Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D6u4VbZgRpcWHX6YpIC9fZ0lFgE.roa
File: D6u4VbZgRpcWHX6YpIC9fZ0lFgE.roa (raw, json)
Hash identifier: apDQ5a/bgVSkyyH1VOb+DTjOCC/MLtnRaKN+iIdVY9s=
Subject key identifier: 0F:AB:B8:55:B6:60:46:97:16:1D:7E:98:A4:80:BD:7D:9D:25:16:01
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2EB998EA53CC5FB92739D9AFADABCF8D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D6u4VbZgRpcWHX6YpIC9fZ0lFgE.roa
Signing time: Mon 22 Jan 2024 01:12:11 +0000
ROA not before: Mon 22 Jan 2024 01:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2e:b9:98:ea:53:cc:5f:b9:27:39:d9:af:ad:ab:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 22 01:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fabb855b6604697161d7e98a480bd7d9d251601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:4f:52:21:ff:12:98:03:26:bc:10:cf:c4:
36:5d:ca:5d:11:1f:8a:95:43:63:2e:11:a7:95:d1:
5b:69:22:41:e4:a5:3e:a9:f1:6b:60:9d:77:55:ac:
33:67:6e:92:cd:49:a2:8d:a2:82:a6:54:2e:36:46:
bc:8d:34:56:93:86:c3:03:2c:cb:43:81:af:bf:f5:
42:69:39:35:70:32:31:ce:24:b0:b8:29:01:db:16:
e7:da:68:38:d4:d0:94:52:85:97:2c:1b:c6:00:be:
46:ed:f5:0e:6f:65:06:eb:ca:6a:8a:22:6a:35:d7:
8f:0e:37:d8:f5:6e:29:55:62:a1:31:a1:13:50:95:
f6:40:40:03:bd:6d:3d:0f:19:13:72:a5:a8:7c:85:
0d:8c:54:2e:03:8b:61:aa:2f:af:33:ba:c7:ab:50:
c3:47:dc:67:27:0b:08:22:68:5d:1e:f9:b0:29:66:
0d:8b:4c:8c:75:78:a5:bf:df:23:a6:62:5e:61:22:
bb:8d:f3:49:2f:55:6a:d5:dc:b7:3c:9d:a5:20:0b:
19:0a:7d:27:43:9b:c0:0c:ab:8c:dc:10:83:7e:64:
be:6f:3a:89:45:81:c0:51:5a:5b:a7:91:25:a0:11:
b2:46:41:57:f9:cc:4f:aa:df:1b:66:cb:c9:29:1c:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:B8:55:B6:60:46:97:16:1D:7E:98:A4:80:BD:7D:9D:25:16:01
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D6u4VbZgRpcWHX6YpIC9fZ0lFgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ec:8e:cb:d0:c3:0d:9f:49:2a:fb:6b:7a:5e:b0:b7:ea:75:
e9:5a:9a:c1:7a:1a:d7:d5:e9:eb:49:f0:66:df:c1:58:95:3c:
4d:0a:7d:c0:64:46:97:11:b9:86:20:a2:28:71:7c:2a:f4:c1:
ef:3e:42:9c:0e:8f:9d:a8:3c:8e:66:e8:ed:09:53:12:14:a3:
50:b1:4e:24:59:90:d8:b6:ae:e7:db:18:14:20:9b:37:94:bd:
64:82:62:bd:59:69:a2:91:7a:e3:67:bb:eb:98:53:8a:8e:ac:
af:12:3f:38:b6:0d:2d:db:7d:b3:e6:12:f3:4f:1b:6f:01:c1:
35:08:f8:1c:3b:28:96:95:b9:e5:9d:3e:14:8c:2b:f3:4f:e4:
2d:cc:42:cd:6e:73:64:77:fb:ee:fe:02:84:0f:42:f7:ec:0e:
31:6c:11:b9:ca:bf:65:f0:86:77:1b:ab:7b:cb:61:fc:38:f5:
4d:5a:21:2c:b5:6c:0c:40:32:4a:ca:0b:b3:e4:f2:36:1f:e1:
fd:9b:80:97:4d:11:15:f6:37:57:90:6f:33:96:d4:4c:ae:b5:
c9:39:5e:79:56:c2:e2:0a:2f:a9:e0:77:83:90:84:6c:f6:6a:
5d:80:e9:dd:1c:93:3a:51:0c:98:d3:ce:d6:39:e5:03:54:70:
7e:ba:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:47 2025 by rpki-client