Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EogGoWHS1h5iarO5GLXSOK7IMe8.roa
File: EogGoWHS1h5iarO5GLXSOK7IMe8.roa (raw, json)
Hash identifier: qr/yDw91LTzT25NdXc1lt/mUIqSr2IwkG5JXeqUzET8=
Subject key identifier: 12:88:06:A1:61:D2:D6:1E:62:6A:B3:B9:18:B5:D2:38:AE:C8:31:EF
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4EB5621CE1D5EBD1A6A3A6CCF2501724
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EogGoWHS1h5iarO5GLXSOK7IMe8.roa
Signing time: Fri 01 Sep 2023 03:07:04 +0000
ROA not before: Fri 01 Sep 2023 03:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:4eb4:fae9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4e:b5:62:1c:e1:d5:eb:d1:a6:a3:a6:cc:f2:50:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 1 03:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=128806a161d2d61e626ab3b918b5d238aec831ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:60:ed:f4:fc:63:d0:09:ff:f7:91:d1:41:
2f:37:6b:93:94:74:b9:f5:47:78:f5:00:3b:99:da:
73:53:1c:6f:7e:50:b9:d2:84:67:82:4f:b7:f4:23:
8a:e1:d0:68:41:63:07:ec:3e:61:a5:fb:e8:31:7c:
9c:bd:78:b8:19:9f:08:5a:33:24:21:40:fc:8f:b6:
df:49:bc:4e:cd:bc:40:d5:cf:57:0a:95:63:56:f1:
2e:42:eb:80:04:d8:bb:08:bc:a9:dd:65:36:7c:59:
fd:70:cb:12:ba:8d:66:ec:43:97:41:42:8e:0e:51:
6f:f1:55:ff:29:f4:40:94:94:f5:ac:30:f8:e9:13:
ac:aa:4d:de:43:68:a9:e7:7f:8d:02:ad:30:77:5f:
b3:d5:b5:b9:f4:0e:89:c7:37:67:5f:3a:65:a5:cb:
fa:d9:7b:2b:ff:c1:21:7c:15:26:2e:83:25:18:bc:
a7:22:2a:97:37:cb:fb:21:95:21:57:56:80:5c:0b:
c7:c0:b7:b8:c6:fb:45:b1:81:0b:2f:b8:5e:7f:36:
e1:46:aa:d2:9d:38:71:9c:3b:32:39:78:4e:6f:e9:
a3:b4:cc:29:1b:93:e9:97:13:0c:b0:27:d4:36:43:
68:10:69:77:fa:da:ad:cc:ac:4f:93:d7:7b:2b:a0:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:06:A1:61:D2:D6:1E:62:6A:B3:B9:18:B5:D2:38:AE:C8:31:EF
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EogGoWHS1h5iarO5GLXSOK7IMe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:db:3e:8f:75:42:c2:16:fe:69:60:94:66:28:88:de:36:37:
f4:5d:c5:22:fe:37:98:9a:4b:b9:85:2a:c4:2c:7a:4a:f5:66:
ac:d6:a6:8b:39:3e:a0:c4:b0:f9:39:e3:49:51:a4:73:9a:a7:
e4:dd:f5:c8:4d:89:c0:9c:ce:a6:f2:db:46:2c:e1:4b:d8:4a:
5d:b3:90:75:91:08:61:d7:e9:dc:d2:43:3b:d9:cb:df:f1:f6:
80:74:f2:ba:62:b9:fc:e5:49:7b:d8:ee:c1:1c:de:ee:86:70:
dc:64:0f:86:d2:c2:b3:fc:c1:20:8d:6e:c0:77:9f:5d:53:36:
4c:b7:1c:20:43:b1:ca:b6:3e:04:a8:5f:4e:48:6e:02:21:f2:
f3:88:1e:55:b1:ed:1b:4d:da:ac:23:4b:57:a8:9d:e4:06:94:
3f:3c:d4:fe:37:fe:93:3b:65:f8:89:fb:86:3b:b0:92:f5:30:
1c:e0:d9:00:0f:a7:71:3c:ab:3b:6e:7a:d0:85:05:83:a1:56:
71:dd:40:c6:82:65:d7:8e:8d:26:25:1c:77:87:ae:2d:47:ee:
29:ba:c1:b9:54:16:e7:25:f7:0c:fd:c1:9a:9e:ce:11:78:e9:
4b:42:e6:8c:fc:01:5f:1b:d4:75:23:ba:72:3d:99:00:9e:aa:
34:9a:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:33 2025 by rpki-client