Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EjuiHRwtLOw3JIjfyjh8fD461us.roa
File: EjuiHRwtLOw3JIjfyjh8fD461us.roa (raw, json)
Hash identifier: J155gcLBFKLiZXzj161Z/YJezKEiSCsyeKY3ENl1g5E=
Subject key identifier: 12:3B:A2:1D:1C:2D:2C:EC:37:24:88:DF:CA:38:7C:7C:3E:3A:D6:EB
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5E947DFB122644C4435FAC861ADABBDE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EjuiHRwtLOw3JIjfyjh8fD461us.roa
Signing time: Mon 04 Sep 2023 05:05:04 +0000
ROA not before: Mon 04 Sep 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:5e93:e547/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:94:7d:fb:12:26:44:c4:43:5f:ac:86:1a:da:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123ba21d1c2d2cec372488dfca387c7c3e3ad6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:ff:24:85:db:b5:3d:09:dd:99:8c:31:02:
a9:d3:96:4d:08:cf:28:2b:c2:11:d6:31:e5:ad:42:
7d:1e:78:b3:f6:6d:da:f1:45:55:70:1e:70:e4:cb:
1b:03:31:62:0f:99:0e:85:d5:d0:64:7d:d7:7d:21:
61:03:de:23:3f:28:b9:a1:43:1c:38:51:25:7f:a2:
f0:cc:68:ad:4a:0c:c0:e7:4a:4b:3d:4b:fd:30:86:
51:88:c0:ba:d2:21:59:95:f0:d4:98:5f:cb:66:ce:
be:aa:1e:30:92:9d:ed:c1:b4:ed:5e:be:f9:b9:cd:
e5:6d:f0:d4:bf:23:4e:19:c1:e1:f2:05:fb:ab:2a:
b7:42:a0:01:a1:34:67:f0:c8:ac:23:b8:ab:c3:98:
3a:85:58:13:3b:63:b3:a3:ac:2b:88:8f:a6:8e:59:
07:e8:c8:4b:9a:c2:7f:2a:eb:56:9e:bb:91:43:37:
1e:38:f3:0e:6c:fb:f3:3f:c7:c5:f5:6c:84:01:a5:
93:af:70:a1:70:4c:cb:12:06:74:2e:02:67:fd:88:
57:60:cf:25:8f:99:83:00:e6:98:1e:33:d1:9e:cf:
d5:33:40:f1:47:3b:f0:f8:51:10:00:4a:b6:0d:80:
ac:ec:75:fd:6b:76:a0:d8:eb:cf:34:40:67:4f:06:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:A2:1D:1C:2D:2C:EC:37:24:88:DF:CA:38:7C:7C:3E:3A:D6:EB
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EjuiHRwtLOw3JIjfyjh8fD461us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:2d:80:3a:0a:08:0a:78:8c:bc:af:b5:26:6b:f4:79:4c:39:
e6:12:b2:83:5a:7a:93:e1:6f:c4:da:e5:7c:7c:e4:2d:f9:5c:
49:87:16:0f:12:b3:b0:ff:4b:14:1f:73:a7:a0:58:53:81:3b:
f5:bd:4b:6f:b1:fc:8e:fa:58:da:81:79:86:c1:97:4f:c2:1b:
03:8a:be:6e:04:4c:4a:1f:7d:b1:c0:fe:68:74:3f:b6:b9:9c:
b6:c3:e0:d1:8b:6f:51:b4:42:28:dd:73:be:6b:4e:65:37:e9:
5e:a9:d5:1c:b7:2e:cd:50:52:b0:cb:c9:04:75:ce:a7:b3:02:
5b:59:93:9d:be:e9:b5:00:4b:b9:57:0f:ee:76:ad:b6:10:37:
66:f6:86:b3:d7:cc:81:31:85:42:97:fb:36:6d:3f:90:ce:59:
13:bd:7e:d2:b9:9b:9d:40:fe:ad:ff:ca:55:2e:32:36:c1:1b:
d2:5f:bd:8a:47:e1:3a:75:fb:59:e4:9e:f9:c4:b0:2c:46:7d:
f0:47:4c:5a:97:59:f3:4c:7d:c5:5d:dc:7f:fa:23:14:96:be:
b2:0c:a1:9f:9f:48:74:a2:ac:8c:9f:5e:36:e0:92:e5:22:9b:
d6:c0:aa:b8:e0:a2:6f:75:8a:2c:33:ac:32:d6:52:97:17:af:
64:63:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:27:36 2025 by rpki-client