Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KnL8r1Jq10YqKtpnqpSZ66a66WE.roa
File: KnL8r1Jq10YqKtpnqpSZ66a66WE.roa (raw, json)
Hash identifier: JMw6rV8j5yN1KjP8vlV8H3WW/b60lJ1pcWWYi3H16gg=
Subject key identifier: 2A:72:FC:AF:52:6A:D7:46:2A:2A:DA:67:AA:94:99:EB:A6:BA:E9:61
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9F9F1F62AFD41030E8E9517CAB66F7AD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KnL8r1Jq10YqKtpnqpSZ66a66WE.roa
Signing time: Mon 12 Feb 2024 23:20:21 +0000
ROA not before: Mon 12 Feb 2024 23:20:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9f:9f:1f:62:af:d4:10:30:e8:e9:51:7c:ab:66:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 23:20:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a72fcaf526ad7462a2ada67aa9499eba6bae961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:cf:6d:07:aa:1c:52:c9:3a:c5:79:15:4a:
ab:8a:97:d7:83:de:b3:11:f7:f2:4f:7c:a2:f2:47:
ff:a0:be:43:b9:e3:b1:89:59:df:d0:8c:be:8c:a5:
01:09:05:fb:26:41:0d:e9:42:54:45:50:e0:8f:88:
18:a2:77:2a:e8:74:46:bd:fa:26:27:ca:4e:a4:df:
56:b2:2c:a2:19:b2:ed:84:f3:e4:fe:4d:f9:ac:76:
3b:61:03:a9:46:58:fe:d8:45:67:c6:d6:38:23:5c:
ca:10:86:1b:74:62:d0:1f:5a:10:b2:10:fa:d5:94:
f8:85:a5:fd:f7:c1:11:fa:42:d9:b7:1b:14:03:58:
31:2d:62:31:83:2a:3f:2a:c0:02:aa:65:18:8a:f4:
43:15:f7:4a:31:aa:e0:e1:31:51:ae:71:ca:53:42:
05:f8:be:3b:ce:52:5c:68:8d:5f:25:15:fd:a1:07:
9a:0d:5b:b3:71:6d:e9:0d:90:98:fa:1a:d3:f6:6c:
48:4b:d2:33:f9:4f:17:07:a2:3e:78:ff:11:3b:b2:
41:a4:8b:2c:b7:b1:70:c0:65:ec:ff:2b:b7:26:ce:
b6:42:d6:ed:c2:69:e6:15:93:1b:29:97:a6:83:96:
22:7d:7c:f3:b2:a8:d1:38:65:94:a3:e0:a6:e9:19:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:FC:AF:52:6A:D7:46:2A:2A:DA:67:AA:94:99:EB:A6:BA:E9:61
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KnL8r1Jq10YqKtpnqpSZ66a66WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:86:b2:1f:1e:ad:2a:21:a2:d9:51:5f:89:4c:8d:06:5d:b5:
1a:b8:13:aa:58:c8:4f:f2:1d:16:f4:94:b2:2e:65:42:4c:6e:
7a:d1:6a:9d:66:7d:67:c9:44:e6:06:c1:39:36:18:d6:07:b6:
ba:1d:f8:92:73:1e:00:6c:ed:20:7c:19:16:a8:57:53:2e:58:
95:52:7f:c9:7e:8a:85:56:f3:30:5e:65:af:85:08:2b:86:d4:
9c:7c:a6:d9:03:9c:8c:47:e1:39:16:d8:af:db:cc:92:77:ae:
04:b1:f0:53:51:49:2e:8b:cd:dc:5f:82:bd:dd:a4:ef:cf:f5:
c6:f9:80:b3:8e:b0:b1:d3:14:9c:39:a6:d4:48:58:34:86:f2:
be:d7:34:8a:af:18:c7:23:b6:af:18:a2:2f:5c:c0:3d:84:65:
94:ac:bc:fb:51:12:51:f5:8e:ce:01:96:fa:b6:37:bb:53:7d:
2e:95:3e:ec:05:e6:34:11:9e:0d:25:b0:9c:1d:f3:ae:6c:fc:
68:14:f6:31:41:bb:1e:d3:79:27:0e:47:14:ad:22:6a:3b:24:
5a:1a:6f:ca:a6:ba:28:29:75:ab:ed:a8:56:d7:19:ac:01:a1:
5a:77:88:89:6d:24:fa:6e:b0:98:69:44:a8:20:18:c3:5e:1d:
6b:22:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:46 2025 by rpki-client