Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LUy7HDG1VfNE95YzqYy2GkJI4cc.roa
File: LUy7HDG1VfNE95YzqYy2GkJI4cc.roa (raw, json)
Hash identifier: NZ+5vlc6bDtElHD6UK1K59gwP7ARVh7E9F1Sbacy/8Q=
Subject key identifier: 2D:4C:BB:1C:31:B5:55:F3:44:F7:96:33:A9:8C:B6:1A:42:48:E1:C7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D747932C485A268C177B5AA82E46C4982
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LUy7HDG1VfNE95YzqYy2GkJI4cc.roa
Signing time: Sun 04 Feb 2024 14:15:16 +0000
ROA not before: Sun 04 Feb 2024 14:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:74:79:32:c4:85:a2:68:c1:77:b5:aa:82:e4:6c:49:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 14:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d4cbb1c31b555f344f79633a98cb61a4248e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:2c:c1:23:f6:6a:4e:e6:6d:e2:31:e1:20:
1a:ee:00:76:c1:74:73:fc:37:25:ff:30:60:5a:65:
52:40:94:48:21:05:32:b3:8b:26:db:d1:99:d9:77:
48:34:8e:20:0c:c8:02:36:a2:fc:3f:ff:81:ed:cd:
09:8c:4c:5c:b8:3c:95:73:51:52:31:11:4f:8e:d0:
86:7e:7f:d3:58:c0:2b:ed:92:b9:e4:97:85:43:2e:
ec:82:e9:19:7c:2a:9e:04:31:a7:59:56:cb:8f:b7:
ae:97:6f:48:c3:9d:3a:6b:69:76:9a:45:08:5e:b0:
99:f7:05:74:8e:d7:12:cf:f0:48:ca:c6:71:15:47:
70:1c:e6:b2:b1:c3:6e:78:25:03:7f:d3:c5:9d:38:
df:ef:20:f5:3a:11:39:1a:dd:50:25:d1:90:0a:70:
ac:2d:e1:c2:a3:99:e5:a9:1b:c2:be:23:e8:9c:29:
21:71:84:68:6d:90:62:35:62:78:b8:7c:55:8d:3b:
e9:14:d0:07:d7:45:5e:d6:22:7d:4d:e8:14:81:48:
c7:0a:71:7c:58:db:ec:b5:a5:02:0a:44:d9:06:b7:
25:de:02:bc:80:01:a6:e8:23:41:16:d1:51:64:72:
a9:a4:19:aa:93:e7:11:25:fc:4c:dd:8b:b9:36:59:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:BB:1C:31:B5:55:F3:44:F7:96:33:A9:8C:B6:1A:42:48:E1:C7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LUy7HDG1VfNE95YzqYy2GkJI4cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:9c:46:71:f7:49:02:26:30:b8:c3:ab:5a:17:4d:40:17:46:
d4:0c:d1:c6:99:c8:3a:47:61:7e:f9:c6:82:25:a2:df:aa:fb:
47:8f:7c:ea:9e:14:df:5d:30:c7:51:5e:c1:02:a6:78:b4:c7:
0a:8e:b0:8f:b3:ee:01:cd:21:7c:9e:44:07:17:90:f9:2e:db:
e5:a9:e7:df:1d:4e:16:e7:4e:41:2d:08:30:1e:37:eb:88:72:
8d:7f:12:0c:58:32:a6:ef:79:9e:25:d3:26:64:45:8b:f1:78:
5a:39:ce:4f:d2:4e:70:d1:3f:f5:8c:54:bb:9b:83:7e:fc:3c:
4b:18:d2:3c:0b:4e:d4:97:3e:18:69:00:19:b7:5a:25:ec:4c:
9d:10:81:d1:4d:71:c4:79:81:b3:5f:72:9c:f7:eb:c2:53:29:
a4:e5:61:4f:0d:f5:8e:94:c8:1f:f1:f9:0d:0e:bd:20:24:e4:
2b:88:30:ed:f9:62:08:12:3c:42:51:e0:31:7c:cd:2d:e0:f0:
50:f0:18:ff:99:3d:ce:1a:69:1e:76:b6:0b:af:5d:fc:6f:ec:
1c:0e:c3:5d:7f:c9:53:d3:d5:42:d3:3d:1d:d8:3f:4a:76:20:
db:b8:24:3d:da:12:35:ab:df:1a:90:d0:5c:99:15:9d:16:fd:
9e:da:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:39 2025 by rpki-client