Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12Y_EESu4QgukUmWUBsrA_RvRQE.roa
File: 12Y_EESu4QgukUmWUBsrA_RvRQE.roa (raw, json)
Hash identifier: Ax5L67snYfIJslduHqU4Wi9C+jlcf+IxM5KarnRqsxg=
Subject key identifier: D7:66:3F:10:44:AE:E1:08:2E:91:49:96:50:1B:2B:03:F4:6F:45:01
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4613C8044B7CC35F86106B43A44A621C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12Y_EESu4QgukUmWUBsrA_RvRQE.roa
Signing time: Sat 16 Mar 2024 07:04:45 +0000
ROA not before: Sat 16 Mar 2024 07:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:4613:3ed4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:13:c8:04:4b:7c:c3:5f:86:10:6b:43:a4:4a:62:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 07:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7663f1044aee1082e914996501b2b03f46f4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:05:1f:f6:4f:cc:48:44:41:c4:03:fb:51:
8c:1d:6c:59:78:b8:25:07:a9:47:d9:b8:6b:73:97:
f6:4a:0e:34:7d:92:71:45:00:38:28:0c:31:ab:70:
85:79:9e:76:ae:d2:15:5f:8c:fc:ad:96:01:3d:5b:
79:50:ea:13:c6:0b:28:81:6b:cf:92:18:49:52:88:
de:cb:74:03:ef:bb:ef:3c:67:e4:71:7c:05:15:03:
cd:58:1e:c7:a0:b8:1a:4e:ff:32:d1:c8:5f:dc:4c:
6d:c5:cc:ed:12:51:da:f4:b6:03:ff:28:4b:3e:1b:
d8:e7:7e:c1:62:3e:7e:1f:39:42:60:09:db:4f:74:
ee:eb:c6:47:9f:47:a1:7f:d7:c8:a5:65:0b:cb:77:
8b:2c:91:46:90:ec:8a:13:8e:ce:be:95:06:4b:2b:
ab:aa:a4:44:09:15:f9:b0:cb:b9:1b:d4:da:91:7d:
9c:1f:49:3b:45:0c:6a:49:01:ba:39:f4:80:cd:2e:
51:aa:65:28:83:bf:3f:5e:cb:f1:ca:0e:b5:61:4c:
17:28:e4:21:29:d5:a5:58:78:34:df:3a:da:49:44:
e2:ac:3e:4d:14:8d:20:92:49:4d:dc:07:98:85:88:
80:ed:32:9f:ea:66:53:77:00:98:3b:33:a3:e0:e7:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:3F:10:44:AE:E1:08:2E:91:49:96:50:1B:2B:03:F4:6F:45:01
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12Y_EESu4QgukUmWUBsrA_RvRQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:f7:0f:24:e0:9a:9d:85:5e:3d:5d:77:2c:69:2c:0c:7d:06:
c6:6f:ca:87:a3:49:e9:c7:6e:7f:d1:5f:b1:66:2c:52:45:a2:
77:86:df:66:2b:90:43:c2:e5:70:20:ff:76:80:b0:14:4a:a0:
80:4f:6b:2b:a0:75:08:57:9f:b8:eb:ef:50:2d:5d:91:49:db:
0d:14:83:2e:ec:c1:6f:00:6d:da:9f:02:95:25:3c:4a:8b:59:
f5:52:7b:6b:c1:58:12:d4:8c:ed:59:c8:1c:4b:1e:19:4a:75:
28:66:6a:0c:0e:91:fc:16:91:14:23:43:8f:48:1d:15:4f:4c:
62:78:18:a6:e1:22:eb:41:76:86:e5:c0:1b:0a:73:f5:ad:84:
9f:4e:e2:c8:d3:2b:6c:b4:ba:89:7e:3d:91:f1:60:09:8a:e9:
5c:a0:b5:ce:39:42:1c:3b:54:39:e2:b7:ca:eb:df:d2:08:e7:
f9:3c:80:19:8d:56:1b:a1:2e:76:f3:2e:75:24:3c:88:1c:32:
62:cd:da:46:5d:95:13:99:4c:e6:29:23:12:f1:b0:e7:8c:b9:
44:27:3b:9f:72:b8:c9:6a:5d:7f:76:ce:10:b2:0f:a2:28:8f:
b9:6f:47:49:8a:63:2e:ec:05:39:f2:f9:73:77:9c:80:bd:9a:
d1:d4:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:15 2025 by rpki-client