Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rzk32z6CwxIQqzpIlaZH-NVJhZU.roa
File: Rzk32z6CwxIQqzpIlaZH-NVJhZU.roa (raw, json)
Hash identifier: FKxVM+ZiKLABlGAKoJzK+Amad3F7roSqbujlJbpn47I=
Subject key identifier: 47:39:37:DB:3E:82:C3:12:10:AB:3A:48:95:A6:47:F8:D5:49:85:95
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4F196067107ED935EC6C9072D8DF5F4E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rzk32z6CwxIQqzpIlaZH-NVJhZU.roa
Signing time: Sun 28 Jan 2024 08:04:39 +0000
ROA not before: Sun 28 Jan 2024 08:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:4f18:e614/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:19:60:67:10:7e:d9:35:ec:6c:90:72:d8:df:5f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 08:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=473937db3e82c31210ab3a4895a647f8d5498595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:22:51:a0:d5:5e:20:c8:dc:2a:73:17:b0:
7c:ec:48:8f:25:d9:de:f0:a6:a2:7a:cb:8a:f0:bb:
c7:a2:ba:b0:41:94:70:7e:f1:32:13:e1:2a:26:8d:
a5:01:f7:4a:c9:b1:e0:e4:04:92:5c:6e:bd:48:c2:
ea:fe:af:cf:fa:f0:0d:52:2c:1b:7f:fc:c3:f0:bb:
e0:b1:87:cb:f4:5c:37:52:f7:69:2b:ed:1f:12:52:
8a:76:5d:ae:ad:84:84:16:3d:58:99:9c:34:34:2d:
a8:12:d7:77:9a:9f:17:95:f5:25:ee:80:21:8f:7a:
e2:10:39:56:af:41:44:e0:36:2d:44:18:ce:af:50:
17:dd:de:3a:a1:be:35:f4:8b:8a:13:47:1a:6a:6a:
20:e2:9e:ba:2c:43:5b:9a:5f:5b:ed:aa:c5:91:28:
da:e2:dc:d7:0e:32:3e:00:2a:7d:69:9e:46:53:44:
25:f3:03:d6:68:c3:0e:77:22:f2:56:e8:ac:c5:71:
65:90:72:81:0d:a5:c6:36:06:ea:9c:2c:58:b0:a6:
3c:cb:c5:db:e6:38:87:a0:f4:3c:c7:f5:0f:4d:f7:
63:51:fd:69:20:53:63:64:04:bb:d4:06:85:e5:49:
f1:ef:d4:93:65:9a:20:ec:b0:c3:cf:56:f6:ec:e5:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:37:DB:3E:82:C3:12:10:AB:3A:48:95:A6:47:F8:D5:49:85:95
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rzk32z6CwxIQqzpIlaZH-NVJhZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:a8:4a:3a:e4:69:67:42:0e:68:83:19:d1:17:5d:ab:b2:81:
70:70:60:47:b9:f8:7c:39:89:24:ed:58:b5:99:f6:0a:33:9b:
35:5b:73:95:66:b5:b1:5d:c7:0f:25:51:d0:61:42:94:7c:bd:
7b:40:45:2a:09:8e:b4:0c:50:5e:d9:47:7f:30:a0:da:15:36:
80:05:43:f9:91:cd:25:81:11:98:85:73:f0:bb:9f:e7:64:28:
a6:ab:2c:2a:4f:fc:d3:45:f0:f0:e1:19:0a:03:45:6b:45:ee:
75:b1:d6:35:70:25:3a:1f:45:31:f2:4b:5d:88:df:44:b1:6f:
dc:af:9d:7f:4d:16:82:57:21:bc:ab:ef:da:47:fe:81:76:b0:
34:37:b5:8e:3f:62:eb:87:20:47:2b:a3:f4:2b:a6:37:40:a6:
dc:0f:b1:37:a5:52:cc:f2:37:3d:9c:a8:a6:e7:c9:68:71:70:
36:e5:37:cc:ca:17:04:44:fe:25:f7:69:65:c4:8d:cd:6b:ac:
1d:c9:17:96:22:72:cc:9b:c9:4a:49:c6:14:05:06:92:ba:69:
1d:cc:a1:e6:0e:10:ba:4c:6b:16:dd:41:67:fb:ea:5b:86:e8:
22:0a:b2:7b:4c:c0:76:3c:26:fa:e2:c9:4a:c6:0f:a5:4d:05:
59:04:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:41 2025 by rpki-client