Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IP0_BdhlN1DxIRMh1RxG3MQIKdI.roa
File: IP0_BdhlN1DxIRMh1RxG3MQIKdI.roa (raw, json)
Hash identifier: Xv3N3JVIDZMhMnBFtY7unyLoRTIgFc5QzhO/Z/2vWG8=
Subject key identifier: 20:FD:3F:05:D8:65:37:50:F1:21:13:21:D5:1C:46:DC:C4:08:29:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD37E55757EDDC0DD713879A96900BD61
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IP0_BdhlN1DxIRMh1RxG3MQIKdI.roa
Signing time: Fri 23 Feb 2024 01:04:48 +0000
ROA not before: Fri 23 Feb 2024 01:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:d37d:d506/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:7e:55:75:7e:dd:c0:dd:71:38:79:a9:69:00:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 23 01:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20fd3f05d8653750f1211321d51c46dcc40829d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:94:85:40:a4:af:68:32:b6:ce:78:80:7c:
03:d6:f1:7e:e8:21:14:f2:99:fe:84:cf:0e:f0:9e:
44:2a:f3:40:1c:d2:3e:19:91:24:b4:1b:1d:92:22:
16:fe:16:33:a7:b5:78:0a:ec:61:80:46:ab:01:6b:
67:83:e5:6b:81:97:36:ad:c3:7b:31:0e:36:80:da:
83:bc:c2:81:22:1a:6f:48:b4:ec:d5:f3:31:77:7a:
fa:49:8f:58:2c:de:71:ad:88:4a:a3:55:85:ec:3e:
e8:3c:8b:d5:33:a3:0d:ff:5d:f9:7b:81:06:ed:ce:
5a:73:57:14:40:93:72:01:b2:ef:c3:2a:c1:cf:2e:
20:2b:04:0a:b7:1c:17:40:f3:0a:ac:7e:3d:79:83:
53:64:5b:72:01:7c:a1:fb:dd:14:af:18:97:87:9b:
a5:7c:54:9e:05:5c:81:de:e4:97:1c:50:28:ae:9f:
59:b7:a5:8f:47:8c:07:c5:be:2a:a1:99:cd:8f:98:
c4:a4:46:fe:32:57:9a:98:f6:9e:a5:bc:55:e5:cd:
d0:6b:46:af:55:14:73:ad:d6:d9:d1:59:68:12:0b:
db:35:f6:4f:1e:f2:f5:2f:aa:7c:78:63:1d:74:8b:
20:f6:e5:31:c6:38:0d:4f:2a:6f:f5:8f:0b:e0:82:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:3F:05:D8:65:37:50:F1:21:13:21:D5:1C:46:DC:C4:08:29:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IP0_BdhlN1DxIRMh1RxG3MQIKdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:5a:98:ca:69:24:04:2e:59:05:3c:22:8d:3e:e0:0e:a5:4c:
a3:44:42:fe:e4:37:aa:b7:3c:31:49:88:fc:ad:47:97:c1:9a:
55:3f:b3:6c:a4:01:b6:bf:59:11:a6:fd:7d:ab:b4:cf:45:98:
a3:0b:35:0f:13:97:6b:f4:f8:bb:a3:43:1b:9f:ca:8a:0f:27:
3a:53:fb:14:a3:5b:a3:2f:91:79:ed:fe:c0:1c:9d:6d:9e:e0:
d4:e0:b0:4d:52:70:45:b2:c2:a3:18:ca:b8:18:e2:66:a6:f2:
50:55:06:6f:d2:3e:cb:16:11:d7:c2:3d:d4:24:f1:19:a1:3e:
39:1b:fa:62:55:73:37:db:93:ab:a0:7d:4e:88:a4:db:ac:c0:
dd:b3:a7:73:9f:e1:02:9b:b1:05:fd:fa:56:a0:54:7e:8a:92:
b8:07:6e:eb:95:9e:5b:1f:75:fc:77:6b:ca:d0:cd:13:eb:97:
bd:c4:87:1e:78:5d:ff:5c:cc:5f:33:be:b1:9d:ef:ed:55:72:
b8:cf:f3:34:51:be:cd:21:f5:87:51:a9:5c:db:db:d4:33:48:
e1:9a:41:38:8c:08:0f:ba:91:2d:ed:c4:c6:64:92:c6:7b:95:
26:2b:c0:b7:f1:f2:a1:62:2f:ba:d4:56:d6:06:17:b5:2d:95:
2f:25:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:53 2025 by rpki-client