Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J0xD1WGZBvqh5GhHVxuZGpJHbEU.roa
File: J0xD1WGZBvqh5GhHVxuZGpJHbEU.roa (raw, json)
Hash identifier: 7M9ACJWgSA9FchcljY2zR9MbfQ9Y6CecCk5tTCHJjDA=
Subject key identifier: 27:4C:43:D5:61:99:06:FA:A1:E4:68:47:57:1B:99:1A:92:47:6C:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB3589D336E471B046F46230EC8FD38D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J0xD1WGZBvqh5GhHVxuZGpJHbEU.roa
Signing time: Fri 29 Dec 2023 02:12:58 +0000
ROA not before: Fri 29 Dec 2023 02:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:58:9d:33:6e:47:1b:04:6f:46:23:0e:c8:fd:38:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 02:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=274c43d5619906faa1e46847571b991a92476c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:9d:33:dd:a0:40:c5:84:bf:48:58:00:71:
a9:c5:4a:a2:42:ec:45:ac:3b:cb:8e:49:b8:7a:f9:
60:2b:82:1a:80:03:9a:49:f9:10:68:a8:90:fc:32:
a0:ef:fe:08:23:5b:5a:7c:52:98:b1:6f:8c:97:66:
7c:44:d4:93:f2:06:a5:1e:88:18:9c:be:9d:7e:0a:
75:bd:f8:09:9d:f6:c6:c4:9f:4e:50:5c:4d:50:e8:
83:27:ff:0d:1f:fb:68:85:a3:cb:e6:17:7d:97:f6:
26:6e:1a:2d:7a:ce:81:a6:99:eb:9d:46:ae:06:6a:
8b:b2:7f:5b:c7:bc:5b:02:da:5a:9f:58:30:46:9f:
36:c9:7a:bb:81:0f:b9:6c:9f:3c:39:51:0a:29:4f:
fd:48:33:80:ef:fd:8d:ae:31:3b:dc:ae:cc:d8:7e:
74:50:99:88:6c:8f:08:57:82:ea:a7:de:e9:00:91:
69:88:8c:ae:70:92:86:9c:09:41:d6:ea:8e:88:2a:
ee:2a:dc:61:59:4f:15:77:16:ff:1c:dd:c9:97:4d:
8a:a0:88:55:31:55:3c:3b:d4:a5:4d:a5:df:3b:6e:
b6:c8:1b:16:df:c0:ca:75:c4:5d:ac:62:ac:9f:f8:
87:98:71:df:b8:81:f7:5c:c9:ab:b2:b7:d1:d3:ac:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:43:D5:61:99:06:FA:A1:E4:68:47:57:1B:99:1A:92:47:6C:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J0xD1WGZBvqh5GhHVxuZGpJHbEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:53:a9:99:82:86:85:cc:b7:71:14:96:41:72:91:3d:9b:9a:
fd:14:31:8f:4b:60:07:79:d5:90:11:91:7e:b4:3c:4b:e1:27:
d9:47:f2:f5:41:f5:0a:f2:b9:6e:b2:23:8d:4f:9c:71:1e:46:
72:c1:0b:f6:fe:8d:79:1e:04:e1:d8:90:24:f4:63:06:b1:fa:
44:fc:10:d6:7b:ce:5f:f0:8f:0e:2f:ff:2a:99:a8:0c:e2:36:
94:2c:de:29:d6:1f:11:e3:33:82:52:ca:a1:55:75:fd:db:ee:
c3:33:c2:39:6c:c3:b8:a2:9e:a6:00:16:07:aa:03:77:a4:49:
63:ec:68:e7:34:48:04:85:36:22:cd:49:f5:f6:8f:a1:50:b4:
dd:1e:5b:4f:dd:25:73:f0:3c:c1:a4:36:9e:36:4f:3b:e6:17:
9b:e2:06:1c:45:49:31:d5:7b:51:0e:57:d9:e7:1f:07:d7:c9:
13:4e:9d:f7:d3:52:a5:5a:e2:91:9c:86:cb:da:12:06:e9:d0:
84:3c:24:a8:1f:c2:04:c5:54:d4:37:ea:9a:64:33:bf:bd:41:
b0:55:e0:f1:38:23:40:77:b3:14:dd:6d:52:8e:57:db:0f:3e:
9b:53:c4:68:61:85:68:7a:1f:9c:bb:f2:2d:99:cf:c8:3f:2b:
9a:98:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:14 2025 by rpki-client