Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emUPOWxVosfmNvATJBDoEnFTCEo.roa
File: emUPOWxVosfmNvATJBDoEnFTCEo.roa (raw, json)
Hash identifier: 4qeGyLSd+SJBH3JG0ns82uR7nuX8J8aq6akNwCX9N4I=
Subject key identifier: 7A:65:0F:39:6C:55:A2:C7:E6:36:F0:13:24:10:E8:12:71:53:08:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBF5D7E46F8A06974BC99C33BD839890C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emUPOWxVosfmNvATJBDoEnFTCEo.roa
Signing time: Sat 11 Nov 2023 17:10:57 +0000
ROA not before: Sat 11 Nov 2023 17:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:5d:7e:46:f8:a0:69:74:bc:99:c3:3b:d8:39:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 17:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a650f396c55a2c7e636f0132410e8127153084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:e2:e1:93:5a:81:d7:28:00:83:7e:43:75:
a6:08:c3:ac:08:b6:2d:ac:bc:fc:58:c3:f8:35:44:
61:89:a2:92:15:a3:50:ad:62:c5:50:ed:37:b1:c6:
03:8c:48:bd:1a:f9:2b:cf:89:fc:99:d7:4a:65:bc:
a9:f8:00:f1:19:c4:77:bd:e7:a9:9b:b7:79:e8:bc:
05:b9:28:81:62:71:dc:0d:3f:ca:ed:fe:a4:34:80:
4d:e8:96:90:88:0f:22:ee:3c:f8:70:73:53:f6:f0:
b6:2f:fa:46:33:13:6d:66:b5:a4:24:3e:a5:a0:9d:
91:9c:26:54:24:bb:b2:75:22:09:08:ad:dd:f3:0c:
3a:54:fa:9e:fa:ff:18:a0:7c:72:61:86:d9:ee:72:
d5:91:2c:34:34:25:fa:dc:0c:b7:58:bc:29:fd:73:
6c:31:81:f2:04:1b:58:d1:5a:5b:f8:76:d5:ba:c9:
89:f6:5a:d4:36:43:45:f6:8b:3a:97:49:f7:50:46:
65:89:fc:54:36:8b:4e:4f:80:20:da:40:11:f9:ec:
31:dd:20:55:ae:dd:0f:f6:fd:a5:41:95:fe:05:12:
f8:c3:80:c0:a4:88:94:41:0c:4b:ff:9b:e1:30:12:
37:c4:fb:b0:25:39:22:e6:af:41:29:a6:5c:b8:84:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:0F:39:6C:55:A2:C7:E6:36:F0:13:24:10:E8:12:71:53:08:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emUPOWxVosfmNvATJBDoEnFTCEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a5:13:8b:68:e0:53:41:d6:e2:b5:dd:9c:90:0e:14:77:89:
aa:77:8f:fd:94:6f:3e:a6:f6:6f:fd:4f:eb:98:5b:3a:74:d2:
a6:20:4d:0e:ba:92:0b:a9:31:09:b6:10:2c:af:34:63:58:5f:
77:f3:28:93:4a:b6:b3:37:68:93:d2:56:67:b3:72:bc:11:8f:
d8:47:0f:b6:ec:eb:08:4e:fd:11:a7:10:87:f9:78:af:62:fa:
09:e1:4a:24:00:41:b8:86:ab:5d:41:c8:d4:4e:9f:70:0e:79:
96:0b:b4:1b:61:37:3a:e6:92:bc:8f:ff:4c:da:19:4c:5d:46:
7f:10:01:71:aa:29:08:b5:00:70:41:b4:e2:20:ce:62:6e:6d:
dc:fd:b8:aa:84:b2:64:d1:7e:08:9b:77:21:50:58:5f:8b:35:
6f:d8:28:5c:8f:7d:0f:ab:9f:cc:de:f0:83:96:0a:f6:82:bc:
c1:7c:dc:39:07:a0:bc:36:ff:9d:f8:51:e2:d8:07:b6:be:80:
31:37:a0:9a:47:95:fe:a6:bd:1d:1b:a4:d0:e2:b4:f1:f1:9c:
15:59:81:75:d0:c9:0e:8e:21:c0:4c:f7:39:95:29:b8:13:21:
fb:ed:2d:d7:69:01:ee:c0:41:e7:f6:99:1f:c8:ce:92:b4:e0:
d7:28:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:53:13 2025 by rpki-client