Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CcBusD6Qj41PnV2hDv2kwWtkRlE.roa
File: CcBusD6Qj41PnV2hDv2kwWtkRlE.roa (raw, json)
Hash identifier: a6GPyNHx236PDlCbWMH754NTgM8vrZExxBR6gJKGHhI=
Subject key identifier: 09:C0:6E:B0:3E:90:8F:8D:4F:9D:5D:A1:0E:FD:A4:C1:6B:64:46:51
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE519F314EFDE59AB013C27C5E2A52D71
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CcBusD6Qj41PnV2hDv2kwWtkRlE.roa
Signing time: Tue 16 Apr 2024 04:11:06 +0000
ROA not before: Tue 16 Apr 2024 04:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:19:f3:14:ef:de:59:ab:01:3c:27:c5:e2:a5:2d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 04:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09c06eb03e908f8d4f9d5da10efda4c16b644651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:9c:3e:ba:f3:0b:fb:92:94:24:4f:3c:3e:
63:93:fd:fb:7b:17:40:39:36:1d:f0:f1:24:a3:3e:
b0:c0:3e:17:f8:89:d4:40:ab:0c:06:4d:89:8d:cd:
1e:8b:f8:67:8b:8e:d7:e0:45:bb:5e:fe:d3:5f:ea:
f2:9c:77:b7:46:f8:99:bb:e3:9d:76:1e:ab:ba:24:
b8:ed:3f:98:d8:ad:ad:dc:db:75:f2:66:ff:90:44:
6f:f7:b0:1f:36:5c:ee:86:a6:22:ad:00:8d:e4:4a:
eb:d1:98:91:11:93:0d:ab:da:96:d7:82:cc:d8:d1:
9c:24:63:bc:21:9a:ee:75:17:a1:e4:c8:9c:46:3f:
84:e1:d7:29:ba:12:28:6e:9e:9c:83:ad:54:eb:3b:
09:c4:37:ab:a9:19:99:7c:57:2e:38:d1:a9:ea:43:
8e:f4:f5:c9:4d:ef:c9:da:c0:4c:10:ec:96:7d:02:
1a:72:fc:2f:f9:81:9b:90:bd:24:c7:d2:13:c8:eb:
38:41:3c:7d:79:c1:32:51:f3:7c:47:58:c6:22:75:
7f:56:ae:b2:74:cc:d3:41:16:20:c7:75:13:60:22:
70:03:fe:3e:35:3f:80:bf:65:d5:c2:bd:cd:10:2d:
0e:20:45:28:e4:fd:22:e2:4d:58:d0:f0:54:a6:63:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:6E:B0:3E:90:8F:8D:4F:9D:5D:A1:0E:FD:A4:C1:6B:64:46:51
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CcBusD6Qj41PnV2hDv2kwWtkRlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b0:bd:81:57:f6:a4:25:15:a0:05:f6:cc:21:62:81:9e:f2:
cd:1b:e7:5f:04:b7:35:3d:25:0c:81:f8:83:a4:dd:07:bd:cb:
4c:88:9c:33:56:c0:53:f5:19:cd:68:94:99:aa:3d:bd:34:53:
c6:6e:fa:23:25:cf:af:45:b5:ec:14:1a:51:0a:94:bc:9e:c5:
a2:89:6c:39:95:7f:da:33:4a:a0:0d:8e:52:d2:22:f1:32:0d:
17:24:e1:d7:1a:9b:05:fd:95:90:ac:78:5d:61:7e:3f:4d:f1:
af:ee:6f:f9:a1:8d:57:10:0a:28:ba:bd:3f:d2:53:7d:d5:ec:
2f:8f:b1:59:29:01:bb:4a:ae:f3:2e:c8:69:07:62:a8:96:6d:
06:cf:d1:f9:23:61:8b:d6:68:18:6c:53:89:2d:1e:a5:61:c1:
0b:e1:85:91:b7:b0:15:10:5e:1f:7b:63:3b:1c:cb:cf:69:3e:
30:07:88:71:61:a8:f3:ba:7d:0d:c0:fc:e8:59:ea:61:19:5b:
f3:1e:c3:ee:43:80:fc:a7:18:ab:4b:c2:b3:f0:bf:72:14:69:
dc:f4:04:b8:08:3a:8c:67:09:32:85:a2:0b:b1:55:c5:ac:72:
16:e9:f3:5d:b7:68:df:44:dd:85:79:ad:88:16:b0:eb:cc:a3:
73:9f:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:02 2025 by rpki-client