Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EuQjD6RpW7RIB_IorjjywnpmUkM.roa
File: EuQjD6RpW7RIB_IorjjywnpmUkM.roa (raw, json)
Hash identifier: mY0KCf/udFFBcUIxaHe+CbwpZTE3lVugr61zl2LiylQ=
Subject key identifier: 12:E4:23:0F:A4:69:5B:B4:48:07:F2:28:AE:38:F2:C2:7A:66:52:43
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7CD81A9A20C9461176EB0E0C6C8EF530
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EuQjD6RpW7RIB_IorjjywnpmUkM.roa
Signing time: Mon 18 Dec 2023 12:13:06 +0000
ROA not before: Mon 18 Dec 2023 12:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:d8:1a:9a:20:c9:46:11:76:eb:0e:0c:6c:8e:f5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 12:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e4230fa4695bb44807f228ae38f2c27a665243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:49:79:6f:f0:7c:76:e5:a8:ba:20:2e:31:
be:06:28:bd:dc:3c:65:6c:bd:07:6a:74:7c:7e:7f:
b3:66:3c:f7:ed:4c:e3:4b:82:2c:de:47:e8:4f:b9:
f4:66:45:77:af:27:ad:8b:01:bd:4b:28:fe:4d:6d:
06:3d:6f:36:76:02:5d:6b:bd:89:2b:c3:04:c2:d9:
33:b1:c3:e8:cb:d8:46:69:7f:98:29:f3:cc:60:95:
6f:76:89:ba:35:78:f0:d5:7b:1f:e2:a3:24:5c:a6:
44:85:ec:42:24:77:da:95:cc:bc:1d:66:a1:8c:7d:
b4:64:0f:63:a4:e6:0c:3d:0b:31:73:23:fd:01:f9:
e1:22:96:94:31:66:d0:d3:f1:d4:f2:b2:2c:75:3a:
c9:2f:93:ad:6f:60:9a:4f:0a:73:56:3e:73:ae:3c:
3e:e1:73:18:10:90:22:f2:c8:6a:7f:1a:4d:33:e6:
97:79:50:66:cf:60:10:39:d7:59:21:ea:66:3e:20:
6d:40:45:a9:bb:8f:1f:40:a0:6a:f8:7d:44:68:dc:
27:73:2e:af:5b:ad:12:81:93:b2:a5:50:50:02:fe:
ab:35:ec:9c:f3:d7:4e:6b:18:fd:55:89:02:b7:f3:
a5:2b:82:f5:98:84:7b:db:e6:ff:69:31:c6:6a:23:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:23:0F:A4:69:5B:B4:48:07:F2:28:AE:38:F2:C2:7A:66:52:43
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EuQjD6RpW7RIB_IorjjywnpmUkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:fa:7a:34:2b:3a:55:7d:84:79:44:3f:d7:f2:5d:57:d4:6a:
26:5e:a0:1c:fe:fd:19:ad:96:4b:15:77:ec:d3:1c:9b:8a:32:
11:cb:7b:1c:4c:80:46:8a:07:7c:69:9f:6f:a1:f6:14:2d:dd:
da:c9:d3:e9:52:86:1e:39:d9:5e:f6:b3:67:54:a0:c0:89:c1:
23:42:1a:74:b6:7b:ef:e9:f4:91:f2:24:9d:2c:5c:57:c6:1e:
07:bb:4d:4d:cf:59:04:96:24:a0:a6:03:06:3a:38:55:92:7b:
75:df:ea:4c:a2:e7:bc:cf:a8:91:c3:fa:b0:cc:f2:e5:46:14:
a1:ed:40:7c:47:3f:51:49:3e:7b:be:f9:91:8b:a1:15:e3:3e:
9e:2c:12:6f:08:0e:7c:fe:16:b9:24:e3:b5:a6:9b:9a:bc:57:
e4:bf:22:ec:f9:e0:0a:c7:d5:e4:25:bd:08:78:cc:4c:ab:82:
a1:52:6a:23:39:33:1b:63:6f:bd:a8:0a:24:3d:6b:b5:43:09:
64:a6:41:6c:a1:be:c8:fb:b6:c2:5d:f4:ed:c0:e1:29:73:1e:
0e:d5:17:fc:b0:d6:6a:44:65:af:fe:16:b1:05:84:6c:f7:06:
51:97:8a:ae:91:d1:f4:87:62:01:54:e6:f9:fe:b1:34:4f:d0:
5d:16:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:03:49 2025 by rpki-client