Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S8AjCXpnpZmt4ntdyt5tP_9-5hQ.roa
File: S8AjCXpnpZmt4ntdyt5tP_9-5hQ.roa (raw, json)
Hash identifier: wsMrBlruWawI4OphQ1symnrrYEms8GIkJXWbRaeL+WQ=
Subject key identifier: 4B:C0:23:09:7A:67:A5:99:AD:E2:7B:5D:CA:DE:6D:3F:FF:7E:E6:14
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E48097C7AC5446DEE28017A4BF13FFA32
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S8AjCXpnpZmt4ntdyt5tP_9-5hQ.roa
Signing time: Sat 16 Mar 2024 16:12:45 +0000
ROA not before: Sat 16 Mar 2024 16:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:09:7c:7a:c5:44:6d:ee:28:01:7a:4b:f1:3f:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 16:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bc023097a67a599ade27b5dcade6d3fff7ee614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:a7:cf:fe:d5:8f:ae:81:90:c7:b4:32:29:
b3:f6:25:c7:1e:e8:90:4a:85:b3:d2:34:cb:1a:cb:
fa:16:2d:b6:10:b6:20:a4:f1:74:b2:e8:ea:ee:8b:
fe:9a:ac:4a:c0:55:f2:1f:6f:36:38:9e:fb:7c:b1:
ba:90:b5:3d:db:bc:f8:df:59:4e:6c:b5:0b:89:6f:
07:c2:6e:d2:f8:71:f2:d9:04:52:13:ef:22:69:d4:
5b:64:07:90:4c:56:e8:46:55:7d:2e:ca:66:5c:aa:
ba:1e:db:15:07:a1:c6:ad:4e:dd:50:7f:1c:26:fa:
f0:72:c5:a1:43:87:96:fc:c7:7e:0f:a7:ec:12:d7:
27:ec:ad:92:81:35:32:56:d2:0b:92:c0:06:9e:2c:
33:da:be:03:fc:51:b4:38:46:05:aa:3d:5d:a7:08:
a5:19:e1:71:88:49:43:2b:e7:80:7e:b1:53:49:eb:
eb:d8:1c:f9:8e:2c:04:10:4b:d0:b5:51:c2:86:54:
9d:9c:68:ea:0f:32:04:de:41:5b:38:23:6e:10:5c:
40:6b:cc:14:cd:e4:6a:50:d1:d1:e9:20:1b:10:b6:
5c:50:5e:50:c9:3f:25:f4:b0:3c:5d:ea:dd:dc:15:
12:4e:de:95:86:29:97:53:05:26:94:68:bb:b4:59:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:23:09:7A:67:A5:99:AD:E2:7B:5D:CA:DE:6D:3F:FF:7E:E6:14
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S8AjCXpnpZmt4ntdyt5tP_9-5hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:b7:b4:93:32:e7:cf:b7:a4:c4:04:a3:3b:ce:3a:6d:68:9d:
b1:ac:f4:3d:fc:96:65:12:62:e5:49:ce:73:d8:57:21:f5:d5:
ce:fb:c4:7b:2b:92:79:1d:9b:ee:9b:b4:72:ac:a7:95:d8:f4:
29:ca:ae:a7:4f:0f:d0:08:c2:5e:5e:0a:ef:47:15:ff:41:46:
88:dc:7f:54:21:b2:b7:e0:03:17:e0:e5:f9:53:be:c5:e1:3f:
0f:53:6d:6a:bf:90:94:d2:b7:9b:08:ab:05:03:b6:43:89:db:
65:cf:4b:ae:fb:63:2b:2e:75:2e:34:42:90:a0:48:9a:ce:aa:
82:91:ad:52:c9:34:8a:1e:62:67:0c:be:80:60:74:6d:69:9c:
1e:ce:fc:44:cb:86:4d:ea:96:62:f8:91:ef:e8:58:37:a4:c7:
f0:58:96:d6:f8:d4:08:09:4c:d2:99:8a:09:70:ec:e7:75:79:
52:9f:f9:8a:3f:1d:e4:06:db:cc:e9:59:9b:e4:e0:7d:b4:a2:
81:28:e1:e3:93:f6:fb:2f:fb:c4:66:3a:ed:ce:62:f7:7a:69:
dd:7d:3b:80:17:0e:74:76:02:db:62:40:11:43:82:e4:72:68:
7d:59:51:3d:64:b5:31:07:e2:80:fa:c6:88:4f:79:9b:f0:b1:
49:88:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:38 2025 by rpki-client