Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/44jXmVutE1T5H71izZi3G5ZEIYw.roa
File: 44jXmVutE1T5H71izZi3G5ZEIYw.roa (raw, json)
Hash identifier: JxWByFFMBOQOsJ4BXWDIrvHbyPfu7BFGJX+psBJpNY4=
Subject key identifier: E3:88:D7:99:5B:AD:13:54:F9:1F:BD:62:CD:98:B7:1B:96:44:21:8C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2CCA77885505D363385F8AD7EA0ECB0B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/44jXmVutE1T5H71izZi3G5ZEIYw.roa
Signing time: Mon 11 Mar 2024 09:14:10 +0000
ROA not before: Mon 11 Mar 2024 09:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:ca:77:88:55:05:d3:63:38:5f:8a:d7:ea:0e:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 09:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e388d7995bad1354f91fbd62cd98b71b9644218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:9a:dd:02:c1:c1:84:60:e4:9c:f1:6e:a8:
25:ce:6e:46:18:83:a2:37:2a:20:0e:29:7c:50:dc:
75:c7:77:fe:c2:2a:c7:2a:2d:c0:37:3c:1b:55:fa:
c2:d5:87:cf:8d:f9:b2:35:32:97:25:8a:4e:30:ca:
49:0b:9d:a9:34:e9:33:6d:4e:2e:57:4a:67:ff:54:
35:78:54:cc:8b:ca:ef:56:20:62:eb:5d:30:ba:05:
b4:93:59:a6:3f:65:1e:5d:5d:dc:32:84:93:7d:5d:
1e:9c:30:55:9b:31:a8:07:39:cb:d6:1f:c8:b0:16:
10:c8:bd:a4:ce:56:26:19:ea:38:56:ca:75:84:c7:
63:db:0f:41:f4:d7:e7:93:6f:aa:6a:98:a5:2c:e9:
76:90:f8:8a:6d:01:9d:43:22:29:02:69:dd:c7:27:
5b:c4:f8:8e:82:a8:ea:51:e2:50:f2:1e:10:65:ea:
26:c5:46:c1:e2:46:7a:50:6b:07:7b:50:79:4c:b1:
e1:a9:07:8a:cc:13:9a:2b:ba:61:77:2f:71:04:56:
e0:9d:eb:5b:b3:ee:ef:68:58:90:a0:06:8f:d3:a9:
ae:77:96:48:68:61:aa:89:9c:20:b6:69:2b:17:bd:
00:1b:0d:c5:17:f0:84:fb:db:a5:9d:a6:53:5e:6e:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:D7:99:5B:AD:13:54:F9:1F:BD:62:CD:98:B7:1B:96:44:21:8C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/44jXmVutE1T5H71izZi3G5ZEIYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:2e:18:1a:12:cf:fa:09:e2:af:56:ad:71:6e:23:db:2d:62:
fa:ee:b0:e9:40:6c:f3:83:ef:30:75:5d:a0:da:8e:23:30:b3:
db:27:0a:1a:df:25:85:f2:33:94:56:5f:ba:9a:c5:5d:e7:8a:
86:e6:1a:89:9c:80:cb:32:39:8f:e0:e3:77:52:8d:6d:a2:a8:
5e:9a:d5:43:ff:43:7c:38:8c:b7:b9:ee:76:07:0b:4c:ce:96:
8a:3b:cc:d3:5a:30:52:84:0c:2e:12:73:9c:97:43:20:61:c8:
41:07:57:f4:da:fa:03:7d:c2:99:ea:84:ec:1b:a6:65:31:2c:
f2:69:79:3f:d2:da:e3:30:74:ab:0b:b9:35:d1:97:00:cf:db:
f5:00:df:ae:6c:2b:00:ea:a2:b6:78:3d:09:29:de:a1:8c:31:
92:93:4b:89:f5:56:e6:0d:c9:56:da:1e:e6:f9:9a:f6:7b:42:
16:64:e0:52:10:3b:09:3e:b0:24:cf:c0:98:28:06:74:ce:98:
fa:cf:22:ba:ba:cb:bb:dc:b9:7e:2f:76:4d:05:e0:67:bf:0e:
3e:96:f2:78:9f:b5:cc:89:d7:97:fe:07:32:1c:39:86:9a:85:
b3:34:bc:08:71:2a:07:dd:d5:5f:fb:7c:85:61:a0:4e:ca:3b:
92:49:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:48 2025 by rpki-client