Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7coj8Yta1kPUw_wRlq5jEiFfJCg.roa
File: 7coj8Yta1kPUw_wRlq5jEiFfJCg.roa (raw, json)
Hash identifier: AibKQ3SxDodVCwMVX5MoyfgqvhSJ817YuGks8z+UneI=
Subject key identifier: ED:CA:23:F1:8B:5A:D6:43:D4:C3:FC:11:96:AE:63:12:21:5F:24:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB6F720AF42909A0BB2E5FC187AF6AC4B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7coj8Yta1kPUw_wRlq5jEiFfJCg.roa
Signing time: Fri 29 Dec 2023 19:04:58 +0000
ROA not before: Fri 29 Dec 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:b6f6:710d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:f7:20:af:42:90:9a:0b:b2:e5:fc:18:7a:f6:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edca23f18b5ad643d4c3fc1196ae6312215f2428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:7a:66:81:c8:ae:1a:06:e8:32:d4:e7:e2:
bf:bc:a1:05:3d:5f:2a:b7:44:ee:52:20:84:1a:37:
dc:ef:09:52:c5:5c:da:41:39:44:b3:bd:7d:48:84:
96:77:50:8a:13:91:f3:6c:ee:be:39:7e:44:d3:45:
01:30:da:db:95:9c:89:aa:b9:aa:73:e1:f2:7b:2d:
97:50:e2:6e:ac:3c:43:d3:08:3c:6d:9f:de:bb:6b:
67:c0:15:7b:c7:c7:f4:e1:37:cb:55:f2:b5:6c:64:
72:7e:4a:6e:8c:30:3d:06:e7:3a:9b:8a:4c:b7:02:
90:76:fd:83:4d:51:0f:46:37:ba:6d:54:3e:5d:69:
3e:f3:9d:07:23:62:92:d6:35:b4:9c:c3:43:3f:bf:
91:3c:2b:3b:d5:00:f7:07:4f:eb:78:48:4e:e1:87:
46:c2:5c:3e:1e:7c:a9:41:0d:12:4a:d9:b9:e9:3e:
37:80:74:80:66:ff:55:80:b8:c2:55:c3:59:99:dd:
23:92:76:ba:b8:01:bc:eb:5b:3d:e3:4c:c8:0b:99:
fd:34:51:79:ba:5e:09:a4:6b:bc:56:e5:46:c5:57:
85:b1:d3:35:00:91:a4:5c:1c:3d:d9:0a:f0:d1:30:
f7:04:37:39:25:39:7b:48:d5:8c:46:0f:84:17:ce:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:23:F1:8B:5A:D6:43:D4:C3:FC:11:96:AE:63:12:21:5F:24:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7coj8Yta1kPUw_wRlq5jEiFfJCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:4e:45:66:c7:43:ab:69:a2:d6:0a:c6:29:1f:66:35:69:27:
16:14:45:b8:bc:07:87:5f:2b:88:1e:49:9a:14:e2:1b:f9:76:
05:13:ff:c5:fe:e7:8b:72:7a:b3:47:5a:60:6b:16:d1:fa:3c:
7f:a0:b2:d2:51:a3:e1:24:81:b2:44:90:68:85:f9:e2:0a:f8:
87:5e:a0:ad:95:a2:d2:61:74:33:22:98:53:11:81:ae:09:f0:
b0:75:75:35:c2:b2:5a:38:ee:a7:39:6f:63:30:2c:3d:84:73:
d7:ef:f2:5e:d4:64:e9:92:ed:36:ff:78:0b:1b:2f:70:a6:c1:
de:a5:3a:86:f6:15:eb:23:6d:3e:59:00:9f:a4:7d:90:8d:1a:
bf:5a:41:8d:f8:3d:ee:dc:f0:78:bf:f6:67:cd:18:e5:d8:0c:
fe:a1:2e:f2:e0:31:57:1b:13:41:03:5c:d4:e1:61:50:d4:8e:
f3:76:6e:87:39:be:6c:86:a9:49:13:b7:51:d5:10:3c:43:80:
3d:d2:1e:d7:a1:01:a3:38:89:33:35:00:27:df:00:a8:cc:14:
32:36:17:bd:25:74:dd:db:1e:3f:38:51:13:c7:2c:85:17:04:
73:54:db:21:68:a9:bd:e6:e3:53:9c:35:5a:5e:e9:53:c4:5a:
1c:f3:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:02 2025 by rpki-client