Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RmB58WyDNBWKDhL2FCa6GOwCn4M.roa
File: RmB58WyDNBWKDhL2FCa6GOwCn4M.roa (raw, json)
Hash identifier: ubO/lalSJMjdr+dSmnur3XHI56TO29kMUHyXpo9Oqpk=
Subject key identifier: 46:60:79:F1:6C:83:34:15:8A:0E:12:F6:14:26:BA:18:EC:02:9F:83
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8D54199BA4EC983D9589E5000899302A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RmB58WyDNBWKDhL2FCa6GOwCn4M.roa
Signing time: Fri 09 Feb 2024 10:05:15 +0000
ROA not before: Fri 09 Feb 2024 10:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:8d53:425d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:54:19:9b:a4:ec:98:3d:95:89:e5:00:08:99:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 10:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=466079f16c8334158a0e12f61426ba18ec029f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:a2:06:64:48:8d:c5:61:41:6e:5a:16:a0:
f6:30:f9:8c:37:75:37:d1:2f:76:bf:da:6e:39:97:
a0:81:b8:a3:d6:93:b8:51:a9:5d:51:ec:a5:95:cb:
8b:2b:46:ad:6b:f9:38:a6:4b:4a:f0:85:2e:1e:97:
2b:45:05:d2:1c:78:b8:1c:0d:4b:9d:9f:cc:9d:b4:
bb:75:03:09:4c:70:80:ce:14:14:92:4f:58:b6:30:
78:e0:35:f7:d7:65:ff:22:8f:7a:c3:da:b8:4e:2f:
60:58:60:68:5e:fb:80:4e:59:bd:eb:df:11:26:cd:
f1:f2:dc:e1:1f:49:59:42:4d:b1:8e:4d:94:da:56:
14:4d:01:61:6c:52:63:b5:74:34:30:83:71:dd:c8:
fd:fb:fe:b7:d8:85:71:0e:d5:90:cc:3c:81:0e:93:
05:e2:1c:16:c2:b7:71:2c:45:0d:40:92:9c:34:90:
a5:67:5a:fa:09:59:0a:3d:b7:8c:8d:a8:c8:ca:b6:
e5:1a:c9:85:5c:36:f4:f2:49:26:40:a9:a1:6f:80:
9a:9b:68:23:e1:8d:33:0b:84:94:72:b6:67:12:aa:
ee:30:bf:53:55:3e:84:a3:e4:c6:d5:db:5f:ea:00:
fd:6c:82:f1:ce:fe:d1:92:29:e3:5a:7b:52:ad:ba:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:79:F1:6C:83:34:15:8A:0E:12:F6:14:26:BA:18:EC:02:9F:83
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RmB58WyDNBWKDhL2FCa6GOwCn4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ce:6f:9b:0f:a8:18:d2:74:60:96:24:bf:91:bb:81:29:8b:
52:48:14:ea:ea:5d:62:d6:99:89:e3:cb:7a:47:35:80:27:40:
c5:54:bf:31:20:5e:e8:cd:9e:f8:86:74:50:96:8f:9d:88:98:
4c:13:51:5b:2b:61:1f:b2:69:3f:ef:1f:ab:99:32:6a:a4:f7:
1c:55:3c:07:03:57:bc:66:dc:26:bc:3a:fb:63:ee:fe:86:13:
30:30:9c:e0:ea:71:1a:12:44:1f:ff:69:ca:b3:d4:f0:0a:c9:
f7:82:3e:7d:89:c5:46:67:4d:a1:75:f6:e9:db:6f:b2:ff:92:
07:85:b7:2f:c6:55:11:c3:05:68:c2:da:ff:8c:8c:1d:b5:cc:
54:a6:08:fa:a0:6d:9b:14:40:d8:94:6e:b1:92:6c:0e:75:55:
10:53:83:08:77:e2:10:c2:a4:05:de:7b:2f:a5:83:6a:eb:df:
85:27:69:6d:ec:2e:fa:9e:5c:de:a1:94:a4:ac:0a:39:47:78:
4e:9d:73:a3:52:ca:2c:bb:31:84:02:f6:6d:ce:e8:07:bf:fe:
6e:a1:58:89:00:ce:f6:88:3f:9f:79:fe:79:61:ed:eb:0e:c4:
fc:04:f7:23:ee:f5:5a:a5:73:3e:55:0b:15:ae:8e:60:2a:3c:
0e:62:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:46 2025 by rpki-client