Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-EK3k-diYq2ToTNm5WjPDzsmZ68.roa
File: 1-EK3k-diYq2ToTNm5WjPDzsmZ68.roa (raw, json)
Hash identifier: h4Fhjtuu1jVct1M+QIDTWt2ftro2JFIhXVj6GL//3xM=
Subject key identifier: F8:42:B7:93:E7:62:62:AD:93:A1:33:66:E5:68:CF:0F:3B:26:67:AF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFE68A8EAE50334618E6C981E4ECBF3D8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-EK3k-diYq2ToTNm5WjPDzsmZ68.roa
Signing time: Sat 02 Mar 2024 09:04:48 +0000
ROA not before: Sat 02 Mar 2024 09:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:fe68:10c0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:68:a8:ea:e5:03:34:61:8e:6c:98:1e:4e:cb:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 09:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f842b793e76262ad93a13366e568cf0f3b2667af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:39:07:11:50:f5:b0:56:dc:4c:f5:72:36:
ba:03:9d:ca:01:68:f2:82:61:59:b9:ec:82:00:9d:
98:2b:13:71:41:d4:7e:af:7f:94:b8:29:98:6a:a8:
16:80:aa:59:ca:d9:9e:d6:4b:6d:c5:95:e6:e0:7e:
78:35:5f:1a:37:52:f6:21:ef:22:45:b9:87:aa:0c:
9c:08:40:59:a3:eb:e0:5a:e0:0e:86:d9:b7:84:e0:
b2:49:92:97:62:54:d7:c3:94:29:f7:29:1c:07:96:
a1:b0:80:96:51:32:5c:11:be:ef:e2:a3:85:c0:6c:
0f:3d:f2:a7:0a:23:49:66:b5:39:29:5a:09:d6:10:
77:59:3f:17:23:27:e1:4e:66:6d:82:40:e0:5a:62:
d9:a9:01:f8:5f:5a:29:a5:bf:01:d4:f5:52:10:db:
85:a7:ff:86:d8:0e:4c:28:9f:40:48:2c:f1:73:5d:
4a:a2:44:a5:34:44:f2:85:ee:30:42:98:81:aa:1c:
d9:4c:1d:bc:29:15:c0:47:f2:a2:c1:7c:6c:44:d3:
e7:5d:41:96:f4:42:0a:78:f3:bd:9a:87:f4:c7:2c:
af:3a:69:ac:2a:9f:2b:51:31:f0:e8:7c:cb:ff:5f:
40:68:62:e6:0b:d9:85:fa:46:e0:04:42:7f:6f:4e:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:42:B7:93:E7:62:62:AD:93:A1:33:66:E5:68:CF:0F:3B:26:67:AF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-EK3k-diYq2ToTNm5WjPDzsmZ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:01:38:e9:82:c1:4f:60:9a:72:a5:70:80:01:6b:a8:03:4c:
94:89:a3:a1:ab:2a:9c:a4:ba:d1:79:76:21:c0:c8:53:f1:6b:
c2:25:ef:d5:4f:cc:66:15:1f:77:19:ee:7d:40:26:f7:89:bd:
78:b4:da:6d:86:dc:31:d9:5a:33:03:da:50:e2:24:63:d9:09:
d5:88:ce:6d:92:10:e6:53:5d:ad:93:de:98:58:01:82:e7:27:
0f:d8:11:b3:03:fb:d4:16:de:62:28:32:d8:a5:f7:6b:a9:b9:
be:ac:fe:2d:aa:b0:3c:87:38:3e:87:7b:20:f8:fb:ad:38:d3:
8f:1e:91:7d:39:06:51:a6:10:2c:64:1a:b6:f8:bc:8f:94:6a:
52:ba:78:3e:70:db:54:4c:f2:eb:a7:f0:ed:df:9a:49:76:f4:
23:23:22:0d:0c:4d:80:e8:2e:b1:ce:53:cd:ac:30:92:72:58:
35:06:a5:d7:86:11:20:eb:a3:d4:de:d4:fb:da:e0:b4:e8:0c:
81:10:d8:3d:e7:98:8d:a6:b0:e2:93:3c:32:c5:7b:1e:e9:66:
3b:50:da:c0:94:e2:b9:ad:cd:10:65:8f:bf:eb:97:0a:5b:d6:
f6:9b:07:37:5b:94:90:88:15:30:5e:27:23:d4:a5:55:ec:04:
1c:fe:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:47:15 2025 by rpki-client