Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9-RRvBVVFQZyEmoeXzVByhXs8UI.roa
File: 9-RRvBVVFQZyEmoeXzVByhXs8UI.roa (raw, json)
Hash identifier: VIwMd0WpL4rMhB6jXeQacY+dcS3KOwtK7yt2Ni+6skw=
Subject key identifier: F7:E4:51:BC:15:55:15:06:72:12:6A:1E:5F:35:41:CA:15:EC:F1:42
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCBFBBACBC9D2539C79F525FB0D6A4006
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9-RRvBVVFQZyEmoeXzVByhXs8UI.roa
Signing time: Wed 21 Feb 2024 14:04:48 +0000
ROA not before: Wed 21 Feb 2024 14:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:cbfb:3006/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:fb:ba:cb:c9:d2:53:9c:79:f5:25:fb:0d:6a:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 14:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e451bc1555150672126a1e5f3541ca15ecf142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:a6:90:44:99:de:69:12:fa:13:e9:22:5f:
93:d9:d0:8c:a4:90:45:42:94:84:11:3a:5e:b1:dc:
14:4a:4e:db:c5:85:33:33:ab:09:9a:bc:98:93:4b:
b3:e8:06:fd:49:88:bb:66:ef:58:02:a4:3e:e4:cf:
4f:e6:04:a7:28:7b:aa:92:3c:13:7d:0e:36:b3:56:
04:d0:7d:00:4c:68:a3:b5:94:24:2e:e7:88:c3:7c:
c0:2a:78:ce:32:ec:7b:b0:61:89:26:3c:ba:22:30:
0a:f3:69:39:4c:00:a4:1f:e5:52:1d:6d:f8:69:8c:
5d:1d:1c:af:27:1d:23:c4:ce:bb:f6:08:d4:aa:3d:
a2:39:17:07:4f:78:4b:24:8c:a8:be:2c:da:73:d3:
b3:b5:cb:a3:1e:aa:fd:a6:df:87:ac:20:7f:82:3f:
43:ce:49:5d:30:43:56:6c:9f:11:19:e9:d7:b7:a9:
fb:cb:67:cb:44:0b:8d:d1:31:66:27:dc:da:37:f1:
56:15:3b:32:75:82:d9:cc:1b:c0:7e:c5:91:b3:32:
e3:82:fb:4d:32:d2:3c:ec:49:e2:59:e5:a4:c2:80:
d0:ec:93:c2:9d:20:49:04:f4:48:71:eb:6c:b3:05:
49:fc:b2:14:5a:2b:04:c8:40:44:a4:c7:bf:07:66:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:51:BC:15:55:15:06:72:12:6A:1E:5F:35:41:CA:15:EC:F1:42
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9-RRvBVVFQZyEmoeXzVByhXs8UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:e3:e9:f6:3c:63:44:10:a1:cc:57:01:b5:69:d3:2b:08:63:
b4:fb:2d:04:9f:82:30:e3:e6:cb:99:bf:53:d9:2d:5e:09:c0:
80:f5:27:f4:56:57:96:94:8b:05:b1:d0:53:77:98:2b:8c:3f:
42:1f:c7:aa:f2:70:61:b2:80:8e:bf:d2:8d:64:67:5b:08:a1:
91:ac:ae:67:87:74:08:7e:af:7d:fb:04:ae:81:1d:ce:46:85:
90:f8:b3:0a:78:38:fa:45:00:04:de:e0:31:4d:b7:0b:af:5b:
27:6b:7d:a3:39:e6:20:40:ed:19:74:a6:95:7d:5c:4b:01:f8:
1d:79:28:1c:90:de:21:1e:23:56:69:21:9b:69:1a:f6:f5:52:
1f:30:84:e2:11:56:d7:5a:5b:9a:ab:a1:f7:77:df:f7:0c:48:
a4:3c:8d:be:a8:0b:7a:aa:d1:b4:15:f3:60:ee:01:74:d2:40:
65:e9:32:ba:9b:f2:f5:32:73:fc:57:b2:8a:0f:71:30:4a:46:
88:3d:3a:d9:40:64:02:c1:11:f2:f8:3b:47:de:90:3d:71:6f:
31:ad:df:77:ab:19:c8:69:4a:13:37:79:db:13:f4:98:68:12:
c6:b5:60:46:93:bc:c9:20:ce:2e:62:fd:37:46:c8:b5:f1:ea:
a0:0a:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:16 2025 by rpki-client