Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8uWIWwZgK_VowiyToSnU0nDy4Ws.roa
File: 8uWIWwZgK_VowiyToSnU0nDy4Ws.roa (raw, json)
Hash identifier: 4tHBAbSQuSIZ9jmbmTRBnoUxCnd0LgxjgDO7GQRDO1E=
Subject key identifier: F2:E5:88:5B:06:60:2B:F5:68:C2:2C:93:A1:29:D4:D2:70:F2:E1:6B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB463F2936E057A483266CBF61D6DAD63
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8uWIWwZgK_VowiyToSnU0nDy4Ws.roa
Signing time: Fri 29 Dec 2023 07:04:58 +0000
ROA not before: Fri 29 Dec 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:b463:8e5a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:63:f2:93:6e:05:7a:48:32:66:cb:f6:1d:6d:ad:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e5885b06602bf568c22c93a129d4d270f2e16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:0e:bb:b3:25:6f:39:b8:a7:f9:ea:56:53:
70:a2:e9:f8:63:7b:ce:00:35:ed:13:c7:d2:67:c5:
fc:f9:1a:85:95:d2:16:17:fb:ff:78:38:df:8c:57:
f0:3d:b4:26:06:96:63:dc:10:27:35:bf:82:d1:1d:
72:1d:65:59:74:a4:a1:2a:f7:47:a0:93:23:62:e1:
78:a8:a4:4e:ba:18:30:ab:a3:25:63:76:f3:13:0e:
85:8b:0c:2b:26:a0:3d:3f:de:4b:69:7f:7e:14:3e:
3c:a6:d1:6a:d5:d3:8b:c1:67:52:eb:95:bd:b7:cd:
2c:a9:73:2d:45:d8:65:c9:2e:55:8a:f8:65:c0:98:
25:70:68:62:82:69:69:e1:df:c9:82:67:5a:cc:60:
5e:79:c7:2e:c6:11:44:4c:b8:90:31:89:db:4c:8a:
8a:7c:40:d6:7c:76:09:58:7a:5a:fe:89:56:f3:f4:
b1:72:98:68:b9:6a:d7:3b:ce:5e:13:5f:d5:c7:12:
bd:c6:b3:d7:fc:f9:bb:e0:c8:2c:af:f8:43:11:13:
0f:d2:a2:ff:2c:c8:b4:0d:13:83:16:80:7a:c0:c8:
ef:d9:c4:7b:b3:1e:a6:7f:7f:f9:e2:19:60:7a:d8:
c3:d5:fb:97:60:78:47:a6:35:35:94:23:7f:df:4f:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:88:5B:06:60:2B:F5:68:C2:2C:93:A1:29:D4:D2:70:F2:E1:6B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8uWIWwZgK_VowiyToSnU0nDy4Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:2c:84:03:63:4c:f8:25:b2:43:ae:94:6d:23:93:fb:28:eb:
03:db:d2:e6:8d:64:3f:ac:99:17:67:3d:3b:81:87:c0:9f:11:
b1:22:8b:94:fa:a4:11:17:ad:fa:c0:fb:ad:90:76:46:b2:01:
46:59:8c:7d:cd:0d:ec:88:cc:5e:f4:cc:df:e9:7b:e0:b9:14:
69:3b:22:af:70:8e:c8:ec:15:fd:93:5c:44:7e:a0:39:e1:a7:
24:d8:15:d2:88:30:89:be:2b:f5:84:39:3c:87:5a:0d:7b:cf:
0f:b6:ee:b7:91:99:5b:bb:b8:b3:88:8d:a1:ce:5f:d0:21:0c:
73:56:e1:15:ff:3c:3c:0c:c4:10:74:00:06:33:c2:b6:3a:c7:
2f:81:96:98:e9:e4:38:21:0d:23:3c:22:24:4a:24:b1:97:ec:
16:29:47:26:99:db:52:44:2a:cc:9c:98:ca:8e:6e:49:16:98:
65:9a:90:ee:5e:09:c1:49:69:83:2b:d4:e6:a7:09:46:4f:2b:
fa:7b:40:58:ee:68:38:e9:a1:bd:c1:53:4b:ff:6f:49:6a:90:
e4:ce:01:6f:d4:0a:d9:c9:e2:f9:06:7a:b7:1d:ab:0d:e2:32:
1d:80:01:df:34:ea:32:cf:e8:87:8d:9b:88:01:58:cc:fb:66:
cc:e2:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:10 2025 by rpki-client