Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/59RAfH63s3cn0VgqMbwr5_K6ZJw.roa
File: 59RAfH63s3cn0VgqMbwr5_K6ZJw.roa (raw, json)
Hash identifier: Hl86qaFQaTdEq4wFnadVrx1QQXMMqx6lZXnErZRD7E0=
Subject key identifier: E7:D4:40:7C:7E:B7:B3:77:27:D1:58:2A:31:BC:2B:E7:F2:BA:64:9C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF00EA649B999F3797A276A2CB1C89F4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/59RAfH63s3cn0VgqMbwr5_K6ZJw.roa
Signing time: Wed 28 Feb 2024 14:11:48 +0000
ROA not before: Wed 28 Feb 2024 14:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:0e:a6:49:b9:99:f3:79:7a:27:6a:2c:b1:c8:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 14:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7d4407c7eb7b37727d1582a31bc2be7f2ba649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:eb:bf:65:ab:77:bb:a8:49:59:31:7d:bb:
20:b2:f0:17:f5:16:96:9f:1a:ab:77:fe:b9:d0:0f:
c0:a9:62:e0:1b:87:e1:5f:92:e8:71:32:51:f6:2c:
a5:90:a6:02:ac:c9:f6:a1:c6:7d:d2:74:4c:6d:e2:
91:e8:ec:59:8f:7c:aa:c7:91:0a:a0:d1:d9:29:8d:
e3:17:69:ef:7c:2c:08:80:fc:82:8b:82:c3:1d:03:
ba:f2:a6:27:fa:65:7f:e3:f7:2a:e6:b3:27:e7:d0:
47:3c:eb:4c:9d:05:b8:05:e9:9c:c7:32:8b:ff:33:
d8:ee:02:6b:95:19:d7:4b:c3:e2:36:b2:21:4d:88:
3d:60:2b:a3:c2:ff:01:9e:75:9f:32:ca:8d:27:d6:
54:8a:98:86:0e:88:7f:61:2b:2b:e3:d2:05:b1:c8:
58:9e:45:04:62:f6:53:e7:b9:af:e8:13:43:ae:8c:
f5:86:59:0f:bf:0e:38:43:f3:48:b9:24:01:3f:2e:
b1:34:1c:6c:7b:4b:25:6d:81:31:d3:22:39:56:14:
3e:a6:83:b8:1f:7c:15:82:20:4f:a9:cd:22:a6:d4:
1d:39:3b:36:20:8c:cb:76:16:2e:27:89:5a:83:8c:
06:2c:4c:b9:cc:4b:7c:2b:0b:28:b6:76:bf:7d:53:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:40:7C:7E:B7:B3:77:27:D1:58:2A:31:BC:2B:E7:F2:BA:64:9C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/59RAfH63s3cn0VgqMbwr5_K6ZJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:eb:4e:93:0c:78:21:48:a6:ec:59:ac:69:9d:3f:78:68:6a:
b8:47:6f:d9:ca:09:58:9f:1a:f1:85:75:84:b2:4c:45:65:e6:
af:56:af:72:c4:04:ff:0e:ab:87:94:62:b7:2e:e9:6a:1e:80:
eb:9a:4c:2b:8f:c7:66:5a:83:89:a5:a0:f8:f5:32:9a:5d:50:
63:a3:80:72:a2:df:69:fa:e0:0f:fc:01:c5:68:94:92:62:62:
21:cd:9a:ee:27:e4:b9:f7:62:73:44:ba:9b:3b:30:fb:4d:d1:
22:5c:92:e9:3d:f0:d5:bf:f7:1f:ae:bd:a8:c9:c4:7d:69:b4:
21:3d:5d:77:bf:68:b1:26:50:53:5a:74:10:c2:2a:e3:d5:7b:
7f:06:ce:54:9a:35:55:83:17:1f:48:71:8a:4d:9e:b0:3b:ed:
f0:15:19:59:dc:db:f4:89:56:72:5e:0d:5a:72:61:ca:20:b7:
f6:60:ff:2f:11:b1:ad:88:6f:37:7a:f8:84:dc:84:47:47:47:
a8:6e:17:41:ea:34:e6:57:53:9d:25:12:79:75:7a:bb:dd:cb:
e2:c2:48:b2:a1:33:20:fb:40:2d:8c:88:83:59:12:a8:c0:51:
93:84:39:88:f0:e9:1b:af:7f:29:7b:1f:15:30:ee:37:c2:b1:
e7:0b:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:17 2025 by rpki-client