Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EzmYuhS68OdH-VgX1N1UfZzVDos.roa
File: EzmYuhS68OdH-VgX1N1UfZzVDos.roa (raw, json)
Hash identifier: sBi2AynfBZqA/PRVroIjnyQwuXYz2OR4ok4gMbMNBqs=
Subject key identifier: 13:39:98:BA:14:BA:F0:E7:47:F9:58:17:D4:DD:54:7D:9C:D5:0E:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BED8502A15293C9614AACD97395E53A5C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EzmYuhS68OdH-VgX1N1UfZzVDos.roa
Signing time: Mon 20 Nov 2023 16:16:38 +0000
ROA not before: Mon 20 Nov 2023 16:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:85:02:a1:52:93:c9:61:4a:ac:d9:73:95:e5:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 16:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133998ba14baf0e747f95817d4dd547d9cd50e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:98:27:e0:cb:51:37:eb:3b:da:9f:05:20:
04:ea:69:14:68:99:4c:3b:ad:c4:83:23:24:03:a6:
89:01:90:c1:2e:cb:0e:b7:36:21:af:5f:48:d9:14:
33:56:2c:e4:99:1a:b1:23:30:eb:f1:a7:6b:f0:84:
27:01:f9:4b:ae:d5:c0:f2:cd:5f:43:a0:82:a4:6c:
45:0b:02:09:d6:7e:a9:ac:14:74:f4:bb:55:57:fd:
1d:84:7c:3d:2f:e8:dc:bb:89:50:25:99:8a:0d:17:
02:5f:a9:58:2b:56:dc:7f:7f:f3:ca:86:fa:08:db:
5f:11:4f:80:9f:42:f0:ec:7f:24:ed:6b:02:5c:83:
6b:25:c7:5b:78:de:ed:08:a2:85:29:46:82:99:ce:
70:0f:28:30:63:2a:2d:63:9c:d2:e8:a7:67:d5:06:
d6:89:51:ad:f7:dc:9f:68:63:ef:05:4b:87:77:0d:
ca:26:f5:9f:4a:f8:40:7d:25:0e:e2:e3:9c:c6:07:
26:0a:56:93:0e:4b:af:bf:4f:eb:03:f8:b9:bc:96:
86:8c:a9:78:99:6f:9c:12:49:20:29:42:e0:65:9d:
c4:4e:b6:38:43:a4:01:a0:5c:01:e7:6c:2d:27:da:
ca:56:90:7a:e7:e3:56:53:47:58:70:e6:59:56:f9:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:98:BA:14:BA:F0:E7:47:F9:58:17:D4:DD:54:7D:9C:D5:0E:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EzmYuhS68OdH-VgX1N1UfZzVDos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:80:4c:17:f3:62:f7:6a:87:0c:1d:6e:a2:e8:0d:56:c5:af:
95:b2:3b:64:01:fd:ff:be:ae:bc:ad:2b:30:82:a5:97:e9:1f:
9f:e7:90:13:35:0e:4f:c4:0d:f4:01:3a:04:7d:43:ad:bf:b8:
35:f3:df:25:76:fd:00:4a:3b:28:7a:ce:8e:f2:75:cf:ed:46:
4a:10:bb:31:aa:60:c8:a7:6b:7c:4b:e5:a1:55:ea:be:fb:1f:
aa:11:6f:5a:b6:4a:64:49:dc:46:9c:b2:8a:cb:30:aa:bd:ed:
d0:29:7d:bc:17:e5:c5:4a:32:1b:0c:99:ea:25:c4:ec:37:00:
1e:55:f8:9f:d9:20:7c:74:60:29:87:04:63:9e:88:f8:42:62:
24:8c:71:ac:6b:96:06:7f:d0:ff:c2:53:47:11:1a:81:59:d0:
a0:cf:20:3d:b7:1a:16:e7:a3:26:89:56:c7:80:b1:4a:da:60:
bc:57:fb:34:f6:66:d9:b8:41:89:f8:ff:43:65:6e:e5:fb:24:
7b:dc:a4:8b:f3:c3:18:11:86:1b:47:29:e0:d3:bc:a6:8e:6e:
a2:82:ba:6c:e0:af:2d:7b:00:ff:92:b1:0f:e6:43:20:1f:97:
71:e6:bc:c2:20:89:5b:65:d2:50:af:00:d3:09:02:f2:36:0c:
05:d0:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:06:05 2025 by rpki-client