Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/E4kKUYGdLIdUjXAkdSjEDMMc2bg.roa
File: E4kKUYGdLIdUjXAkdSjEDMMc2bg.roa (raw, json)
Hash identifier: Wb+2EfZqX7a9CodAoOkFcK1uda/tzwUYyYbnHsVtlhc=
Subject key identifier: 13:89:0A:51:81:9D:2C:87:54:8D:70:24:75:28:C4:0C:C3:1C:D9:B8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4A60E1A01E2084F7286777B5387F4857
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/E4kKUYGdLIdUjXAkdSjEDMMc2bg.roa
Signing time: Sat 27 Jan 2024 10:04:39 +0000
ROA not before: Sat 27 Jan 2024 10:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:4a60:a4fa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:60:e1:a0:1e:20:84:f7:28:67:77:b5:38:7f:48:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 10:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13890a51819d2c87548d70247528c40cc31cd9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:55:53:79:41:83:21:62:4e:3b:88:19:01:
2f:27:22:ce:37:b2:d4:85:df:ee:fe:05:fc:e8:0c:
73:fa:d6:28:99:89:7f:85:dd:d4:b3:31:90:cf:ce:
d4:c5:ad:eb:8c:74:bb:ed:42:5d:51:05:3a:c3:a3:
46:0d:d6:37:50:5c:6c:3d:79:0c:0d:9e:8c:1e:cb:
a6:4e:d0:09:b5:f7:a3:de:49:af:9a:61:78:25:40:
72:99:eb:87:4a:60:3e:9f:1c:4a:78:14:3f:40:4a:
6b:db:96:b7:bf:5f:5f:66:d0:ee:f7:90:56:7b:bf:
21:1d:f2:e8:9d:ef:7d:06:a8:e1:88:ab:46:2b:66:
41:84:33:ce:b0:e5:47:6e:2f:cb:81:0c:fc:9d:cb:
6b:d8:ae:9b:93:2d:70:14:8e:2a:ec:dc:50:ae:40:
32:7b:57:bf:fd:55:0a:ac:9d:7d:db:58:21:67:db:
21:5f:c2:c6:bc:0d:74:5d:1f:22:f0:f6:e2:71:5f:
92:80:71:fb:60:87:ad:aa:f2:7a:31:16:16:a9:bb:
7e:cb:31:a1:dd:61:96:c0:d9:ba:16:e9:b6:76:bc:
ba:36:5b:0b:21:9e:ac:fa:61:a6:9c:b1:84:e8:1a:
6c:97:79:90:fc:e0:05:29:aa:cc:a2:9b:92:ce:35:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:0A:51:81:9D:2C:87:54:8D:70:24:75:28:C4:0C:C3:1C:D9:B8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/E4kKUYGdLIdUjXAkdSjEDMMc2bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:1a:2a:e9:87:a6:ac:6c:5a:7e:f3:d4:49:7b:07:6d:69:9c:
6c:59:6e:a6:e4:c4:c2:56:ea:1a:b9:51:75:14:98:c2:fe:7d:
4b:ea:44:82:c1:5c:e1:3a:72:44:c5:59:5f:5a:0c:c6:d9:58:
2f:7f:d5:2d:7f:72:68:a4:49:7f:d2:ca:ea:48:fe:8f:4f:3b:
2a:b0:0c:0e:a1:3f:c3:e2:3b:77:da:09:bc:e4:5c:4c:1b:4e:
66:de:01:bd:7d:01:df:12:54:ee:65:1c:c2:ae:b0:b1:5d:35:
d0:0d:62:f4:e1:c9:93:96:23:44:5a:20:42:bc:c2:49:a4:95:
06:2b:d9:58:0d:eb:7f:58:eb:a3:dd:26:15:58:9b:e4:d2:79:
21:73:0e:63:0d:06:38:3c:0e:eb:97:91:35:db:db:bb:b8:58:
2e:3a:0a:88:4e:05:b6:7b:ff:f3:dd:50:eb:3a:51:ea:54:30:
d9:7f:61:3d:a8:40:f1:03:b0:00:f8:ab:e6:ca:cb:f8:f4:54:
86:f6:e3:32:f2:d4:f0:3f:23:95:92:8a:f7:6f:51:7d:11:70:
5d:3f:74:68:43:5e:16:d5:a5:4e:45:65:33:3b:b1:44:25:9e:
bb:7c:ee:5d:50:de:44:40:1e:cb:cd:29:57:12:04:4d:98:44:
25:c3:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:42 2025 by rpki-client