Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ilfDeoTwr7WPp0EGEbVZy8cs90.roa
File: 4ilfDeoTwr7WPp0EGEbVZy8cs90.roa (raw, json)
Hash identifier: yLJxiJC/X/fJ9dEQKSjSp3TNdQcyrl/sDksdA24zz7Q=
Subject key identifier: E2:29:5F:0D:EA:13:C2:BE:D6:3E:9D:04:18:46:D5:67:2F:1C:B3:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6BA0D15DF43DBA0CFC3A342A02B10532
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ilfDeoTwr7WPp0EGEbVZy8cs90.roa
Signing time: Sat 23 Mar 2024 14:04:45 +0000
ROA not before: Sat 23 Mar 2024 14:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6ba0:73e1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:a0:d1:5d:f4:3d:ba:0c:fc:3a:34:2a:02:b1:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 14:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2295f0dea13c2bed63e9d041846d5672f1cb3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:84:76:b5:21:e8:8c:0b:be:89:0e:1e:57:
fa:92:70:e5:01:1e:6c:d0:12:91:72:d4:73:14:6a:
aa:d7:9a:90:ad:86:a1:87:ed:ce:c1:2f:10:77:9b:
5d:6d:3b:eb:16:5d:57:86:2e:54:e1:95:55:9e:5e:
4b:6d:93:a5:6f:44:70:72:22:98:de:6a:04:f0:f6:
bc:a0:ec:5f:02:8c:b5:03:8e:39:af:9c:19:ea:98:
0e:6f:04:8f:42:ae:ea:4e:6b:47:2f:78:a6:80:d5:
40:a8:3d:96:74:50:34:1e:e9:48:de:ec:ab:5c:04:
72:3e:74:5b:53:43:95:df:1f:31:f3:1a:11:83:b3:
5a:d5:9f:2e:c4:1c:df:89:4a:87:fe:b0:44:39:19:
1d:9b:29:fa:cc:83:5f:4c:d3:9c:6f:d6:37:65:3e:
ce:dc:7c:6a:28:69:e7:d5:9d:2f:ac:d6:3c:da:79:
25:06:20:1a:43:98:f5:51:43:f3:8e:f8:7d:b4:b2:
58:99:5c:e7:00:d5:8e:fa:87:2e:55:87:28:15:04:
7b:8c:74:65:68:5b:42:dc:c3:26:b8:00:07:00:61:
a2:40:3f:ed:9c:ff:52:9b:e3:0a:fd:2f:2c:6c:e6:
4f:60:0b:e9:94:69:b6:49:03:6d:7b:87:01:42:82:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:5F:0D:EA:13:C2:BE:D6:3E:9D:04:18:46:D5:67:2F:1C:B3:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ilfDeoTwr7WPp0EGEbVZy8cs90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:26:b6:01:da:08:bb:56:fc:54:7f:8c:aa:d4:93:4f:71:10:
44:75:41:d8:1f:1a:11:e4:eb:be:0f:d3:64:6b:0f:28:7b:5f:
85:12:c7:df:b2:80:8f:7a:0e:5b:6d:63:b6:e6:71:b8:f5:18:
9f:c4:34:bc:63:f6:54:9a:12:c8:a8:c9:82:98:1f:f1:d6:15:
b3:52:c0:2d:85:56:e7:13:5c:ad:12:17:a2:14:25:0e:ac:88:
69:3f:4c:4a:2e:fd:2c:1a:73:19:29:1b:12:28:f5:4c:93:f3:
7f:61:04:3b:78:39:0d:47:15:22:40:d6:11:57:f6:17:66:41:
e9:a3:16:fe:aa:c2:d4:b5:3c:4f:36:39:7d:35:f3:20:53:a4:
28:a1:ea:a9:6a:14:cd:ae:d9:61:c2:ff:d0:88:3d:40:85:a5:
19:63:93:79:2b:88:b4:cf:fe:20:fc:a2:94:68:df:df:b2:b8:
ee:df:25:28:7f:02:06:93:87:8e:82:ac:ff:54:fb:33:d0:19:
2f:bf:3f:37:c0:40:a1:8e:07:42:81:45:4e:9c:5f:dd:ca:61:
df:99:f8:ca:b4:70:19:cb:db:75:39:0f:36:48:53:47:7f:71:
21:9f:7a:d5:10:ec:86:57:2f:0d:61:55:08:8f:f5:c7:13:72:
a3:d2:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:51 2025 by rpki-client