Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0Mg8XS-O-T29-V3tzHp8K-ZEjRY.roa
File: 0Mg8XS-O-T29-V3tzHp8K-ZEjRY.roa (raw, json)
Hash identifier: FDAfiYImT/3adnf8+i4hK0Mc5PSojHAsFICcaZvntKw=
Subject key identifier: D0:C8:3C:5D:2F:8E:F9:3D:BD:F9:5D:ED:CC:7A:7C:2B:E6:44:8D:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE7AE567CAD978517FC07D43B0ED252DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0Mg8XS-O-T29-V3tzHp8K-ZEjRY.roa
Signing time: Mon 08 Jan 2024 06:06:51 +0000
ROA not before: Mon 08 Jan 2024 06:06:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e7ac:a01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:ae:56:7c:ad:97:85:17:fc:07:d4:3b:0e:d2:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 06:06:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c83c5d2f8ef93dbdf95dedcc7a7c2be6448d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:11:a2:a0:c2:37:92:84:79:63:c5:96:81:
0e:dc:24:d5:f3:83:98:70:ef:1b:d4:c2:78:1a:04:
5d:28:b3:e3:c6:47:73:7d:1a:68:a9:e1:d3:a4:14:
f1:f7:f9:32:e3:ee:69:46:07:16:62:6a:d0:1a:2c:
93:e4:dd:06:7e:01:48:98:79:f8:54:d5:82:3e:03:
d3:80:d8:40:12:66:a1:66:62:b8:a0:59:31:37:d5:
80:14:96:ab:c5:e9:af:57:76:ec:30:0e:48:86:34:
2e:15:9b:f0:52:66:29:87:33:88:06:a3:e4:11:ca:
89:15:0c:cf:fb:80:4c:3e:36:17:62:77:a4:57:da:
6e:04:25:7c:44:84:8d:a2:d6:25:9c:c3:28:18:9a:
39:84:5a:5a:3e:4f:9b:c5:81:4d:00:2a:12:0c:6e:
da:6d:b1:f3:37:0a:cf:ee:2a:23:4c:11:76:38:a1:
e0:96:d2:21:8d:75:05:44:38:ac:3f:0b:38:04:80:
95:13:bf:70:d4:6f:3d:7b:32:77:66:2b:d1:9f:8e:
fa:46:9d:cb:e7:b3:b4:00:92:de:aa:8d:af:bf:6a:
36:5a:65:4c:c3:c8:96:e9:19:4a:95:b3:98:c5:90:
66:91:5b:90:cd:69:53:80:bc:f6:22:fd:5a:96:92:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:3C:5D:2F:8E:F9:3D:BD:F9:5D:ED:CC:7A:7C:2B:E6:44:8D:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0Mg8XS-O-T29-V3tzHp8K-ZEjRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:c6:10:87:04:9f:7d:e9:64:fd:c7:a6:41:24:94:c4:ec:90:
ec:c0:9e:02:e7:d7:85:bf:9e:a7:d6:5f:f5:b1:8e:7f:ce:93:
ad:a5:1a:01:7d:88:0c:66:2e:3f:48:fa:ea:99:19:b4:58:a1:
da:2a:27:03:7c:2e:08:2f:4c:01:0a:06:f2:f3:38:84:59:3a:
2d:40:55:b7:72:c1:c3:23:db:ae:e1:fb:15:de:d7:0c:91:af:
f2:c2:f6:ce:42:1d:bd:ff:2a:ce:ea:1b:84:ae:e8:7f:1e:54:
8e:e3:30:86:8c:f5:02:b8:df:01:e3:c0:2a:23:ca:b0:71:aa:
e9:ce:79:64:ae:00:38:ac:11:d6:fd:e2:75:e4:cb:9f:6d:6e:
b9:5c:41:4c:9c:e0:03:79:45:65:e0:d4:00:21:00:85:be:2e:
cc:5f:ce:7e:03:a9:92:d2:3e:5f:c6:c0:f8:f7:82:06:a5:4e:
e7:c1:ce:e7:7e:da:bb:4b:6a:c5:fc:c9:de:13:de:a8:56:5a:
f5:c3:09:6a:9a:b6:a9:a5:85:80:d5:e2:90:59:88:3a:fa:87:
bd:66:aa:ca:5d:1f:c6:33:2f:3c:56:b6:3c:d1:16:ea:c5:73:
c1:f8:49:d9:ec:9d:f6:03:75:d1:b2:f8:6a:1e:bf:8c:de:ac:
4e:8e:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:01 2025 by rpki-client