Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RW6yVEMrCCtvo6ZZkZP4YGSdaiQ.roa
File: RW6yVEMrCCtvo6ZZkZP4YGSdaiQ.roa (raw, json)
Hash identifier: nrVtN0iQY1Vp9m+R22MITQQhPPY+k6eScsFUovxqiq8=
Subject key identifier: 45:6E:B2:54:43:2B:08:2B:6F:A3:A6:59:91:93:F8:60:64:9D:6A:24
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEEC77F537BD6B12440D155ECEEC87EEF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RW6yVEMrCCtvo6ZZkZP4YGSdaiQ.roa
Signing time: Tue 09 Jan 2024 15:11:40 +0000
ROA not before: Tue 09 Jan 2024 15:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:c7:7f:53:7b:d6:b1:24:40:d1:55:ec:ee:c8:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 15:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=456eb254432b082b6fa3a6599193f860649d6a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:ba:ff:ff:fd:fa:53:2c:03:d9:be:4f:44:
7d:33:88:4c:c6:63:7a:d9:e9:81:2b:0e:3c:99:64:
b0:09:03:f7:44:8a:f7:80:ac:6b:1e:0e:90:6a:92:
09:2e:14:a3:2b:ca:3b:4e:f2:7e:05:32:d9:34:cc:
eb:fe:c9:16:76:1d:98:62:10:5b:f7:a2:32:d4:7e:
11:90:4b:37:ea:d0:07:ed:ba:61:f3:f2:f0:0f:1c:
e5:af:6f:f0:69:05:a6:ec:59:a2:d5:71:c6:ee:8a:
58:a9:d3:1e:4e:76:c7:82:bf:43:4c:92:8a:dd:0a:
e1:b6:1c:46:f7:9e:97:01:de:8f:04:de:80:a7:a9:
4f:b0:ff:16:8f:53:f7:79:11:e5:1d:c5:7e:2e:fd:
35:c4:b5:cd:af:b2:4a:12:08:c9:25:2a:89:04:7e:
52:91:53:ea:8f:eb:28:67:75:73:42:7c:3f:cf:a0:
a1:5f:1c:c7:84:8f:b5:8b:f8:a8:bc:3e:45:e0:c8:
a2:41:2b:f8:5a:b0:52:a8:c0:19:ab:21:81:49:77:
4a:3a:6d:89:61:2e:bd:34:11:0c:1d:b2:9d:7b:1e:
60:d3:79:cd:7e:a5:26:32:39:31:dd:73:3e:e8:aa:
b4:d2:3e:83:fb:9e:3d:18:00:b3:20:b1:9b:46:fe:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:B2:54:43:2B:08:2B:6F:A3:A6:59:91:93:F8:60:64:9D:6A:24
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RW6yVEMrCCtvo6ZZkZP4YGSdaiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:08:85:18:01:dd:0b:21:32:b5:a4:08:6f:84:17:38:58:98:
0b:93:aa:38:a6:a1:01:d1:79:70:ed:6d:71:87:66:cd:18:31:
6f:4e:50:ee:3f:48:57:c6:29:ee:ad:aa:61:5b:a8:4e:7d:96:
18:ed:cb:a1:e6:c1:51:26:b1:83:0a:4d:b9:7e:8d:e2:6d:b4:
5e:e6:5a:4a:b4:9d:ba:d3:9c:23:e9:cc:9f:1b:7b:4d:26:0a:
23:fc:fe:68:25:8d:03:a4:04:f1:3d:21:63:ee:98:de:d8:1a:
ca:0a:95:71:d6:39:fc:0a:70:ab:0c:07:0d:8c:5a:e9:41:3d:
fe:01:36:01:bb:49:32:21:00:d2:47:9a:06:05:df:12:cf:7a:
f2:7c:2b:8f:53:1c:ab:f5:1c:51:8e:0b:b1:06:8d:ec:f5:29:
d2:31:b6:a6:3d:1d:81:ac:8f:df:11:f3:c9:f8:54:9e:8b:f7:
d4:97:0e:50:8e:8d:bc:5c:1e:e5:d2:81:99:3b:32:01:bf:62:
6f:d8:1f:7a:2a:26:11:df:f0:f7:e8:e0:2b:6d:24:ae:82:25:
84:f6:78:b7:8a:60:60:20:dc:c4:9f:24:39:48:6a:3d:c4:6d:
87:2a:72:dc:bd:38:f7:6a:ac:f3:36:b6:5d:41:a2:4c:b5:f2:
c4:b1:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:29 2025 by rpki-client