Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5B-JKp_7Nk1A0rqPhPZlwsK4hYA.roa
File: 5B-JKp_7Nk1A0rqPhPZlwsK4hYA.roa (raw, json)
Hash identifier: 1/SU4wEPMFWZHfy6RCO6oA9zX8YkSINcqsM+gmM19ug=
Subject key identifier: E4:1F:89:2A:9F:FB:36:4D:40:D2:BA:8F:84:F6:65:C2:C2:B8:85:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CABA0E84C30C54BA7550873B326043004
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5B-JKp_7Nk1A0rqPhPZlwsK4hYA.roa
Signing time: Wed 27 Dec 2023 14:14:58 +0000
ROA not before: Wed 27 Dec 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:a0:e8:4c:30:c5:4b:a7:55:08:73:b3:26:04:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41f892a9ffb364d40d2ba8f84f665c2c2b88580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:fd:98:8e:a7:67:4d:41:d1:1f:1f:ef:b1:
23:a7:33:4e:44:bd:c6:47:19:05:e0:8c:11:a9:36:
73:e6:96:19:5c:d6:eb:0b:25:23:29:e0:fe:5a:c1:
22:1a:4c:7a:31:47:87:6d:99:c3:b7:17:26:a5:32:
10:6e:c2:13:45:c1:ca:5b:1a:04:80:36:bc:96:26:
07:f5:b9:1c:55:d1:74:4e:12:21:b3:ff:0c:0e:4f:
7a:46:06:9f:d8:62:00:4f:52:12:62:c0:2e:b7:4e:
09:9e:be:05:4b:0d:45:ce:af:c9:39:6b:a1:05:eb:
c0:e5:1c:54:6e:e9:01:8a:ed:00:63:b9:4f:ab:0d:
ad:94:f1:b5:a9:91:73:0e:68:82:34:e2:75:9d:d7:
01:7c:e8:a8:20:50:b3:c8:b1:43:d7:d4:b5:7f:4c:
15:b7:8b:85:0b:83:e3:ca:62:70:0d:d0:cf:2e:93:
88:65:b5:bd:33:df:e8:21:c9:b2:fc:37:4b:03:1a:
de:0c:3e:7a:f9:59:65:82:bf:d5:8c:e4:d2:62:e1:
f5:8a:6f:c8:87:c0:d5:c0:df:0a:04:80:93:4d:67:
b7:dd:d1:a1:05:af:ab:a1:22:44:b3:1b:d5:31:ae:
07:ee:f3:f0:40:8b:f3:cf:24:cb:a3:e3:ee:7b:f8:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:89:2A:9F:FB:36:4D:40:D2:BA:8F:84:F6:65:C2:C2:B8:85:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5B-JKp_7Nk1A0rqPhPZlwsK4hYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:19:5e:c3:57:08:2e:ab:37:1c:d7:2e:be:0a:92:dd:25:56:
5f:d1:98:c0:ae:d1:f3:c8:d0:a1:1a:26:67:7b:33:eb:de:a7:
20:bf:cf:cc:bd:1a:39:d3:a4:fa:97:a8:ac:32:d7:65:10:ac:
1f:fa:e6:b7:34:10:0f:4b:5d:1d:47:bd:2b:90:d9:33:ae:2d:
56:c0:0d:a2:f1:f0:dc:54:d4:a4:fb:33:78:85:87:d0:45:ff:
0f:75:6a:fb:ca:0a:90:d1:d0:4d:4a:b3:3b:12:16:4f:a7:0d:
f0:1b:07:30:07:5e:3c:3b:9d:8d:5c:7d:31:e4:e1:59:43:ff:
5e:ea:d4:b7:44:df:84:cb:b6:9c:64:25:ea:97:b8:13:45:7b:
e1:ea:9b:bf:bb:80:8f:2e:48:63:6a:b1:9c:3c:7e:01:33:7e:
70:62:94:81:02:ea:49:8b:8f:58:92:44:95:c4:01:f9:47:d2:
f2:bb:2f:0b:46:5a:af:c9:34:05:5c:70:22:b5:32:15:a1:af:
e8:46:7c:3f:f1:19:00:30:be:cf:44:b6:cd:35:01:03:59:64:
8b:00:1f:b4:b9:70:06:35:02:f5:ae:0b:38:93:88:c0:cd:a6:
48:14:22:a8:c9:2f:ef:23:c0:79:f6:4b:81:7a:42:73:5a:23:
24:e4:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:20 2025 by rpki-client