Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7EtTSImCBiwCM6uh7VvOyJ1roRY.roa
File: 7EtTSImCBiwCM6uh7VvOyJ1roRY.roa (raw, json)
Hash identifier: Uy9s8zIb9Sl60fJUuDfyYxGUgfuRt6pAYBR/QeboUT0=
Subject key identifier: EC:4B:53:48:89:82:06:2C:02:33:AB:A1:ED:5B:CE:C8:9D:6B:A1:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBD68E87A596AA372B575E55978CD9C0E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7EtTSImCBiwCM6uh7VvOyJ1roRY.roa
Signing time: Mon 08 Apr 2024 11:12:32 +0000
ROA not before: Mon 08 Apr 2024 11:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:68:e8:7a:59:6a:a3:72:b5:75:e5:59:78:cd:9c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 11:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4b53488982062c0233aba1ed5bcec89d6ba116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:b8:c4:d4:94:9e:1c:3e:ee:c7:bb:f3:15:
8e:01:b7:4b:76:14:5a:81:ba:9d:1d:59:f8:2f:05:
dd:65:b7:52:c1:9a:b3:38:1c:2f:bf:1a:73:82:8e:
52:e2:1d:b2:c6:6c:a8:47:cb:02:35:de:c5:e5:13:
d6:0c:c8:b6:33:3a:59:8e:46:16:33:52:91:13:83:
b6:36:ad:06:f3:92:07:29:13:a6:3b:42:cb:14:36:
22:ef:3a:8d:1f:ea:6c:1a:34:bc:9b:04:67:42:f8:
e5:c5:f5:98:36:79:a6:78:9a:4d:61:36:18:d6:15:
c4:1a:3c:26:5c:6e:58:83:a6:82:46:6e:27:45:48:
79:75:94:08:d0:d0:d3:48:9e:f1:c1:cb:1d:72:c2:
ce:c1:19:86:fc:77:49:3d:fb:f8:0b:e4:dc:a2:b7:
8f:15:4c:df:91:b1:63:72:25:99:02:65:eb:d9:67:
c0:ce:cc:d3:67:3d:d3:9b:e4:f0:7c:59:ba:f2:1a:
dc:db:fc:5d:9a:66:0b:f4:c5:3d:25:4f:3b:65:93:
45:07:67:e6:e5:f2:50:50:d7:84:dd:08:fb:a9:0f:
64:73:d5:b4:33:a3:96:41:51:24:9a:2f:98:41:93:
29:b7:6a:6b:cf:81:8a:03:ed:5f:69:98:97:30:fa:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:53:48:89:82:06:2C:02:33:AB:A1:ED:5B:CE:C8:9D:6B:A1:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7EtTSImCBiwCM6uh7VvOyJ1roRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:3b:20:2c:01:33:56:7b:5e:52:be:6c:8f:e6:e2:23:21:30:
9e:db:97:fe:ec:74:01:94:1d:5b:3b:ae:a0:e3:fb:e1:2f:08:
89:21:73:bb:99:90:02:c1:c4:07:4a:c9:df:97:ca:d8:f8:d9:
e8:14:c8:cc:aa:3c:11:ba:21:4f:85:58:75:48:7c:5f:ba:d3:
47:b2:17:81:09:21:f5:f6:4d:33:86:b4:c4:07:70:a6:31:92:
fa:3d:f4:8d:b4:b7:1c:8c:e9:2d:5b:23:4f:43:15:48:63:5f:
7d:c0:70:35:c1:41:f5:bd:c5:b6:b6:02:fa:09:35:fa:c7:0f:
2b:85:2a:d7:11:f2:9d:fa:ae:19:b5:6b:20:51:17:d3:84:80:
8e:fb:b3:7c:c1:86:2b:d5:6c:ae:05:58:f9:e1:c6:31:5b:31:
8d:d8:ae:e1:5d:d5:ad:cb:6e:aa:e8:c1:32:11:08:98:86:01:
c1:37:b2:03:e6:ee:e7:25:76:72:c8:53:22:ca:81:74:42:9a:
01:72:9f:6c:f7:47:7d:50:43:7c:77:11:98:a2:f9:5f:84:57:
1a:b2:03:cd:7e:52:04:c6:2d:a0:74:35:af:15:c6:e1:d3:35:
44:0b:fd:fd:aa:25:60:10:c2:73:3a:54:5e:d5:e4:c9:0a:48:
e0:b3:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:07 2025 by rpki-client