Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0GqCjQE6p4Vp3NrDIAgR8hsWl_g.roa
File: 0GqCjQE6p4Vp3NrDIAgR8hsWl_g.roa (raw, json)
Hash identifier: YhVUUGBUp37FRBHbJA9i5PUmqB+1ZzTRudDHEnjiGn0=
Subject key identifier: D0:6A:82:8D:01:3A:A7:85:69:DC:DA:C3:20:08:11:F2:1B:16:97:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF2D343E991AD2C3CF4C209C582588519
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0GqCjQE6p4Vp3NrDIAgR8hsWl_g.roa
Signing time: Thu 29 Feb 2024 03:05:48 +0000
ROA not before: Thu 29 Feb 2024 03:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:f2d2:f8e4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:d3:43:e9:91:ad:2c:3c:f4:c2:09:c5:82:58:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 03:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d06a828d013aa78569dcdac3200811f21b1697f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:24:eb:96:d4:08:78:10:1a:16:5b:90:e6:
cf:ba:07:95:44:31:5e:78:c4:7d:7e:af:65:df:e0:
da:f2:46:4d:29:08:cb:8e:05:1c:ce:2e:5d:c3:5b:
57:b7:69:56:0e:a1:cb:a7:0e:b9:5e:fd:c4:55:50:
91:af:b4:f8:ef:2f:fe:51:33:07:58:5d:cc:cb:aa:
22:28:5d:ce:45:2d:18:96:2a:c7:b1:5b:c3:53:b7:
d9:20:b2:7d:57:bb:f6:bf:d5:53:6c:b4:57:18:c3:
95:69:2f:f9:3e:33:4d:1e:dd:47:01:e2:08:d0:75:
24:84:6e:b3:25:a3:ea:36:aa:f1:c8:19:1d:70:f6:
89:d1:39:98:e1:d3:5a:bb:4c:f8:94:ef:ec:00:fa:
a9:d9:66:f4:07:20:cb:b6:78:b7:32:67:ed:27:91:
25:05:86:41:f7:a2:49:48:4b:2c:4d:71:b3:95:ab:
3a:98:b8:0f:b3:ae:56:44:02:10:9b:65:fb:6f:cf:
3d:69:6e:63:6a:71:09:62:b1:28:02:7e:44:e4:06:
08:7b:2f:75:68:0a:4f:f8:ab:28:98:bf:dc:8a:93:
49:d7:a5:ef:1a:a1:dd:34:62:a7:37:2b:9c:b9:3c:
49:59:aa:57:24:11:ee:00:21:cd:47:12:3b:d8:7b:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:82:8D:01:3A:A7:85:69:DC:DA:C3:20:08:11:F2:1B:16:97:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0GqCjQE6p4Vp3NrDIAgR8hsWl_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:a2:52:c7:b3:6f:62:25:c5:4a:79:ce:34:c2:b3:53:54:c2:
cd:8b:45:87:0f:c9:9b:b1:d1:d8:23:02:82:73:10:58:3a:9c:
4c:54:62:a8:54:fb:8d:f0:7e:0c:a1:71:5d:5e:8c:3b:ef:d2:
17:f5:dc:40:a0:b0:86:73:f5:13:ad:90:69:d8:26:bd:e6:e9:
83:8d:a6:6d:9f:24:6e:f0:a2:c5:e5:c5:9e:72:fe:1b:e1:ef:
0c:59:13:0a:e0:c6:70:70:63:68:3c:6e:22:24:19:57:70:b8:
95:ff:01:de:0a:54:23:79:4f:e3:c1:74:99:e6:cf:a4:0a:d6:
f5:33:5b:95:9e:ed:2c:a3:4e:e0:e2:4d:67:d7:d3:71:0a:61:
f2:e5:7d:03:3e:52:61:3f:45:4d:a9:da:b2:fc:b7:19:ae:58:
b0:39:8a:d8:2d:4c:6a:dd:2c:1e:6e:09:28:fa:65:90:67:41:
a0:2c:1a:ff:41:5b:16:92:6a:5d:ad:c5:61:73:fd:50:0e:e8:
ca:d6:4e:a0:92:9a:e0:d0:3a:b3:7e:aa:87:09:f1:ab:8e:f6:
96:88:ff:96:36:ba:a1:fc:56:98:04:a7:df:59:2a:08:08:7d:
0c:37:e4:0c:27:01:78:06:0c:c4:9b:ad:cb:32:d2:da:08:59:
01:4e:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:15 2025 by rpki-client