Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7rhfk9KFW9lmjyf2ys_NXMqD-No.roa
File: 7rhfk9KFW9lmjyf2ys_NXMqD-No.roa (raw, json)
Hash identifier: CTpyuvnI0d+7ITNm/hL45nm/+s/ymL1fE1JSGot7O1s=
Subject key identifier: EE:B8:5F:93:D2:85:5B:D9:66:8F:27:F6:CA:CF:CD:5C:CA:83:F8:DA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4E441078DE79AFB998A4AAFEBA2B56DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7rhfk9KFW9lmjyf2ys_NXMqD-No.roa
Signing time: Sun 28 Jan 2024 04:11:39 +0000
ROA not before: Sun 28 Jan 2024 04:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4e:44:10:78:de:79:af:b9:98:a4:aa:fe:ba:2b:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 04:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb85f93d2855bd9668f27f6cacfcd5cca83f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:39:af:60:95:d9:5e:3d:6c:ec:24:f2:0a:
a2:04:49:88:09:0f:05:6a:a1:92:01:8a:d0:db:85:
b4:0f:df:c1:97:8f:16:d2:09:11:7d:14:4f:7c:5b:
81:39:3f:2e:92:6d:77:79:d7:cd:03:b5:2e:ee:39:
66:80:9e:85:6d:27:d8:09:7e:cc:56:86:4c:dc:fb:
db:23:d4:16:67:9c:76:bc:84:a7:63:45:54:09:d9:
c5:fe:dd:36:e6:42:5f:83:25:c0:e2:61:b2:db:a7:
cc:ab:40:16:00:06:7f:46:70:7f:61:40:2d:45:cc:
54:ed:70:a9:59:c8:41:4d:84:b0:3a:fd:3e:11:6c:
bb:3f:0d:3a:66:c3:6a:76:d9:19:10:4b:6c:bf:4f:
f8:04:36:08:a3:7c:cc:8b:da:c1:86:e5:17:3f:97:
5b:93:5e:46:fc:91:4d:89:52:63:7c:53:a5:03:55:
3e:24:94:89:0e:15:17:70:11:98:0e:bb:f7:64:c3:
a9:96:28:00:59:a4:ed:03:ae:1c:ce:65:a1:d1:85:
99:bd:c6:3e:a8:eb:d8:41:94:96:48:0a:f0:b2:24:
05:e6:63:8d:7a:a8:16:47:c5:a9:cf:86:62:af:93:
cc:4a:1a:e8:a0:27:0f:e0:b2:62:59:c4:c4:37:ae:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:5F:93:D2:85:5B:D9:66:8F:27:F6:CA:CF:CD:5C:CA:83:F8:DA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7rhfk9KFW9lmjyf2ys_NXMqD-No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:14:11:a9:98:64:8a:46:96:d9:4b:2c:0c:7d:f0:fc:7b:1f:
49:cb:24:88:ab:03:ec:eb:4f:a3:a7:b6:bc:ab:24:57:a4:bd:
cf:01:86:b4:ee:0b:60:65:19:ab:4d:46:6b:ca:81:46:f9:e8:
e3:24:59:3d:87:b6:53:e1:2f:31:c5:78:31:b3:a3:67:e0:74:
9e:c2:81:e3:4e:dd:28:ac:c8:e0:5a:78:2d:f4:f3:b7:86:10:
df:30:62:89:15:01:c2:b0:ba:61:8c:c7:01:ba:c1:2b:03:cb:
51:3e:62:7e:3e:86:ea:78:e2:11:59:a2:92:1c:69:e4:c8:71:
e7:aa:63:9b:c6:ae:17:72:11:be:6e:98:f2:65:1f:7a:5c:9f:
ff:21:51:b5:b3:5b:a2:a7:f7:70:9d:fd:3b:06:01:e2:4f:15:
d8:48:56:3b:e6:e1:cd:5b:04:45:01:e1:c6:fa:d3:36:c1:0a:
c1:34:07:64:e0:bd:32:9e:f5:2c:ad:fe:d5:e9:f8:4f:5a:48:
76:4d:12:e7:36:44:dd:41:7d:f9:eb:27:eb:6d:98:00:d6:38:
1b:35:fb:d5:d8:77:22:39:5e:55:c3:e8:cf:e4:ee:c3:5d:37:
c3:b3:66:8a:d4:3a:59:9b:bd:92:4c:b2:f5:7d:8d:88:e2:20:
d4:16:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:08 2025 by rpki-client