Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BH8HFlifIRTCGRP3PRJXEwtBy3o.roa
File: BH8HFlifIRTCGRP3PRJXEwtBy3o.roa (raw, json)
Hash identifier: FP9xS7HD0wUnLpRolXeSokcljjogma+xabQBJw7Y1ps=
Subject key identifier: 04:7F:07:16:58:9F:21:14:C2:19:13:F7:3D:12:57:13:0B:41:CB:7A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E40B67CC87B8BE385A2343E3373AA587C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BH8HFlifIRTCGRP3PRJXEwtBy3o.roa
Signing time: Fri 15 Mar 2024 06:04:45 +0000
ROA not before: Fri 15 Mar 2024 06:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:40b6:49f1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:b6:7c:c8:7b:8b:e3:85:a2:34:3e:33:73:aa:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 06:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=047f0716589f2114c21913f73d1257130b41cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:ec:53:d2:20:3c:e1:e5:78:0c:d1:7c:74:
eb:e6:b9:d2:1e:24:85:20:17:7a:fe:73:dc:03:04:
7a:7c:86:fb:8c:2b:41:4f:f6:fa:49:df:fb:ff:9c:
c3:d8:97:65:2f:5f:1c:da:49:0d:28:c6:b4:c8:b6:
74:65:a5:33:e5:ee:96:57:b0:a2:b9:8f:e1:4c:70:
66:f6:a5:43:c8:46:29:27:a7:73:52:c1:95:96:21:
73:8b:23:5f:3f:2e:d1:7f:b8:93:9c:03:c4:43:e1:
7e:0c:8a:4d:9d:77:f2:7c:3a:41:9a:e3:e1:1a:f8:
81:50:32:ff:13:56:5b:d2:56:8b:b8:04:dc:1b:df:
85:73:4c:d6:09:0b:8c:ec:12:af:31:b7:c1:94:81:
3d:51:db:96:63:52:94:76:28:49:67:06:b3:65:9a:
71:2c:a6:77:fe:52:c7:81:3f:a1:fe:df:46:78:51:
c4:8a:bb:b8:4a:7f:0f:14:89:ba:94:5a:4d:a6:21:
26:49:05:b6:5f:44:9f:3c:3b:6e:d6:c4:62:8d:79:
eb:9b:40:06:52:46:16:f0:e1:3a:5a:0e:72:5e:88:
4c:d9:d5:57:4a:84:bc:e9:9c:9c:38:48:13:a6:43:
c7:7b:07:ae:b1:a4:e4:00:3c:6e:80:05:3f:b6:09:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7F:07:16:58:9F:21:14:C2:19:13:F7:3D:12:57:13:0B:41:CB:7A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BH8HFlifIRTCGRP3PRJXEwtBy3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:95:79:f5:a8:a3:f9:65:53:a1:05:77:fb:f5:a1:1d:47:2f:
8a:77:5b:95:4b:8b:3c:6e:d3:f5:76:b4:b3:d0:f1:eb:a9:3b:
46:eb:9c:64:30:43:10:43:0d:62:1a:f4:15:be:bb:e8:b8:4c:
17:ae:ba:b5:bc:53:64:b6:95:b0:aa:1f:d1:3f:e4:b6:6f:60:
ff:95:58:54:52:4a:24:c2:3d:72:01:79:8d:bd:0b:33:a6:f7:
c8:ff:d0:bd:38:61:f9:b6:cb:ca:48:16:4d:f0:e8:74:db:0d:
66:cc:c9:8a:e0:2b:d4:df:67:fb:09:2a:57:2d:97:c1:f0:69:
53:7e:35:2f:9c:b2:fb:3c:8c:8e:ce:b5:04:2b:f9:54:b0:1c:
6f:99:41:7e:4f:7b:16:85:a7:31:da:b1:2f:fd:c7:7a:43:3d:
d5:d8:17:e1:dd:b9:ba:ad:9c:f4:31:ad:0b:0c:d0:f9:cf:02:
fa:c5:73:85:3a:81:77:79:02:12:f5:de:34:c0:0b:df:6c:ae:
90:a4:8d:f2:d7:49:7f:15:a8:4b:3b:0e:47:b5:f5:99:47:65:
24:ba:89:57:a4:12:4d:4f:92:74:2a:f0:2d:20:19:74:0a:59:
00:9c:44:ab:0e:f6:7c:04:4d:71:61:0e:78:10:f0:fc:6b:98:
7f:ba:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:51:22 2025 by rpki-client