Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3mFCejDv7t25dPVi43q5G0bGIGs.roa
File: 3mFCejDv7t25dPVi43q5G0bGIGs.roa (raw, json)
Hash identifier: pLQ1r4fNQjBsJoBNZE/wOq21mrblpr24y0DEFsPz96U=
Subject key identifier: DE:61:42:7A:30:EF:EE:DD:B9:74:F5:62:E3:7A:B9:1B:46:C6:20:6B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E637969EEDB9DE188BF9F7C76DA17BC44
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3mFCejDv7t25dPVi43q5G0bGIGs.roa
Signing time: Fri 22 Mar 2024 00:04:45 +0000
ROA not before: Fri 22 Mar 2024 00:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6379:699/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:79:69:ee:db:9d:e1:88:bf:9f:7c:76:da:17:bc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 00:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de61427a30efeeddb974f562e37ab91b46c6206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:f2:4a:83:14:d6:c6:17:9d:c7:21:7a:ef:
09:59:91:46:54:74:d5:e5:93:f8:9d:d0:c0:18:d4:
cd:8b:75:a7:3b:9f:a8:78:06:52:06:a4:6a:70:13:
18:ac:b8:ee:0c:84:10:1f:4b:33:9a:60:00:8c:e5:
57:2b:7b:a1:3e:74:98:63:2f:ad:f0:b2:68:79:19:
55:e4:30:d6:d8:1c:4f:4c:20:3a:d7:05:d1:41:cc:
1f:4e:bf:ad:b6:e8:f1:8f:bb:f5:ec:70:43:85:10:
d7:95:92:78:25:75:3d:9c:97:bc:d4:5a:92:ad:76:
92:af:e3:ee:a0:65:ce:cc:90:1b:b5:96:e4:4b:0c:
7b:c3:3a:e3:b9:61:f5:0b:52:39:4b:33:1b:c2:2d:
57:be:d2:8a:a8:10:20:ee:37:62:4b:94:92:9b:ae:
e1:50:bf:98:f3:80:54:b6:fd:28:f8:6f:40:f8:d8:
c0:07:64:10:d7:ac:21:98:2a:1b:57:d2:dc:15:48:
c7:fd:63:8a:5f:d7:4d:17:ef:a6:30:d1:85:46:de:
de:ca:25:67:17:45:9b:c4:f6:91:9a:f8:39:79:ec:
ab:b2:c9:e5:35:7e:4a:5b:89:f7:e4:8f:23:9a:d1:
b4:6f:15:78:33:34:56:1f:7a:23:f4:a4:fa:0e:b3:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:42:7A:30:EF:EE:DD:B9:74:F5:62:E3:7A:B9:1B:46:C6:20:6B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3mFCejDv7t25dPVi43q5G0bGIGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:61:e5:43:35:28:fc:11:9b:77:1e:72:88:10:9b:50:ca:ab:
34:37:5f:b5:68:9a:65:61:30:0c:32:df:91:a0:1e:37:cc:7e:
88:9d:25:37:ac:02:ff:7e:5b:dc:d2:57:91:5f:84:60:d0:a6:
12:14:53:5d:d5:9c:1f:fc:b1:b8:cd:83:68:4a:2b:ed:19:48:
48:b6:ed:49:61:13:96:a4:af:48:da:8c:e1:48:76:8c:2c:65:
ae:5c:fd:f2:60:b6:54:b3:e4:61:85:2f:c8:68:94:0d:90:af:
28:7b:42:a0:6b:1c:6b:ba:11:ee:f7:b2:14:24:67:f4:ef:fa:
a8:16:74:7d:70:92:00:aa:73:13:5d:aa:2e:06:51:13:d6:35:
26:4c:e6:37:dc:d7:4c:1e:a4:f3:7d:54:92:8a:d4:9b:1c:b2:
d6:cb:b9:70:bd:42:a1:b2:d7:29:84:fe:7d:36:61:8b:6e:da:
84:c7:f3:9f:df:15:27:67:4e:b5:88:12:a6:3b:dd:88:2f:ca:
42:ed:ae:a9:51:1e:ad:17:5e:58:91:df:e0:9f:89:db:c1:b5:
8f:17:c1:f4:49:6d:f7:eb:db:96:b6:79:26:c2:28:ed:f7:16:
6b:86:1d:38:19:64:67:09:d9:59:8c:25:0a:86:ef:1a:8c:72:
be:67:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:21 2025 by rpki-client