Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L13Fpw5Hxa3NBTeqsIGZPNBYJno.roa
File: L13Fpw5Hxa3NBTeqsIGZPNBYJno.roa (raw, json)
Hash identifier: g6Kt8ZciDax1A09T4zh4KE6XPNBWIOy7DeGSyBE84bk=
Subject key identifier: 2F:5D:C5:A7:0E:47:C5:AD:CD:05:37:AA:B0:81:99:3C:D0:58:26:7A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8D8D828D3A852D23598E97BECCE778D3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L13Fpw5Hxa3NBTeqsIGZPNBYJno.roa
Signing time: Sat 30 Mar 2024 04:10:45 +0000
ROA not before: Sat 30 Mar 2024 04:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8d:8d:82:8d:3a:85:2d:23:59:8e:97:be:cc:e7:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 04:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5dc5a70e47c5adcd0537aab081993cd058267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:d5:a1:12:7e:07:6e:70:00:9a:22:d2:77:
ee:d2:de:32:68:0b:69:ce:43:cf:fa:2a:50:18:a8:
ff:3b:57:54:08:95:1e:64:88:06:7f:b4:e7:50:95:
01:82:87:89:74:4b:1d:bf:91:f3:92:c8:44:79:01:
cf:b1:96:d5:9a:f8:40:40:0d:33:0c:63:af:45:ff:
31:6f:25:42:5b:e9:27:b5:84:a9:00:13:b3:26:7e:
75:04:b9:c1:c8:db:55:5b:8c:ce:9c:0c:6b:e2:8a:
1c:98:05:c5:80:69:e1:0d:e6:a3:72:3a:4c:2d:55:
d7:bb:f6:a8:f6:86:3d:6b:5f:8e:66:b9:f8:0c:73:
d9:0c:d4:ac:a4:c9:fe:a5:21:b1:4f:c7:36:62:64:
4d:e8:7d:9f:42:71:95:27:f2:79:2e:67:01:52:6a:
79:79:39:a4:3a:4b:87:8f:7e:ad:2a:b1:57:12:b9:
70:88:cf:83:04:a9:ac:8a:2d:32:29:97:c0:1a:09:
c8:c6:8b:05:b3:37:84:9b:0e:8d:c5:45:f2:10:96:
0e:80:ed:16:f8:1f:d7:48:41:f5:75:45:b2:bc:cb:
83:02:fb:09:6a:0f:0a:de:a9:89:f5:ab:be:9d:0f:
4e:56:09:ef:fc:ff:59:43:4d:df:82:4c:53:d1:42:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:C5:A7:0E:47:C5:AD:CD:05:37:AA:B0:81:99:3C:D0:58:26:7A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L13Fpw5Hxa3NBTeqsIGZPNBYJno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:04:ea:50:94:f2:c3:1e:4a:e5:24:2f:c3:85:a7:ba:ee:d7:
82:8e:d7:32:ff:31:ac:c2:b5:47:c3:cd:26:c1:35:fe:07:10:
1d:58:1f:35:1a:3a:0d:99:5d:c1:65:02:24:dd:ff:bc:d1:aa:
65:6a:f8:32:72:17:cc:69:cb:3e:4c:18:84:7a:88:f1:91:15:
2c:34:fd:66:0a:c4:10:7d:c0:4e:e0:03:6e:01:0c:9e:43:1e:
09:83:f4:3a:3b:f5:99:75:28:9a:7e:93:e6:18:5a:cd:36:78:
66:d2:58:7b:59:39:1f:cd:f2:c3:f8:37:2e:d7:57:50:53:67:
08:36:fc:7a:9e:1d:2f:45:a0:12:ec:bf:d4:0e:d2:49:ac:79:
0c:10:88:c5:61:96:a3:1f:6a:00:30:b6:de:06:a7:b6:b9:df:
16:89:33:34:dd:63:af:10:dd:f2:04:f8:ab:83:08:1e:79:46:
33:69:bf:fe:b4:a3:5c:c1:89:06:d0:0a:3f:45:38:3d:3c:f4:
45:4f:d0:96:e7:a7:ce:55:ab:7c:fa:f4:80:0d:be:20:04:45:
d8:8a:32:98:eb:cc:d5:73:26:3d:f1:9f:4a:49:44:b8:91:e2:
79:2f:41:65:7e:86:38:37:f0:9f:49:4c:5c:ea:35:ee:77:55:
59:0c:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:47:16 2025 by rpki-client