Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8eP2VdGc2OYxsMPODAdnS29WjXo.roa
File: 8eP2VdGc2OYxsMPODAdnS29WjXo.roa (raw, json)
Hash identifier: cMlgKtCnF3CEwNMOX0UUxg7/fe6l5VOIFk+vEMJvhHM=
Subject key identifier: F1:E3:F6:55:D1:9C:D8:E6:31:B0:C3:CE:0C:07:67:4B:6F:56:8D:7A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E190F5D167D13FA0E42519956E2930FCD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8eP2VdGc2OYxsMPODAdnS29WjXo.roa
Signing time: Thu 07 Mar 2024 13:17:01 +0000
ROA not before: Thu 07 Mar 2024 13:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:0f:5d:16:7d:13:fa:0e:42:51:99:56:e2:93:0f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 13:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e3f655d19cd8e631b0c3ce0c07674b6f568d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4c:b1:59:92:c4:95:89:0b:5c:e0:8c:ab:90:
59:03:2a:24:72:55:01:76:08:19:7c:8d:68:8e:08:
91:0b:74:97:eb:10:38:80:34:7e:ea:e4:6b:f0:85:
66:1a:c2:09:cb:a6:4e:a4:b7:d4:7d:38:52:40:7c:
6c:89:35:3b:6d:5f:6a:82:53:ff:47:eb:8b:da:87:
68:1b:79:53:20:02:8a:0c:e2:2d:df:13:40:9e:4f:
01:cd:55:d1:47:47:9d:15:d5:28:09:b1:32:97:43:
20:97:f3:5c:d5:83:6f:a5:fd:6b:e7:c1:4f:23:21:
21:5d:fe:03:48:4c:d4:7e:3d:0b:4b:0a:bc:82:cc:
ec:fc:12:43:49:dd:ce:f5:a0:8c:9a:85:67:e9:25:
1f:d3:eb:59:5a:1b:21:12:6d:92:36:9b:77:63:14:
08:75:f2:d4:e1:c4:2c:9d:0c:44:63:8e:23:e3:f7:
82:43:f4:28:ad:50:75:dc:93:ee:ed:5b:4a:02:7e:
e6:b9:a0:5c:9d:35:96:66:18:d3:03:46:24:ea:7b:
98:ea:59:f0:50:3f:e1:7d:e0:32:8c:12:a1:08:97:
12:62:0a:d2:9d:7d:18:9f:0c:69:b4:ab:5a:72:05:
4c:c2:43:b1:25:46:5b:b8:bb:2a:fb:d1:37:67:8a:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:F6:55:D1:9C:D8:E6:31:B0:C3:CE:0C:07:67:4B:6F:56:8D:7A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8eP2VdGc2OYxsMPODAdnS29WjXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:e8:35:59:01:96:e9:3a:4e:7a:60:b2:6e:2e:e8:44:17:9b:
d7:ed:39:7c:42:03:7e:b9:44:31:a9:ce:ca:7a:40:25:3e:9c:
49:47:69:5b:1e:20:85:65:db:01:fb:17:84:f8:37:d2:96:e7:
48:9a:5b:28:b0:95:3f:8a:e1:1f:7d:07:83:3b:61:39:cf:11:
80:f6:41:eb:a8:9a:a6:f5:5e:21:3f:91:9b:6d:23:db:37:31:
07:5a:a4:6d:cc:c6:32:ce:1f:ac:e7:23:9f:aa:70:d8:1a:7f:
69:47:c9:25:b8:5f:5d:ef:c2:5a:a4:5a:16:aa:b6:9f:98:66:
63:1f:de:b5:06:24:ed:5e:3f:cc:03:ed:bd:6d:21:36:3a:1a:
ca:46:27:70:ea:f0:ff:a2:3d:ee:3d:06:92:11:ee:08:ed:53:
45:6a:4f:cd:09:19:cd:d1:3b:b8:19:d4:8c:78:0e:04:c7:07:
3a:99:56:74:41:53:75:06:52:8d:4f:7d:af:c1:46:f8:85:fc:
28:9f:31:3a:02:8e:19:99:06:ff:c7:36:aa:3a:ae:18:ab:b2:
8a:2b:b1:86:e5:d7:ca:59:d4:c0:df:4e:40:c0:ba:46:7a:72:
83:f8:50:96:cb:e6:48:49:ef:01:22:d1:29:d4:62:de:b6:20:
b2:b7:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:37 2025 by rpki-client