Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs6yl2KvYmbnZA_exSXMYHVnMsE.roa
File: Cs6yl2KvYmbnZA_exSXMYHVnMsE.roa (raw, json)
Hash identifier: iSa/pUPgUXTNnwFukbPQ1F0dFG+Mgsg+QcCbeO4bC4I=
Subject key identifier: 0A:CE:B2:97:62:AF:62:66:E7:64:0F:DE:C5:25:CC:60:75:67:32:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9214D5D107D46EAFD226641B56BF61A1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs6yl2KvYmbnZA_exSXMYHVnMsE.roa
Signing time: Sat 10 Feb 2024 08:14:15 +0000
ROA not before: Sat 10 Feb 2024 08:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:14:d5:d1:07:d4:6e:af:d2:26:64:1b:56:bf:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 08:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aceb29762af6266e7640fdec525cc60756732c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:94:02:c4:16:63:7b:c9:f6:ea:e2:0f:28:
9b:c5:f1:2e:99:44:51:c4:8e:05:72:ae:6e:47:bb:
b0:f2:1a:02:23:bf:4c:be:2c:ab:7e:a9:84:ac:3c:
23:fa:1e:d7:b1:08:18:b2:dd:ec:18:4e:86:24:c3:
a1:5a:67:99:20:69:03:42:af:b6:e1:64:f3:7f:9f:
6e:12:4d:8d:e2:a6:df:1a:d4:d1:87:62:36:31:cd:
00:3e:f8:a8:0b:d5:43:4b:8a:6c:1d:48:82:81:e1:
05:3f:f5:3d:8e:0f:6f:f7:31:c2:d5:e5:3a:0a:e0:
a7:70:3f:b4:25:8d:e8:75:ec:c5:00:1c:1a:3a:4e:
0e:4b:f5:67:3c:60:e7:23:b0:93:2a:b3:8e:44:bc:
0f:95:f3:d6:1c:65:b1:51:f3:d6:38:1b:ab:20:43:
0d:b9:aa:a2:1f:82:62:8c:e6:f5:b3:9d:09:fa:db:
a5:71:d0:30:2c:4c:4c:a8:e1:ff:35:06:b8:16:40:
03:06:0b:4f:ca:98:55:fd:b4:02:7f:1e:38:a6:0e:
21:bc:64:2a:e4:2b:8e:1a:3b:ed:ab:05:8c:7f:75:
95:11:e7:aa:31:eb:f2:ed:ed:81:31:3f:32:65:d5:
fd:4a:6c:43:49:a1:31:25:11:d9:77:49:cb:38:f1:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:B2:97:62:AF:62:66:E7:64:0F:DE:C5:25:CC:60:75:67:32:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs6yl2KvYmbnZA_exSXMYHVnMsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:bb:09:14:26:d3:02:4e:06:3b:12:f8:fb:f4:c4:96:d8:00:
36:98:f0:02:4e:4a:8b:cd:7e:2d:47:f7:a1:71:98:90:ee:2b:
db:38:df:fc:a3:ef:de:14:bd:ab:f4:05:4d:80:0d:26:bb:30:
f9:91:9d:e5:a2:02:00:7c:83:03:9f:20:f0:54:bf:3f:cf:75:
4a:4b:be:45:15:ef:5c:d5:ed:cc:45:5e:fc:a8:bf:5b:67:9a:
c3:d7:eb:8b:42:54:f5:0c:f6:cd:45:1b:3e:c6:0b:e5:54:1d:
20:d4:04:90:02:52:88:23:1a:b8:bc:64:9a:0f:f1:da:5e:51:
8a:f3:5f:d7:1d:43:86:2f:d3:49:c2:c1:3b:98:5b:f8:52:e2:
af:e3:cf:11:08:17:d0:ce:a3:3f:31:c5:b5:c4:58:66:14:0a:
8c:50:97:ac:19:22:96:f1:e8:96:c1:45:a6:89:b5:5f:fb:04:
fc:7e:8d:ef:a5:3b:f9:4e:b0:83:8d:eb:ba:10:6c:69:6a:13:
28:b7:af:4a:ce:59:38:94:e4:a5:1e:d2:12:02:d4:9c:cd:cc:
df:76:e0:b3:e4:15:a6:07:85:96:3d:d7:86:81:aa:4d:f3:4a:
44:e9:1b:66:86:6f:89:19:de:10:eb:0e:c2:4d:c5:6c:3b:7c:
98:c4:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:42 2025 by rpki-client