Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9zukxz0DKc46cyuTC0rKXHL9C0w.roa
File: 9zukxz0DKc46cyuTC0rKXHL9C0w.roa (raw, json)
Hash identifier: n+JRBYIQ1xG31Wr9RdbvX+mmSGQ/dzNUlteo/an1Yf0=
Subject key identifier: F7:3B:A4:C7:3D:03:29:CE:3A:73:2B:93:0B:4A:CA:5C:72:FD:0B:4C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED457CA3B62239A17A3A5E257C13820C8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9zukxz0DKc46cyuTC0rKXHL9C0w.roa
Signing time: Fri 12 Apr 2024 22:05:06 +0000
ROA not before: Fri 12 Apr 2024 22:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:d456:e5e5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d4:57:ca:3b:62:23:9a:17:a3:a5:e2:57:c1:38:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 12 22:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f73ba4c73d0329ce3a732b930b4aca5c72fd0b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:5c:7b:87:53:97:18:2d:24:26:a4:a4:66:
0e:29:66:37:32:c5:ee:7a:08:7a:24:cc:23:2d:9a:
81:21:f7:f7:f4:a6:b0:2b:91:cc:c2:d0:c6:33:73:
c0:ab:6f:77:95:85:f0:8e:fc:1b:69:f3:88:90:88:
65:3f:c6:52:bd:a6:88:28:a7:cc:66:f9:25:6a:63:
d3:22:e9:9d:a2:ec:7b:06:f9:bf:1b:ba:75:6d:39:
b8:9d:6f:77:11:b2:d1:9d:8b:f0:09:e0:a7:58:62:
28:73:9b:dc:9c:59:11:0b:32:17:ac:57:db:1f:3b:
c6:e8:3c:d4:63:37:7c:9f:d6:43:3f:94:f8:7a:9b:
ec:a3:e8:d6:57:8e:79:42:5f:82:40:d1:b1:7c:cd:
cc:0e:62:2d:cc:39:dc:28:17:f2:24:7c:91:98:6e:
93:e6:95:6f:27:d3:4c:c3:a4:f3:7f:40:68:e0:44:
af:7e:da:31:cf:12:89:d2:07:89:94:d1:4c:e5:10:
cf:cf:52:2e:7b:bf:06:bc:e7:0d:83:6b:d8:cf:51:
17:f1:46:71:56:47:3a:b9:7e:26:70:7b:a6:24:5e:
07:16:17:1f:0f:ea:28:56:5a:38:92:b6:d7:de:62:
c7:c1:10:49:fe:f9:8a:c8:02:a8:ba:e4:07:02:ba:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:A4:C7:3D:03:29:CE:3A:73:2B:93:0B:4A:CA:5C:72:FD:0B:4C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9zukxz0DKc46cyuTC0rKXHL9C0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:c1:84:59:45:de:be:17:4c:ed:ac:22:80:10:eb:24:1c:94:
ae:f4:cc:44:f5:2d:ae:81:ce:a2:a6:9e:76:6e:a5:ca:26:ed:
af:60:1b:8e:d2:15:72:5c:6d:50:29:c6:44:ca:48:f4:fa:ef:
59:6b:7b:33:6d:c9:e4:4f:37:f9:0f:5a:3a:81:a2:57:04:48:
2b:33:35:a4:b6:d7:d0:dc:80:d7:de:33:5b:f2:e4:72:91:e7:
f4:f0:63:22:1d:00:5e:33:fe:d0:7d:c4:34:f5:a3:40:43:a4:
7e:17:18:63:9c:eb:56:7c:37:b4:29:0f:bf:02:47:c0:3c:b9:
19:c3:68:1d:ca:d0:b2:ae:85:f8:d4:ee:fa:18:6f:56:a7:17:
b1:cd:7d:b3:a5:50:1b:d6:3f:30:90:ca:bd:af:5b:5c:2e:bc:
ef:29:d7:73:47:aa:cd:ba:0c:b5:33:96:9b:e8:1a:e0:64:e3:
a3:18:bc:f2:7a:3a:28:8d:6c:56:46:5d:a5:68:ca:9c:9b:9b:
90:fd:54:27:b2:cf:33:3a:10:54:30:24:c0:a2:02:fb:a9:44:
1e:a3:8d:d7:8f:2b:2b:11:11:c7:ee:3e:39:f9:32:47:b4:af:
58:3e:0c:98:a5:97:cf:64:b6:ae:78:fd:ea:74:ab:c0:15:01:
01:9d:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:40 2025 by rpki-client