Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RKRs-zdpH2DRtWkGq4vZjERbzbI.roa
File: RKRs-zdpH2DRtWkGq4vZjERbzbI.roa (raw, json)
Hash identifier: yzrjDUtf7G76RnFSK5rzhMHA/PwUol8Fm3N231Mt1nM=
Subject key identifier: 44:A4:6C:FB:37:69:1F:60:D1:B5:69:06:AB:8B:D9:8C:44:5B:CD:B2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D94D6B4C2BBDF333478D7ED90FDA4BF4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RKRs-zdpH2DRtWkGq4vZjERbzbI.roa
Signing time: Sat 10 Feb 2024 21:05:15 +0000
ROA not before: Sat 10 Feb 2024 21:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:94d5:c9aa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:d6:b4:c2:bb:df:33:34:78:d7:ed:90:fd:a4:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 21:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a46cfb37691f60d1b56906ab8bd98c445bcdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:e2:24:da:da:99:85:34:15:e6:93:0f:ac:
19:cd:3c:77:b5:98:92:54:e3:f5:24:6b:4c:d1:77:
7b:8a:70:2f:3f:70:65:ff:81:bc:88:59:bc:c6:d1:
fc:74:a6:6a:25:47:4b:27:1a:20:fa:bb:a5:d5:0f:
70:89:59:db:4a:fa:91:1b:a2:ab:01:7a:0b:8b:4f:
58:28:e3:42:15:b0:d4:85:6e:21:32:68:96:a6:9e:
37:9a:13:08:81:18:42:ea:95:d1:2b:17:f0:5e:b4:
97:2e:73:51:73:9d:0b:28:53:e5:6c:9a:90:93:7b:
5a:68:d1:a6:02:ea:f6:fc:d8:ec:81:10:fa:3d:11:
7b:a9:c2:08:f2:cf:14:bd:ec:5f:9d:cd:e6:d0:1d:
46:46:51:a1:cf:64:54:92:d2:6a:97:b6:21:72:d3:
aa:f5:44:af:41:8c:ea:74:09:10:c0:1b:86:b0:fe:
f0:f7:3b:27:80:da:11:74:70:27:5f:9c:5d:c7:0e:
58:3a:da:21:6f:b6:c7:33:de:7b:db:04:d1:7f:5f:
ef:c9:45:24:2a:fe:9a:8d:8f:e3:18:54:ed:12:2f:
71:35:1b:90:c4:66:b2:9c:55:fc:ef:91:94:53:8b:
c9:78:92:29:e3:53:4c:4e:15:f8:3f:cf:2c:01:d7:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:6C:FB:37:69:1F:60:D1:B5:69:06:AB:8B:D9:8C:44:5B:CD:B2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RKRs-zdpH2DRtWkGq4vZjERbzbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:1f:79:4b:ba:32:b5:1e:82:d8:d5:71:4d:d4:a3:6c:c0:59:
de:57:36:7e:7c:27:71:3f:cf:b8:d7:76:34:a5:9c:35:23:96:
9a:81:41:1a:23:97:03:67:59:22:a9:cb:01:22:8f:ac:56:75:
7a:5f:d8:9c:ec:72:bf:54:b3:ca:7e:8c:30:73:6e:5a:ff:b8:
6b:db:c7:d2:0e:5a:17:ce:c5:cc:79:03:48:c1:88:6e:b6:7e:
8e:c0:e8:b4:6f:d2:08:d1:6d:3f:6a:51:32:e0:4c:65:9c:b3:
97:f9:ee:30:70:ea:75:97:b4:07:1c:1e:f4:ce:fe:fe:c6:bc:
f0:7b:b8:cf:6a:4a:f1:4e:f1:db:de:71:2f:5e:b9:35:17:79:
bb:67:d0:7f:24:6e:e5:c9:bd:2d:e1:39:6a:97:a4:cd:8b:27:
3a:b1:ce:3a:cf:26:51:b5:3c:4b:bc:ca:00:0b:4b:69:0a:bb:
4d:e8:63:03:cd:8e:3f:61:49:dd:24:28:7e:9e:dc:a2:d4:99:
76:f8:c6:a5:82:d5:c2:51:a4:6d:5e:a3:9e:95:b0:2c:7c:83:
f3:12:d3:9c:89:2e:b9:99:40:06:22:27:6c:f1:3a:27:d8:52:
0e:4e:5a:9a:2d:ae:c8:0d:24:fa:f5:00:ae:6b:9e:06:fa:4a:
b9:0a:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:52 2025 by rpki-client