Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VqZaztXjFxnyzmADVBw1_ApUfVg.roa
File: VqZaztXjFxnyzmADVBw1_ApUfVg.roa (raw, json)
Hash identifier: RzZ+rTjiMOxHbMroqQEP3EgtCsbuD5cTs5cZohexUVA=
Subject key identifier: 56:A6:5A:CE:D5:E3:17:19:F2:CE:60:03:54:1C:35:FC:0A:54:7D:58
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6D5B4C3344A526E3F9C047951D299DB8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VqZaztXjFxnyzmADVBw1_ApUfVg.roa
Signing time: Sat 03 Feb 2024 05:05:16 +0000
ROA not before: Sat 03 Feb 2024 05:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:6d5a:6d58/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:5b:4c:33:44:a5:26:e3:f9:c0:47:95:1d:29:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 05:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a65aced5e31719f2ce6003541c35fc0a547d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:e3:f6:54:53:e5:2a:46:91:e1:54:d3:ea:
c4:c2:2a:45:41:e8:95:0c:3b:0c:e5:52:d5:d9:fa:
ce:d2:7b:ce:af:1e:2c:39:45:b9:ab:50:7d:cd:ec:
60:5c:b0:0a:d9:08:72:11:43:e8:b7:b4:59:92:fa:
79:6a:3e:84:35:12:b4:3d:81:4d:68:ee:37:ad:52:
a3:67:2a:ae:75:9f:22:ec:05:94:51:e2:0a:b7:81:
a7:31:e9:2d:97:cc:a7:89:ba:aa:40:ea:68:6a:4b:
69:71:ac:1f:00:ce:23:91:9a:0f:0e:09:2b:d5:19:
e0:cc:2f:05:fb:eb:51:1c:56:bd:57:dc:5c:33:64:
eb:23:f8:4f:c6:be:9d:0e:b7:f8:97:cc:89:70:30:
12:fa:3a:52:52:4d:06:be:9c:5a:4f:50:cb:76:36:
d0:6d:d6:0c:e4:a4:ce:ed:cf:aa:68:73:22:4f:45:
2e:b3:a6:8e:d5:91:95:1a:7a:e0:d0:6e:90:22:57:
23:69:fd:46:78:72:9e:94:d1:2f:88:99:fc:41:05:
d4:07:41:8c:1c:e8:69:3c:2a:e9:dd:2f:7d:20:06:
a8:f3:26:f2:23:b5:53:17:c4:a3:ac:57:0a:87:d3:
1e:ab:e5:64:36:6c:ad:e9:eb:ae:f2:89:b2:a0:06:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:5A:CE:D5:E3:17:19:F2:CE:60:03:54:1C:35:FC:0A:54:7D:58
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VqZaztXjFxnyzmADVBw1_ApUfVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:b1:44:b2:4c:21:d8:47:90:e6:09:13:c0:e6:45:fe:c7:7e:
f2:c5:bf:aa:0d:38:40:8b:e6:93:df:3b:46:50:20:9f:2c:8e:
63:db:05:2e:5a:9d:f3:7d:60:14:a1:10:61:16:10:ba:16:a2:
bb:b6:09:98:de:86:7e:da:33:65:7c:92:3e:5a:8a:d4:67:3d:
f7:7d:0e:a2:e9:21:8e:50:11:7a:57:f7:4e:82:b2:0a:7b:1d:
d8:0b:ea:fc:96:5a:be:17:62:a9:24:ab:7c:9c:07:37:c7:ad:
e1:bc:79:0c:20:e7:cf:21:d7:13:dd:ae:47:ce:59:d4:7a:7e:
fb:14:b8:32:5e:44:af:15:6c:35:5b:a2:86:62:4b:b5:88:a2:
da:72:e2:c4:d8:fc:2b:d6:b8:d0:a8:75:d5:f6:7f:02:0e:db:
91:a5:06:8c:d8:65:8f:2a:e4:ce:cc:32:5e:62:51:28:4b:5f:
61:b9:c4:25:ff:e4:e5:af:e1:08:1c:86:91:92:21:27:b4:4a:
91:fc:9e:25:fb:f6:02:94:08:1a:a2:9f:2a:57:d0:04:3c:ff:
d8:f7:d1:4e:e1:37:91:66:e7:87:45:ea:a3:a0:14:08:57:2a:
b9:86:ca:8e:1b:fe:60:3f:49:69:6f:c3:b9:dc:56:54:3b:ee:
e1:9b:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:12 2025 by rpki-client