Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eAUoL3Jn-U3RoibbC4XfPrlKm4I.roa
File: eAUoL3Jn-U3RoibbC4XfPrlKm4I.roa (raw, json)
Hash identifier: BGm2vbQZ4DxVhbl/EI5SudaH4B5xB5toG48pkp79n8I=
Subject key identifier: 78:05:28:2F:72:67:F9:4D:D1:A2:26:DB:0B:85:DF:3E:B9:4A:9B:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE901BCF813E675A04E93B00D0ECC8EA8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eAUoL3Jn-U3RoibbC4XfPrlKm4I.roa
Signing time: Sun 01 Oct 2023 02:11:59 +0000
ROA not before: Sun 01 Oct 2023 02:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:01:bc:f8:13:e6:75:a0:4e:93:b0:0d:0e:cc:8e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 02:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7805282f7267f94dd1a226db0b85df3eb94a9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:79:5c:b2:c8:fe:4d:f4:b9:e9:64:21:bc:
c7:56:c6:e6:39:34:24:bf:d1:4a:f8:5c:93:ce:3f:
02:bd:1a:8b:4a:4a:8c:78:2f:2c:7d:5b:2c:3e:a6:
1e:d4:c1:b2:67:7a:e8:3a:a3:55:e6:2a:e0:f2:12:
0b:54:a0:15:12:b4:f7:0b:7b:68:df:38:ab:d3:bf:
8e:c5:d2:68:74:1d:b1:e7:e7:63:4f:eb:96:26:44:
9d:07:5b:33:9a:85:b3:9d:46:3b:2f:e3:ed:89:42:
d9:1b:21:53:31:9b:26:91:6f:de:82:d1:d9:12:17:
3d:0e:60:23:84:18:8b:19:b2:f2:e9:3a:05:56:f3:
33:d2:f6:3a:05:43:ae:58:e9:36:49:c5:9e:9f:64:
9f:33:53:c6:a4:16:bb:b9:d3:dc:08:8d:13:37:97:
86:8c:29:46:5a:78:d6:95:5f:bb:5c:39:0d:29:a5:
bb:8e:46:3f:93:ba:21:ef:0a:40:93:95:ab:f2:40:
33:d7:30:82:d6:f0:40:84:41:d3:ab:ac:19:5a:fc:
ef:57:0d:82:bc:d2:4d:26:06:11:e0:39:8a:b8:ba:
52:12:90:34:92:ae:42:51:f0:dd:15:7e:cf:79:1e:
b3:5f:5f:e0:fb:af:1a:ca:28:79:d0:d1:6c:36:61:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:28:2F:72:67:F9:4D:D1:A2:26:DB:0B:85:DF:3E:B9:4A:9B:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eAUoL3Jn-U3RoibbC4XfPrlKm4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:6a:73:5d:8f:58:b4:5e:bc:2c:89:7d:fa:50:2f:6f:a2:cf:
96:69:eb:88:38:98:ac:a2:44:8a:fa:69:52:0a:20:cf:e1:2a:
d1:b2:53:c8:f6:6a:30:41:9e:43:bd:f0:87:c1:f1:c3:33:be:
0d:f8:ca:03:52:fd:b9:f1:f1:49:ba:2c:f0:a2:dd:ee:ba:02:
2c:1f:53:97:75:d8:ea:14:82:06:a0:ff:aa:4d:0a:c5:90:d3:
84:ee:4b:91:10:46:9e:9b:2d:1b:30:c4:27:84:57:49:c2:c8:
4a:cb:c3:50:ad:3a:30:06:37:4f:f0:80:5a:c7:bc:4e:68:84:
de:b5:bf:b1:45:0e:01:d8:19:27:fb:2d:c2:8b:e5:73:1a:7e:
31:c4:78:aa:ef:69:fd:f5:0f:5f:47:09:42:c4:22:16:68:70:
f4:2a:19:23:7c:76:99:b9:91:4f:5b:c7:13:b7:9a:30:61:0a:
d0:48:6d:a9:33:12:0c:f4:8f:5e:73:12:e4:2b:71:a2:bd:12:
78:5a:5c:89:28:78:78:68:4d:e4:e7:3e:c5:3a:d0:85:fd:56:
53:d7:46:4d:11:23:b8:fa:9f:4a:36:8e:e9:f8:1f:ba:5b:b4:
f9:02:d5:f3:69:84:bc:28:29:32:15:ef:be:8f:7d:39:ea:f6:
23:e6:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:15 2025 by rpki-client