Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5s7SRdbiOG1GYRAoAPoGhwZ5k1I.roa
File: 5s7SRdbiOG1GYRAoAPoGhwZ5k1I.roa (raw, json)
Hash identifier: D8z7J8SgulxxjPKMYVcXLjEquxRzUlR2zdqeXrfCmG8=
Subject key identifier: E6:CE:D2:45:D6:E2:38:6D:46:61:10:28:00:FA:06:87:06:79:93:52
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7C69A86EDCFDB621CDCD2EDB22039C63
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5s7SRdbiOG1GYRAoAPoGhwZ5k1I.roa
Signing time: Tue 06 Feb 2024 03:15:15 +0000
ROA not before: Tue 06 Feb 2024 03:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:69:a8:6e:dc:fd:b6:21:cd:cd:2e:db:22:03:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 6 03:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ced245d6e2386d4661102800fa068706799352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:a4:e8:23:6a:33:34:dc:ac:6f:38:74:7c:
d2:ff:dc:98:5d:37:60:6c:a9:24:8b:f5:0c:ef:40:
34:f3:cb:39:13:e8:8a:af:2e:6e:36:cb:05:f0:31:
08:c3:b0:b7:05:dd:ec:aa:29:d2:6d:30:4a:00:22:
3f:30:84:76:60:91:76:44:b6:8b:3b:b7:76:2c:38:
d4:f8:30:6f:70:47:62:8a:9a:aa:80:a0:f7:33:51:
95:27:77:7a:e7:73:67:7b:f9:80:56:04:41:6f:32:
87:18:69:8d:2b:67:e1:93:90:97:3e:de:e2:ee:8c:
77:06:22:ce:17:cf:1f:9b:34:6c:7a:26:91:7d:a7:
eb:fa:ae:bb:c0:54:c7:9a:d1:07:22:90:7d:dc:24:
b4:16:7c:14:1c:a0:4e:93:28:f2:84:7d:62:a3:c3:
7b:c4:ad:9c:13:8a:22:60:98:7b:06:e8:07:c0:52:
64:3e:f7:39:74:46:49:3c:8e:e7:61:ae:bd:b8:b3:
a6:6a:d0:3c:4f:cf:9a:a9:f7:56:2b:b0:b2:87:24:
4b:08:43:8b:3f:9f:95:7d:ed:18:67:94:7b:dc:3c:
c0:0a:89:fa:61:92:92:4a:51:0b:9c:9f:75:a4:47:
34:78:a5:36:5b:18:4e:23:eb:54:cc:ce:24:5b:89:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CE:D2:45:D6:E2:38:6D:46:61:10:28:00:FA:06:87:06:79:93:52
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5s7SRdbiOG1GYRAoAPoGhwZ5k1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:d7:e9:7e:ce:5d:d3:d4:4b:0e:3f:e0:13:e4:23:57:eb:07:
22:c9:9b:9a:7a:63:04:27:f9:7a:6e:c7:5f:34:91:2e:ba:b8:
15:45:f6:26:7f:81:d8:b6:60:0c:3f:6a:2c:9c:57:c7:e8:a3:
7d:56:e9:c7:9d:f2:1b:4c:bb:3c:32:b3:f8:6b:cc:05:68:3d:
d3:6d:80:b5:4c:5d:9f:a8:5e:37:a2:73:bb:44:eb:ca:1a:63:
0d:e9:9e:20:17:d6:2a:da:f6:e6:23:72:fb:37:12:68:98:60:
16:c3:1e:b6:1c:94:dc:1f:02:85:bc:f0:a0:12:f4:89:e2:dc:
8e:46:2d:82:9b:aa:ee:16:ed:f0:2f:3a:5e:7f:9b:d0:5f:77:
f3:21:26:04:01:60:e9:71:2a:76:67:54:c5:d7:6e:1c:5d:d3:
a3:a7:54:65:2e:76:6a:21:62:b2:94:64:24:bc:1c:71:f5:e6:
87:19:1d:d3:4a:f5:6f:21:a7:21:b7:d4:6a:d7:c4:74:e6:a2:
fb:c3:de:1e:86:5e:dc:d2:cd:1f:3a:5b:9b:61:24:70:0e:0f:
23:66:50:8f:6c:4e:c9:45:c6:72:d0:4a:6f:7c:55:f4:0c:26:
56:83:f1:3f:ab:32:bd:0a:36:0f:02:c3:91:ac:f5:03:e4:29:
67:60:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:28 2025 by rpki-client