Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V2DlM-y9LANpyetGAPLmbrmQI6g.roa
File: V2DlM-y9LANpyetGAPLmbrmQI6g.roa (raw, json)
Hash identifier: lVJM+klfXfDum02k946lg2fK7ZDzIvSTxLWevxerI4E=
Subject key identifier: 57:60:E5:33:EC:BD:2C:03:69:C9:EB:46:00:F2:E6:6E:B9:90:23:A8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDD31F65920B41011BC95FCBE42970506
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V2DlM-y9LANpyetGAPLmbrmQI6g.roa
Signing time: Sat 06 Jan 2024 05:14:48 +0000
ROA not before: Sat 06 Jan 2024 05:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:dd:31:f6:59:20:b4:10:11:bc:95:fc:be:42:97:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 05:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5760e533ecbd2c0369c9eb4600f2e66eb99023a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:54:9b:cb:12:0e:bb:63:55:72:ad:bc:60:
ef:65:18:d0:1e:5d:37:bb:c8:db:f1:e6:bb:e3:bb:
64:3c:21:12:e0:ca:4e:d1:b9:9b:a2:5d:30:ee:00:
d7:5c:4d:c4:3d:a6:a5:e2:ed:e0:b8:af:ed:a9:2c:
97:f3:b6:87:76:c9:d2:06:10:90:ac:17:40:5e:30:
b5:9c:aa:5d:8b:e1:71:4c:4b:3e:ea:9f:49:68:f1:
73:39:27:c8:06:1b:56:be:69:22:ea:45:bd:63:af:
ef:14:c5:a3:52:3a:62:36:55:d2:e9:e0:45:1d:ed:
c8:73:62:20:47:7e:8f:e9:ec:ba:ed:d8:8d:19:88:
6d:6e:7f:b9:b0:9a:3e:dd:3c:26:dd:8a:02:78:76:
e1:f6:cf:87:bb:6f:ad:35:f0:6c:ff:6d:bd:4e:70:
b8:2f:d1:8a:39:cd:af:56:bd:e0:bc:1f:ef:78:c9:
50:45:14:f7:df:ce:87:47:f7:26:8d:ea:71:b1:dd:
f7:54:64:3a:88:2c:7d:a5:c1:25:1d:75:30:70:a0:
3a:34:99:46:d6:8a:cc:69:67:b1:d2:b7:0a:66:9c:
41:9b:24:d8:d6:17:29:3b:81:f6:57:e4:b9:34:5a:
27:45:3e:42:5e:e6:25:a5:77:61:a9:79:2b:84:07:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:E5:33:EC:BD:2C:03:69:C9:EB:46:00:F2:E6:6E:B9:90:23:A8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V2DlM-y9LANpyetGAPLmbrmQI6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:36:59:8e:30:f2:16:58:14:9a:4b:73:6b:88:54:e4:b8:1f:
31:24:91:bc:a2:78:81:b3:0a:a5:96:25:f9:da:fb:21:68:9a:
dc:7b:49:45:6f:ea:a8:41:36:14:35:d8:46:8b:86:51:dd:f2:
be:1f:b6:98:a8:6d:5b:25:c9:46:8b:ee:49:95:30:83:40:c0:
48:ab:de:39:f5:6b:63:15:3f:79:fd:4b:c6:f5:e9:9f:81:4e:
91:a6:ca:b9:ff:75:85:f5:41:40:34:80:3b:f5:f4:e0:ae:9b:
0b:d8:1f:83:45:96:61:ae:9b:be:52:81:8d:b4:08:e3:82:56:
ac:cf:3a:d0:f7:38:e3:1b:a6:a8:b5:2e:1d:60:6a:99:1e:23:
49:1f:92:00:6f:20:98:84:ad:35:07:e0:a5:ef:45:9b:01:74:
aa:22:fb:9f:e2:66:99:2b:fa:ba:44:12:ce:69:75:57:ae:4d:
82:f1:1b:54:cf:74:14:0d:18:ef:e1:df:7b:f3:aa:46:75:e9:
a4:c7:73:bf:41:79:41:4a:aa:13:70:9d:60:0e:a3:ac:42:1f:
75:f5:16:f1:b4:66:8f:75:c0:bc:dd:33:92:31:86:4c:0d:ab:
bc:71:6c:fc:19:11:8a:dd:4a:8c:c9:62:f8:c3:7e:d5:3a:c6:
87:b9:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:01 2025 by rpki-client