Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1cxEf1ZXJQbo4k-SLyBYxU4pFqo.roa
File: 1cxEf1ZXJQbo4k-SLyBYxU4pFqo.roa (raw, json)
Hash identifier: flTG6VDfvXBNpqe6hWPrnC7O1Jsik37AvodxMPSnMMM=
Subject key identifier: D5:CC:44:7F:56:57:25:06:E8:E2:4F:92:2F:20:58:C5:4E:29:16:AA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCE954FB136EA2DC94590AD1B6A4B5892
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1cxEf1ZXJQbo4k-SLyBYxU4pFqo.roa
Signing time: Thu 22 Feb 2024 02:11:48 +0000
ROA not before: Thu 22 Feb 2024 02:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ce:95:4f:b1:36:ea:2d:c9:45:90:ad:1b:6a:4b:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 02:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5cc447f56572506e8e24f922f2058c54e2916aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:27:11:15:54:c6:11:5a:8e:a2:03:f9:16:
b4:ba:da:07:96:33:52:11:ad:5a:a9:ed:78:8e:30:
1e:ab:7a:19:12:0f:e9:9e:c1:d6:37:a9:94:86:83:
e6:b3:4c:93:a9:30:20:de:e6:74:97:e2:69:f5:6c:
b3:f2:af:e7:9c:5f:3d:5d:aa:9e:9b:9c:a2:12:22:
a4:9a:49:d4:fd:23:4c:04:89:38:50:3c:8f:a1:1f:
6a:cd:59:0d:05:35:62:ec:ab:bb:52:08:31:4b:45:
15:c1:cc:1b:69:14:cf:2f:67:fe:6d:75:63:30:d1:
0f:cd:2d:83:c1:00:02:a5:67:bb:f2:36:ad:09:c7:
9e:3a:35:fd:56:f0:b5:d8:13:54:fc:92:d1:f8:f9:
40:a6:9e:b8:af:3d:42:ad:03:45:ee:9c:95:53:f9:
b1:e2:82:03:7e:5c:ae:8c:1f:ae:56:9d:ab:20:61:
f0:cd:18:63:2d:be:9e:cc:c4:55:b5:23:1e:c9:c5:
4f:9c:86:f0:d8:70:3e:7f:0f:88:09:b2:5b:6d:12:
8f:a5:35:09:72:b7:9e:c9:c6:8e:e5:f9:c8:69:3d:
3c:9a:1b:1d:f0:c3:36:72:15:76:24:6d:a0:2f:3f:
ad:0f:34:2c:22:b3:62:2e:50:d9:20:8a:d8:df:d8:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:44:7F:56:57:25:06:E8:E2:4F:92:2F:20:58:C5:4E:29:16:AA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1cxEf1ZXJQbo4k-SLyBYxU4pFqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:fb:d7:03:d5:b3:55:26:ea:9d:5f:8b:97:e5:bd:f5:5b:ff:
43:4c:6f:b5:6d:81:17:0f:62:33:e6:ed:a0:95:93:25:fc:24:
9f:51:3a:8f:fc:2e:61:fa:46:35:28:39:b2:ff:50:55:a2:d4:
df:56:95:5c:5e:c0:4a:d4:06:80:6b:15:50:5a:25:e7:52:48:
76:b9:dc:93:a8:a3:b6:16:3f:7a:e7:51:81:38:7d:4d:ce:eb:
c7:eb:81:60:ac:29:65:7d:25:6c:f1:74:e0:1c:9d:b0:21:30:
9f:a2:c2:c2:9b:53:b6:5f:22:3d:89:56:b7:ef:e1:7e:98:5d:
37:80:45:c9:90:3f:e1:70:27:15:19:5e:4c:ee:43:36:56:79:
87:b7:00:d7:66:b1:14:5d:d5:a7:bd:43:76:13:02:de:ab:28:
8b:5e:3e:56:67:b7:e2:40:74:5d:af:db:9e:85:b0:a2:08:44:
f7:b9:c4:00:2e:ac:94:79:12:c9:8c:92:9f:97:1d:fa:d1:18:
9f:12:27:55:9c:e8:5f:bb:e7:cd:1d:a0:bc:88:e6:9b:0f:25:
10:ca:28:00:c9:d1:ae:c7:ad:d5:a5:82:de:2c:a7:58:02:c2:
6e:9f:3d:5a:95:49:d3:73:5c:71:1e:e2:93:19:cc:60:4f:29:
fc:9b:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:38 2025 by rpki-client