04:3f:1b:53:50:45:aa:a6:47:
01:08:ec:f2:c7:46:e2:94:5d:de:d2:cb:3d:51:a9:
1e:14:a7:a3:18:d6:51:1f:9e:6e:b3:0a:ca:79:5a:
a5:6a:36:ae:83:02:f1:05:89:68:7c:cc:c6:ae:cb:
f0:e6:9a:35:fa:1b:27:97:22:89:25:7b:d2:fa:16:
25:66:95:b8:5c:f9:11:af:fe:a3:db:6e:fd:c2:7b:
2e:76:c4:fa:52:cb:b3:77:1a:a4:89:eb:20:7c:c3:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:DC:C8:AC:51:BF:BC:F3:68:A9:61:0F:55:21:5B:33:62:B5:DC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EyPcyKxRv7zzaKlhD1UhWzNitdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:c6:df:f8:91:39:1a:af:fb:e0:69:00:ce:81:5b:9c:c7:df:
5d:4d:69:65:c4:68:05:c9:27:41:eb:03:02:da:fa:3e:a1:95:
26:d8:bf:d8:6c:1a:57:9e:a4:37:00:a7:97:5b:6e:51:cc:a8:
66:1a:9a:c5:81:d6:3c:1d:c0:a7:99:2a:eb:01:86:07:fa:3e:
e6:39:05:e6:50:5f:77:67:fd:a6:a5:58:06:99:4c:f7:e3:d2:
06:81:2f:ad:03:2f:1d:61:f2:d5:80:73:54:7c:77:8a:52:c0:
7c:fe:c4:2e:f2:02:67:4f:85:4a:b3:d9:87:ac:b6:fd:a6:ed:
4c:e8:c5:19:c4:a3:f7:43:4b:78:70:58:a5:82:76:fb:90:c9:
42:38:b5:dd:90:30:ac:05:e0:48:50:75:75:40:ff:c0:e4:62:
04:2c:77:aa:81:14:48:8a:d3:f9:b8:e1:0b:f0:31:fa:ae:17:
8c:7b:01:c0:a1:5c:72:44:6d:5c:54:cb:a0:4b:d8:e0:c9:9b:
0a:ad:af:52:0c:a3:8e:91:cf:ee:9b:e2:ae:c7:91:2b:2f:3d:
4c:0c:30:18:2c:8d:50:0c:e2:be:e1:41:91:91:11:02:16:77:
50:d3:eb:7b:3e:1f:95:40:f4:4d:77:83:50:25:52:2a:cb:c8:
03:a1:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:22:44 2025 by rpki-client