Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1VhUTG5hubdaBAtjsnBi5GEuVFM.roa
File: 1VhUTG5hubdaBAtjsnBi5GEuVFM.roa (raw, json)
Hash identifier: +kMz206o1qs3ezvaOpnG2m2lfEDDygnsW6tvx3nOwQ8=
Subject key identifier: D5:58:54:4C:6E:61:B9:B7:5A:04:0B:63:B2:70:62:E4:61:2E:54:53
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA1B82B899B615C04F47BC94ECE2F2BF5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1VhUTG5hubdaBAtjsnBi5GEuVFM.roa
Signing time: Wed 03 Apr 2024 02:09:45 +0000
ROA not before: Wed 03 Apr 2024 02:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a1:b8:2b:89:9b:61:5c:04:f4:7b:c9:4e:ce:2f:2b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 02:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d558544c6e61b9b75a040b63b27062e4612e5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:62:2e:73:9d:db:08:7f:59:35:77:18:cf:
f8:a4:7d:a5:66:c1:cc:3e:d3:11:e3:2c:b8:e4:46:
f6:5d:27:b4:59:52:ef:b7:85:57:b4:85:df:82:2a:
cf:a2:f5:40:0f:34:43:6b:04:27:9b:88:a6:07:a8:
d3:a7:60:5a:8b:c0:c2:f1:77:f7:e5:20:ad:75:3d:
a7:54:36:d3:5e:f2:08:fe:57:f2:4f:9d:3d:dd:24:
0f:a4:b4:cb:e7:51:88:b6:c7:e9:b3:ca:a4:83:0d:
ab:33:bd:21:cf:9f:6e:e2:cd:91:b8:24:8e:23:a2:
90:d7:a4:0e:37:23:df:0f:1b:0d:9b:26:f8:da:43:
a8:b6:1f:50:28:61:91:0a:c1:52:ff:f6:bf:33:d0:
40:0b:d1:8f:62:5c:ef:ad:aa:3a:6c:c8:b5:ea:47:
20:a0:58:36:ce:d1:87:77:d1:cb:ef:d5:f4:e4:4c:
a3:ee:53:a8:39:ba:28:51:71:8e:d5:83:91:ab:81:
b1:2d:08:5b:29:52:39:98:e6:6d:7c:13:12:40:6d:
c1:a8:af:64:89:3c:c5:de:ba:73:f4:c8:17:70:fa:
67:c7:fa:cf:03:a2:74:00:fa:e8:84:a0:20:2d:a0:
04:ff:96:c0:08:01:f3:0a:c5:0b:b7:6f:32:f3:62:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:54:4C:6E:61:B9:B7:5A:04:0B:63:B2:70:62:E4:61:2E:54:53
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1VhUTG5hubdaBAtjsnBi5GEuVFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:a3:14:cb:c8:59:87:5f:4d:e3:34:0b:c9:40:6a:db:81:f8:
73:8f:c4:82:fd:b6:50:67:51:7f:fb:53:46:88:6f:6b:33:bc:
20:df:9f:72:9a:72:aa:ca:0e:a7:93:bc:64:bd:13:a2:48:e4:
16:41:7e:db:a5:c7:4d:87:af:aa:90:63:72:fd:43:82:41:c0:
e8:d2:a3:14:95:3d:8d:8f:94:08:e3:6d:66:2d:7a:d1:d8:07:
21:68:78:72:0d:ed:92:8f:4a:3c:2d:80:9c:ea:79:43:05:17:
ec:e0:33:31:f4:f8:a5:1e:8d:36:38:3b:aa:11:da:84:3d:7b:
e2:95:d8:b5:40:b6:c8:53:9f:0a:91:59:8e:98:0a:d6:8b:ac:
07:47:24:70:51:fd:d7:f9:69:c7:e5:0f:c4:f8:5d:f9:fd:e4:
81:45:b4:47:83:13:da:4f:5e:ac:cb:f1:12:52:f1:64:68:36:
85:65:6a:1e:1e:d0:4e:ea:f6:19:fd:43:be:ef:4b:e6:56:00:
b5:dd:39:4e:55:bf:bf:6a:21:d3:76:5c:af:ff:4c:02:a2:72:
6e:1a:4f:e8:0a:03:91:55:b4:68:2b:28:95:47:fd:2d:10:c6:
15:9c:e2:43:ec:06:08:0f:c7:ac:76:bc:34:ef:c7:97:87:2d:
bf:cc:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:37 2025 by rpki-client