Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EIe7X7bPlI3ru_kDA4HMBAo1iY8.roa
File: EIe7X7bPlI3ru_kDA4HMBAo1iY8.roa (raw, json)
Hash identifier: ucRO/peRHQp2s9rUe8APFyPnWSzCMlqleKquElzZJxQ=
Subject key identifier: 10:87:BB:5F:B6:CF:94:8D:EB:BB:F9:03:03:81:CC:04:0A:35:89:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFF46D3303EB85D0BD532AD56149F9303
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EIe7X7bPlI3ru_kDA4HMBAo1iY8.roa
Signing time: Fri 12 Jan 2024 20:04:40 +0000
ROA not before: Fri 12 Jan 2024 20:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:ff46:7982/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ff:46:d3:30:3e:b8:5d:0b:d5:32:ad:56:14:9f:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 20:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1087bb5fb6cf948debbbf9030381cc040a35898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:d0:8a:fb:b6:51:20:a9:cb:20:a3:89:e4:
0e:a8:49:cd:ed:b5:ff:01:93:ed:cc:2b:44:fa:00:
92:9b:b9:47:79:28:c8:fd:da:a0:ea:cc:5c:1f:e1:
df:d3:1d:4f:13:9d:d6:a9:35:da:4d:a0:84:a0:13:
85:03:6f:ab:ae:ec:a3:3f:76:9e:fa:fc:c5:c8:46:
43:35:d0:be:47:69:a7:16:68:0a:57:9b:5e:79:15:
30:02:5c:fc:43:44:bc:7a:c2:80:bf:a6:41:fe:0a:
58:d5:29:b9:d7:8c:5a:02:56:42:bf:47:4c:91:4d:
4a:44:da:d2:7c:6f:5c:29:ba:62:8a:5d:d2:37:98:
07:40:1d:c7:66:13:d4:3f:d8:df:08:10:17:52:ab:
ab:97:7b:0a:de:a4:7d:8e:87:0f:d7:79:57:e6:08:
f6:45:76:4e:77:50:8d:b7:9d:98:f7:de:57:a5:b7:
dd:43:bd:2a:2b:91:c6:f9:dd:05:83:87:16:18:7c:
40:9f:53:f4:35:bf:a5:32:10:a0:d5:b7:8b:ca:11:
10:e1:b6:71:64:fc:ed:8d:ab:55:50:34:4a:c7:76:
b6:c8:1c:0c:0f:1a:ce:a2:65:7e:cd:da:63:13:bd:
dc:e5:88:8a:88:ca:41:46:77:0a:4d:b9:d8:b0:a9:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:BB:5F:B6:CF:94:8D:EB:BB:F9:03:03:81:CC:04:0A:35:89:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EIe7X7bPlI3ru_kDA4HMBAo1iY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:4d:e8:02:5b:93:d1:e6:1e:cc:d6:64:72:af:1d:48:9a:a0:
b5:5d:99:8a:f5:41:89:41:3d:96:51:1c:ff:92:14:69:51:e3:
30:0c:1f:ed:eb:be:32:8e:72:57:7e:0e:ef:62:41:3b:6d:77:
3d:61:d5:5c:37:05:28:26:34:21:9d:64:80:9b:a7:6d:7a:3f:
b8:ca:aa:4d:73:4c:8c:9a:d9:0b:e8:72:77:a3:66:98:95:53:
4a:c7:0d:c0:f1:35:51:9b:63:89:9a:05:2b:1b:bc:56:d5:ad:
8e:cb:4e:82:8a:3b:58:b2:ca:6e:6d:a9:6c:13:02:39:19:ed:
fa:ae:6e:69:e0:9d:08:ea:9e:59:8e:18:fd:85:bf:37:99:a1:
4a:1f:5e:3b:2c:44:e0:e7:32:bb:f2:8a:35:7a:b1:40:40:79:
1e:0d:de:c2:95:48:68:a2:19:e0:95:d4:f1:b0:1f:88:6a:29:
be:42:ea:1f:f1:cd:49:3f:70:4c:bd:c8:27:d8:3d:5e:73:b6:
f3:51:e6:3c:b8:b6:a4:60:28:f3:95:69:1a:e7:77:34:cd:88:
fd:4a:be:82:27:a4:20:ae:94:49:be:21:4c:37:c8:6a:e3:6e:
bd:b2:1c:1f:2f:63:77:73:d4:d1:02:c5:c7:70:a4:19:ec:14:
3d:62:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:13 2025 by rpki-client