Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S-8KRCAFyFhxd47_V-_TaIBBr9s.roa
File: S-8KRCAFyFhxd47_V-_TaIBBr9s.roa (raw, json)
Hash identifier: +HAZEqbAtoH61uIW0yaIye092LSvF9/MQEBo9/Lyd2M=
Subject key identifier: 4B:EF:0A:44:20:05:C8:58:71:77:8E:FF:57:EF:D3:68:80:41:AF:DB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7D08B1B352C696E8A5526A13EB14B2F2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S-8KRCAFyFhxd47_V-_TaIBBr9s.roa
Signing time: Tue 26 Mar 2024 23:11:45 +0000
ROA not before: Tue 26 Mar 2024 23:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7d:08:b1:b3:52:c6:96:e8:a5:52:6a:13:eb:14:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 23:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bef0a442005c85871778eff57efd3688041afdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:20:a2:cb:4e:f3:45:ff:6b:ee:14:0d:4e:
fb:c6:f7:e3:68:c1:3e:1c:e0:6a:6d:3d:9a:76:e4:
7a:e6:4f:69:6d:e4:2e:44:03:1a:59:38:11:3c:6c:
4c:7a:b0:61:21:d0:2c:0c:56:29:47:67:cf:04:6f:
ba:fa:69:15:d5:b3:b1:4e:54:3b:50:e3:3d:38:37:
f1:3b:15:83:1c:63:48:f3:40:8b:63:d2:96:e2:ef:
67:ad:fe:7e:87:54:59:ec:32:c4:76:f2:1d:e8:d7:
44:1c:20:be:f0:12:5b:88:93:d3:7e:49:36:f3:6e:
1a:b9:6e:fa:48:8c:1e:9a:21:9d:6f:ce:5b:93:cc:
63:d7:07:a2:a4:6b:d3:e0:14:59:4e:e8:44:75:0f:
4b:4d:35:37:81:34:43:8f:bb:88:36:26:b7:af:a0:
8b:2b:57:d0:e4:db:6e:23:cb:5c:d3:d8:81:fb:85:
6c:43:01:29:56:ca:99:35:97:3d:e8:b0:c6:fe:e3:
d8:0e:79:90:a3:df:f3:06:b3:9a:57:37:3c:60:83:
41:f6:b3:d1:8d:2e:7d:2e:e1:95:2c:d9:51:ca:b8:
8e:24:d8:7a:95:d4:98:ae:19:ea:3e:3b:bb:b7:ac:
13:08:19:92:d7:e2:1e:8c:75:05:84:19:68:a6:73:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:0A:44:20:05:C8:58:71:77:8E:FF:57:EF:D3:68:80:41:AF:DB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S-8KRCAFyFhxd47_V-_TaIBBr9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:72:91:d9:7e:d0:11:a6:0b:6b:45:93:6a:ba:f5:97:63:35:
20:e4:cb:29:4a:78:63:46:55:33:17:9c:d2:ec:7c:f9:8e:56:
bb:2d:36:eb:22:ba:0f:f1:ba:5e:d6:78:ae:97:38:48:2a:08:
9f:45:5f:f8:3f:0e:83:78:10:a9:64:d9:8d:ee:57:db:6e:ad:
2a:d6:9f:35:81:fb:37:04:22:88:e5:9b:75:14:14:77:5d:50:
2d:92:b2:75:08:73:20:7e:32:e0:dd:b2:d8:ec:15:c2:83:10:
d6:00:ac:fa:0e:de:97:1f:22:1a:ad:1a:1e:90:d9:00:a1:68:
a9:02:3f:64:67:0b:e8:d4:fd:3b:2f:38:b8:db:7c:68:36:bd:
e9:c0:66:32:c8:d5:79:24:ca:99:fb:4a:9b:08:26:24:47:2c:
fe:3f:22:af:b6:67:0d:38:77:81:d8:00:08:56:c7:0a:6c:10:
11:53:52:24:6d:d2:38:14:86:f7:7b:06:85:68:52:37:7a:82:
0d:f1:8c:91:86:90:4f:98:41:d5:77:1f:25:0b:eb:25:6c:33:
02:bf:da:14:5c:8d:30:ab:95:3e:d5:fa:d2:a9:f6:0b:19:5a:
83:33:83:f9:0c:db:e5:f5:99:91:36:47:ab:8b:10:d7:50:77:
87:99:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:21 2025 by rpki-client