Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EKU4U-8zGTdAwZxk_4tkuxYQ4VI.roa
File: EKU4U-8zGTdAwZxk_4tkuxYQ4VI.roa (raw, json)
Hash identifier: BGlFtDPwejyAcFfZd4Ut5/ox2vJxbpDhb3zAEnBpmtg=
Subject key identifier: 10:A5:38:53:EF:33:19:37:40:C1:9C:64:FF:8B:64:BB:16:10:E1:52
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC97008F4AEB8208501CE6EEB62F62144
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EKU4U-8zGTdAwZxk_4tkuxYQ4VI.roa
Signing time: Sun 24 Sep 2023 23:04:37 +0000
ROA not before: Sun 24 Sep 2023 23:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c96f:b100/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c9:70:08:f4:ae:b8:20:85:01:ce:6e:eb:62:f6:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 23:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a53853ef33193740c19c64ff8b64bb1610e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:12:13:3b:bd:5f:e0:15:d5:6c:ad:c8:91:d7:
4d:50:6e:a0:dc:cc:0d:b9:38:f0:7a:66:e1:75:26:
91:70:2d:d6:8f:a5:7b:cd:75:c5:f4:8e:68:6c:ea:
9a:0b:76:24:7e:ba:28:ce:7f:9f:3b:c2:df:98:f5:
d4:24:4d:76:be:60:51:09:22:49:cf:0c:60:23:89:
66:1d:73:98:97:59:45:33:59:74:6f:70:f7:10:4c:
f0:80:72:36:cd:51:4d:11:00:12:c0:bd:1a:79:26:
cc:de:9a:5f:25:e3:b3:b7:7f:e8:78:5c:c9:68:e8:
76:30:3b:62:ad:e5:30:d2:29:02:3f:5f:53:85:af:
f3:b2:66:8f:09:b4:3e:be:ae:e3:ad:58:07:ae:21:
70:d0:ce:c2:14:ae:1b:ad:5d:b5:98:ea:33:a3:5b:
69:fe:08:38:5e:5a:ce:d5:4a:6b:9c:79:b3:05:93:
8c:6f:91:8f:ce:62:de:cb:1f:f2:0c:26:ba:0b:89:
9f:68:ba:53:0e:ea:c1:fa:d6:11:37:1b:29:79:0e:
4c:7a:94:79:5d:22:dc:1c:69:4e:c7:4f:d3:39:af:
66:ef:b8:ad:c8:ac:d8:79:ea:cb:14:76:29:2c:cf:
eb:ed:21:63:68:89:9a:36:dd:50:42:26:b7:7f:da:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:38:53:EF:33:19:37:40:C1:9C:64:FF:8B:64:BB:16:10:E1:52
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EKU4U-8zGTdAwZxk_4tkuxYQ4VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:96:87:81:94:eb:40:da:86:65:a4:93:db:5e:65:90:a2:20:
3a:11:51:19:dc:6c:58:a6:cf:51:5f:e9:a0:25:8b:85:49:49:
26:02:70:ba:af:d9:bb:ba:9e:75:e9:e0:46:c2:64:ea:6b:8e:
ca:18:04:c0:48:f3:52:60:96:0e:ec:c8:d4:c9:1f:c6:23:ad:
96:18:e1:25:f2:9a:1d:d5:9f:8a:ca:e7:57:27:cb:3a:06:17:
34:86:3a:48:a6:cf:4f:0c:77:86:17:6b:8d:df:1b:43:e9:fe:
69:a7:4e:37:a3:94:08:f3:12:ad:ed:b4:7b:a4:94:75:73:e1:
2d:c6:2a:1f:e2:c8:15:43:d5:19:ec:fc:96:08:64:7b:66:bd:
f7:2f:0b:be:4c:4a:1a:5a:34:2b:a6:b5:19:bc:cf:47:1f:ce:
82:29:68:4e:ad:ed:56:5e:c9:db:3d:08:88:0b:ea:8a:24:24:
00:94:6b:de:5a:9a:5c:27:4a:db:8f:3e:31:9e:a1:f5:95:99:
ff:e4:85:b7:d0:19:38:58:0b:bf:a4:8b:71:a6:48:0f:c5:39:
b7:6a:79:61:53:d0:f7:27:65:5d:d7:b7:65:e9:bb:46:2e:3a:
71:52:3a:63:a1:42:a2:84:b2:fc:9e:17:11:ac:2f:40:be:16:
a1:9e:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:42 2025 by rpki-client