Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2CSDG9p35CFFVw8Tda93i2tjlok.roa
File: 2CSDG9p35CFFVw8Tda93i2tjlok.roa (raw, json)
Hash identifier: /3cutxOZVIIl8FIt9vKLonSpNAispQbbJh8aQYK6Oso=
Subject key identifier: D8:24:83:1B:DA:77:E4:21:45:57:0F:13:75:AF:77:8B:6B:63:96:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA9726F0904AF0946ED8DF735EE94FA0C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2CSDG9p35CFFVw8Tda93i2tjlok.roa
Signing time: Wed 27 Dec 2023 04:04:58 +0000
ROA not before: Wed 27 Dec 2023 04:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:a972:5ff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:72:6f:09:04:af:09:46:ed:8d:f7:35:ee:94:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 04:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d824831bda77e42145570f1375af778b6b639689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:4b:fd:fe:31:99:60:65:b5:fc:68:7e:ea:
55:0c:1c:3e:59:6a:2f:38:05:3b:8b:28:98:1e:d5:
56:ff:78:54:b6:05:a1:82:5c:76:8c:2c:c2:a8:09:
7b:3f:9c:82:b6:2c:ea:a3:ab:83:c7:f2:bb:e9:94:
e1:21:89:b3:a3:fb:ef:39:13:2f:24:df:f4:ea:6c:
b6:8c:98:2f:64:21:86:92:26:d2:ab:9a:ca:36:77:
d0:cd:c3:25:bd:c3:02:d7:4e:04:b7:d7:5d:c7:fc:
2f:23:ef:37:0a:9b:5e:f8:13:1e:27:48:29:f5:07:
ae:c0:79:33:51:53:30:84:bc:00:f1:50:5f:8f:ff:
83:18:b5:21:e3:3d:d8:44:4b:0b:a3:8c:29:15:d2:
ae:ba:8e:9f:90:fd:ad:cf:3e:a1:61:60:86:f7:a1:
34:65:54:0c:d2:c8:3b:ff:f0:7d:06:de:28:20:db:
b1:43:cc:b9:72:28:a9:08:0b:39:61:a4:a2:ff:59:
cf:9e:eb:1e:03:fe:de:87:32:c1:50:97:87:e6:5e:
86:f8:c8:15:32:45:ec:d1:8d:eb:f5:aa:77:7b:87:
7d:28:d7:a4:34:db:eb:64:44:a3:26:2a:52:eb:77:
34:7e:b4:b7:a4:40:9a:1f:7c:2d:68:df:5a:95:cb:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:83:1B:DA:77:E4:21:45:57:0F:13:75:AF:77:8B:6B:63:96:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2CSDG9p35CFFVw8Tda93i2tjlok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:9d:15:49:9b:51:38:09:3e:73:e0:cc:ec:62:b9:40:ab:54:
af:e4:07:da:25:62:d6:5b:0a:48:98:4e:70:66:15:4a:a2:60:
c5:b6:08:d0:6e:fb:54:ae:63:52:8e:93:24:2d:bd:43:c9:79:
f5:43:cc:42:6b:ec:54:e2:d5:fa:26:dc:2d:b9:4d:c2:2f:14:
5a:22:4f:7b:05:eb:c8:a6:66:23:f4:d6:23:ad:a9:75:7c:e8:
b0:a5:14:cb:e7:92:a7:e2:77:5c:35:b9:54:d3:66:a6:7f:d7:
8d:93:ad:08:60:9f:7f:26:46:0e:11:9e:78:e0:13:c3:11:20:
a4:6e:4e:97:71:29:b7:b1:87:33:a5:97:8a:7b:3f:77:fe:9c:
56:51:53:cb:1c:31:b1:fa:81:f2:5b:f3:b0:be:33:e6:c7:79:
2e:6c:fb:82:0f:18:7c:01:26:48:50:4e:92:7f:9f:ee:cf:c4:
1b:69:87:16:d6:20:f8:03:d4:02:b6:97:e5:a0:46:d9:03:41:
41:9e:d5:05:6d:e5:60:6b:41:e7:e9:6b:cf:00:76:be:f6:ad:
22:51:61:2c:3f:8c:c5:cb:74:2c:ee:f4:61:f8:f2:05:79:26:
04:d4:f7:6d:12:ce:5b:3a:cf:75:24:80:57:f4:5a:44:9a:c3:
20:3f:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:22 2025 by rpki-client