Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7-imUfzQ2YMKb-If6SYdtpSziOk.roa
File: 7-imUfzQ2YMKb-If6SYdtpSziOk.roa (raw, json)
Hash identifier: sJp9tdYddarGJLaqUap9gnYctHTb5V96FPpPpgv6ypo=
Subject key identifier: EF:E8:A6:51:FC:D0:D9:83:0A:6F:E2:1F:E9:26:1D:B6:94:B3:88:E9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC0D5FC15BB008A295C979ACAF715492B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7-imUfzQ2YMKb-If6SYdtpSziOk.roa
Signing time: Sun 31 Dec 2023 17:04:58 +0000
ROA not before: Sun 31 Dec 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c0d5:51ca/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:d5:fc:15:bb:00:8a:29:5c:97:9a:ca:f7:15:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe8a651fcd0d9830a6fe21fe9261db694b388e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:05:ee:09:b6:f7:21:76:4a:54:e6:d6:19:
36:da:26:d8:d3:15:c6:a6:3c:02:5d:c6:3d:c1:5e:
0b:19:10:b2:8e:40:ed:8a:60:d4:68:22:3c:58:21:
a5:7e:00:0d:94:e6:7c:21:4f:77:74:df:2d:3f:e2:
ed:c0:1d:a2:3c:94:50:0c:10:7b:08:a8:6f:7b:2f:
b6:28:50:08:40:28:ec:01:b4:b3:67:41:49:ff:be:
06:9c:90:65:68:af:f9:20:79:0c:5d:c9:ff:0b:59:
bb:75:6a:3e:9c:e5:c2:37:8d:ec:77:fa:a5:f7:5d:
c7:f0:3b:db:d7:aa:35:04:c6:94:51:fc:bd:ac:22:
6f:41:d2:56:cb:11:65:fe:64:5b:8d:1a:6f:fb:e6:
0e:6b:0b:20:3b:e3:e1:3c:61:e6:e6:44:6c:8f:d1:
72:09:ce:3c:0e:e0:6d:cf:17:82:b4:1c:45:b7:92:
24:4f:57:94:d5:e0:fb:59:68:f1:de:97:4d:2a:68:
a8:93:6d:96:80:d4:cd:78:1e:64:c0:ba:94:e7:c2:
e5:4e:ec:72:e6:64:16:c7:87:2f:73:af:76:d1:ec:
ba:d3:d3:41:8f:c8:4a:e1:b6:83:28:ac:11:e0:db:
a8:4b:22:b4:c0:38:eb:92:02:93:08:e1:c3:c9:0f:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:A6:51:FC:D0:D9:83:0A:6F:E2:1F:E9:26:1D:B6:94:B3:88:E9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7-imUfzQ2YMKb-If6SYdtpSziOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:34:de:e2:45:fb:8a:8c:57:72:ab:8c:62:f7:a7:2a:9f:23:
88:ea:ef:90:cb:c1:79:7c:96:f9:29:c4:65:eb:61:5b:97:9f:
da:62:8e:c0:3d:08:66:cc:b0:f0:d9:af:a7:80:e6:88:de:89:
76:1b:d2:34:03:43:0c:99:2a:df:55:e5:61:6a:73:06:a7:4d:
3c:3d:7a:c3:50:06:ea:98:b1:df:37:cc:fe:25:89:a1:d3:db:
bc:06:f2:cd:87:9f:df:a3:1a:42:bd:02:f2:7a:3e:3f:bd:29:
9d:de:ea:86:ba:95:ed:21:01:fd:56:56:da:f8:c6:7d:44:c4:
20:07:3d:2b:d8:29:78:4d:b5:ff:df:e0:ba:44:41:ff:7c:c8:
1f:66:1d:6e:7c:72:48:79:30:f4:3f:e1:04:f6:d0:b9:2a:17:
d8:10:9e:89:35:a4:40:14:13:52:35:99:b3:d9:0d:1a:da:d7:
6a:0b:dc:56:4b:e8:ad:43:84:67:38:6b:05:42:20:cb:94:94:
e2:fe:1d:7e:bf:4f:d1:19:2c:bb:24:ae:21:5f:0b:7d:71:16:
28:4e:b6:ff:a0:aa:9a:c9:a9:65:c3:c2:3a:55:00:89:2e:cd:
c7:e0:1b:89:69:ce:7f:9a:ae:7d:f1:16:eb:1d:91:1d:b3:6e:
4f:a5:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:03 2025 by rpki-client