Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ObVJGo6MU-iAeOfi_IL6kqg5gQ.roa
File: 7ObVJGo6MU-iAeOfi_IL6kqg5gQ.roa (raw, json)
Hash identifier: zRKWwdMA+Umfm2XGGU34hXUo7xeMkhTusv/ohbCic0I=
Subject key identifier: EC:E6:D5:24:6A:3A:31:4F:A2:01:E3:9F:8B:F2:0B:EA:4A:A0:E6:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5850F7AD53D7F50E2FC5F5F4F14E455D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ObVJGo6MU-iAeOfi_IL6kqg5gQ.roa
Signing time: Tue 19 Mar 2024 20:04:45 +0000
ROA not before: Tue 19 Mar 2024 20:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5850:855d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:50:f7:ad:53:d7:f5:0e:2f:c5:f5:f4:f1:4e:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 20:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece6d5246a3a314fa201e39f8bf20bea4aa0e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:16:24:4c:16:63:a9:12:f1:1a:21:34:51:
b9:40:56:78:ee:48:db:54:83:6e:90:70:4e:9f:b9:
b0:0b:98:ff:b2:11:2d:81:87:82:c7:21:6c:53:4d:
b3:a6:00:59:7c:4a:f1:70:4a:f7:87:85:9f:ea:41:
f4:30:b0:35:36:dd:61:8f:4f:58:58:b4:0a:d5:c5:
2b:15:8c:e7:70:98:81:6f:16:ca:fa:ae:7c:c9:c7:
e8:f5:3b:4c:fe:64:8c:e1:1e:21:bf:97:6c:cd:61:
07:23:57:87:02:3b:6e:6e:30:a7:de:82:34:33:4f:
70:e4:c5:d7:0c:8f:a4:e0:b7:43:53:1f:25:cf:89:
fe:27:35:61:1b:13:71:13:56:02:7c:c8:47:7c:fa:
43:f0:d8:e2:4f:61:79:98:88:61:f6:37:90:55:71:
f5:d1:e8:09:b5:51:0c:bd:4f:c8:70:ee:e8:63:db:
08:d7:03:1f:1e:54:35:07:4a:25:08:e8:18:5a:13:
c9:78:5f:4e:a0:6f:04:41:ad:22:e9:d6:1f:aa:54:
13:6a:2a:fa:fa:d4:c8:a9:d1:d7:3a:cd:f2:b4:e2:
35:7d:52:99:69:77:b3:f7:d0:78:11:52:14:0b:e1:
50:18:ee:9f:6f:33:86:9a:67:b4:47:84:ef:09:db:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:D5:24:6A:3A:31:4F:A2:01:E3:9F:8B:F2:0B:EA:4A:A0:E6:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ObVJGo6MU-iAeOfi_IL6kqg5gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:84:5e:08:56:a8:ec:97:7a:00:7a:b3:ef:33:a4:65:63:54:
61:a0:0b:31:8b:79:be:d6:41:f6:61:ac:d6:28:91:45:c3:06:
45:18:b8:45:f0:a0:fc:a6:41:19:c9:0e:4d:91:d5:0a:15:02:
85:30:92:0c:ed:3b:8e:cb:df:ce:9b:7a:61:a3:9a:73:94:c6:
66:40:99:09:c3:8b:65:54:1a:a7:2b:ce:82:8a:a1:34:1e:66:
91:54:6d:a2:9e:91:76:da:e4:66:1e:4e:12:30:77:d6:5d:35:
01:b9:cf:8b:3e:9c:5d:dc:bb:1d:64:17:7e:8f:d6:16:c3:2e:
f8:22:15:2f:78:ce:fa:30:8f:79:ed:82:a3:be:52:5f:8d:67:
de:b6:f9:a0:16:87:ba:97:5b:6b:d7:85:16:71:16:32:21:7d:
4c:2e:6a:2e:45:05:06:fa:cf:b3:44:f1:46:da:65:ec:f5:35:
9e:ae:27:4e:61:59:36:a6:3f:55:f5:75:30:fb:49:b7:12:19:
ba:e0:8f:e8:71:bb:72:ee:2b:fa:23:2b:1c:43:75:8d:41:95:
0e:68:69:7f:3f:34:4b:c7:3d:b2:8e:ce:50:34:61:f8:6c:06:
a5:79:30:6b:ff:ff:2a:de:54:27:37:76:bb:d5:a8:b9:24:9d:
24:ff:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:19 2025 by rpki-client