Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EwZyeFXZ8VmFJY1P1HgVlV475Vc.roa
File: EwZyeFXZ8VmFJY1P1HgVlV475Vc.roa (raw, json)
Hash identifier: DGb6pZ7KOs5jXnynybfrNy91mZJeCbcTWzEd/J92ZrI=
Subject key identifier: 13:06:72:78:55:D9:F1:59:85:25:8D:4F:D4:78:15:95:5E:3B:E5:57
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEB1F387CD02C03FF3E20AB42AAA9F727
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EwZyeFXZ8VmFJY1P1HgVlV475Vc.roa
Signing time: Tue 27 Feb 2024 15:11:48 +0000
ROA not before: Tue 27 Feb 2024 15:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:1f:38:7c:d0:2c:03:ff:3e:20:ab:42:aa:a9:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 15:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1306727855d9f15985258d4fd47815955e3be557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:e5:78:c8:21:06:80:56:1c:47:94:5b:ce:
02:1e:7b:9c:1d:2d:3f:a1:16:3e:1f:53:c7:6a:34:
ef:4c:37:8e:83:b2:6e:fb:e5:21:a9:d4:dc:9f:e6:
0e:0c:83:52:1d:2f:1e:ee:cb:f3:20:4e:1c:99:72:
2f:34:96:6a:20:93:4f:7d:c0:b8:32:b3:22:2b:9a:
5f:65:77:97:d1:f4:be:c4:5a:6b:d1:f5:0d:ac:89:
23:5a:74:d7:de:d0:09:d5:6a:6c:90:11:4b:23:7d:
62:2b:47:c4:26:47:f1:7c:a4:3e:e3:ed:e1:ed:5e:
64:a0:1a:4c:9e:d3:d7:10:64:56:b2:8d:b7:d5:d9:
40:08:b0:a7:4a:58:2c:3d:07:e5:b4:f9:e9:ff:88:
77:12:5c:e3:77:25:e4:cf:29:38:84:65:77:7e:b7:
c2:b8:3f:e4:b0:31:f9:d3:46:42:02:b7:95:42:47:
69:ba:ab:a5:b1:ad:4d:ec:a1:ff:b1:d0:b8:17:db:
70:3e:cc:c8:92:25:e0:94:32:5f:18:4e:b0:dd:b9:
b8:2a:90:e8:77:6d:7e:cb:7d:00:b3:2c:5a:39:cc:
ff:e9:d5:18:38:9b:e7:fe:0f:54:a6:cd:47:88:fa:
ce:23:da:a8:49:be:c1:59:8c:e3:fd:39:a0:b9:6c:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:72:78:55:D9:F1:59:85:25:8D:4F:D4:78:15:95:5E:3B:E5:57
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EwZyeFXZ8VmFJY1P1HgVlV475Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:db:51:17:88:e5:a3:ad:11:6e:09:8e:b9:d3:c9:c4:8f:ce:
8b:42:59:ce:2e:fd:b4:83:66:a2:a4:21:54:41:ad:85:0a:b3:
b9:09:b0:ec:79:51:a9:80:0a:83:d8:39:4f:da:38:73:a2:5c:
8e:3b:14:fe:d1:78:48:68:f4:9d:29:0b:90:65:c2:b5:b2:d8:
df:6f:bd:91:56:bf:a2:d1:6e:9c:4e:07:b3:4f:58:e6:ec:f7:
ae:17:1e:15:84:e0:5c:f1:a6:a8:44:3f:2c:95:06:bf:fd:5d:
bb:9c:2a:82:9c:1f:fe:89:fa:2b:2d:7e:88:bb:67:64:8f:0f:
16:a0:41:eb:b4:ab:f9:74:44:dd:e1:80:6b:a3:dc:1c:d8:09:
80:ad:68:b0:31:5e:23:93:06:a3:96:2a:30:8a:6b:0a:d2:76:
56:02:2d:61:b6:a1:12:49:0e:cd:f5:f8:df:69:5f:4b:4b:0f:
89:88:2d:1c:f8:15:51:0d:7d:8a:9b:63:52:3d:aa:a8:37:c4:
f0:3e:d7:63:28:0c:79:3e:53:a1:f9:71:c7:f0:2b:bb:08:2a:
d7:22:b6:b1:5c:ad:d5:11:5a:ec:26:d1:91:dd:87:c2:04:48:
f8:1b:66:dd:6c:7e:b9:65:5a:d0:a8:86:43:62:35:12:92:f8:
95:d1:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:51 2025 by rpki-client