Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AeX7Zx4Us3H3G5xga8cJf5hxrBo.roa
File: AeX7Zx4Us3H3G5xga8cJf5hxrBo.roa (raw, json)
Hash identifier: 4QMlN4IjH4efVWk0POe1o7FJgwM0ir7z11dVzf/KeNw=
Subject key identifier: 01:E5:FB:67:1E:14:B3:71:F7:1B:9C:60:6B:C7:09:7F:98:71:AC:1A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7961058A519480455F8293C00F0284AD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AeX7Zx4Us3H3G5xga8cJf5hxrBo.roa
Signing time: Tue 26 Mar 2024 06:09:45 +0000
ROA not before: Tue 26 Mar 2024 06:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:61:05:8a:51:94:80:45:5f:82:93:c0:0f:02:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 06:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01e5fb671e14b371f71b9c606bc7097f9871ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:6a:58:50:1e:98:e8:e4:e4:79:94:76:ac:
64:4a:d4:87:ef:2f:a2:95:9a:fa:9d:13:fc:12:ce:
2b:9d:70:5c:3b:8b:6b:07:1c:9e:53:32:bb:89:ec:
58:21:50:88:7e:61:ad:47:8f:43:f2:8a:2b:4d:50:
d4:54:94:ac:b0:19:3f:bc:41:d2:4a:64:9b:27:9a:
e5:53:96:0a:dd:da:80:4c:52:76:7f:4f:dd:ab:75:
17:5d:03:48:b3:62:2b:9e:9b:01:ac:f3:89:7b:a1:
50:d6:44:04:03:29:6b:15:d0:a9:31:10:47:01:b3:
09:22:1b:7a:51:10:d1:89:02:ff:3c:de:42:1f:fb:
f8:e6:a3:79:33:78:f9:aa:d3:80:89:e8:e5:36:4e:
6f:2b:db:9d:75:61:16:d1:13:d8:1e:6d:75:8e:89:
31:7c:ba:1d:2f:9d:87:5f:35:ad:83:58:33:17:5d:
f5:30:e7:f6:eb:96:e8:ad:70:0e:d4:6c:ff:5c:b0:
fe:fe:c6:7f:41:44:0c:e1:24:9f:ff:72:db:6c:28:
c2:4c:3d:f6:0f:7c:2f:61:4f:b4:e9:aa:fb:de:1b:
50:44:50:6d:63:1b:22:a8:35:8b:cb:be:e7:c4:d4:
13:f4:1d:e3:71:c7:97:f0:d4:b1:8d:31:fa:a3:f5:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:FB:67:1E:14:B3:71:F7:1B:9C:60:6B:C7:09:7F:98:71:AC:1A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AeX7Zx4Us3H3G5xga8cJf5hxrBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:ae:12:de:95:14:95:ea:d9:aa:0d:3b:b5:22:c5:8f:1f:26:
34:1b:15:81:0e:a9:eb:21:20:0a:e6:0e:95:f8:a9:c2:b8:0d:
42:f2:85:7c:03:b0:ff:12:8a:fb:79:08:07:a2:06:cb:2d:ec:
64:1d:6c:8d:be:66:99:66:78:9f:ec:b7:fb:f0:5b:9c:bb:dd:
6b:5b:5d:ab:16:dc:01:31:29:1d:f6:02:9e:60:69:4c:51:f3:
1a:d9:2c:0c:d1:50:b9:b4:f7:41:75:43:6f:86:76:b2:0c:ee:
80:c1:94:e7:62:17:fd:39:56:ec:27:54:45:a7:2d:2e:5d:41:
dd:5e:86:e8:47:78:66:58:b9:db:f1:0b:63:3e:0a:ac:56:ec:
96:ba:0d:92:ef:d1:17:a3:63:72:4e:f8:4c:4f:4d:ec:11:b0:
52:b5:50:19:a7:3b:d2:f3:22:19:fe:2f:d2:4b:7e:01:54:6a:
91:02:5f:e7:a6:a3:c3:7e:bc:f1:d4:fc:e5:3e:76:71:d7:2a:
4a:ac:ff:7b:d7:72:33:d3:b0:df:ec:00:39:17:04:04:3b:c9:
31:2c:06:b4:77:c8:7d:c6:c8:72:57:92:68:73:21:e4:5c:18:
18:8a:9e:c3:ec:6a:4d:57:e1:7c:5e:ec:f8:76:f9:5d:80:48:
0e:7e:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:19 2025 by rpki-client