Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WrzYl7FpFz2ZNHvxGfXpzRCMSYA.roa
File: WrzYl7FpFz2ZNHvxGfXpzRCMSYA.roa (raw, json)
Hash identifier: abBnfDDJZTCRvD8HKpe3IDAXYIRDmicxnrpv/MrK0e8=
Subject key identifier: 5A:BC:D8:97:B1:69:17:3D:99:34:7B:F1:19:F5:E9:CD:10:8C:49:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E235A63CD963B025827A2354E6CB64AA8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WrzYl7FpFz2ZNHvxGfXpzRCMSYA.roa
Signing time: Sat 09 Mar 2024 13:15:10 +0000
ROA not before: Sat 09 Mar 2024 13:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:5a:63:cd:96:3b:02:58:27:a2:35:4e:6c:b6:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 13:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abcd897b169173d99347bf119f5e9cd108c4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:e6:fe:8d:15:bb:dc:d4:3e:72:af:a6:e5:
dd:bc:31:5f:e2:5f:a4:92:cf:c4:a3:ab:28:7a:3b:
7d:77:6d:5f:46:90:20:29:bc:d6:e6:f9:e8:3e:01:
7c:f5:f0:96:cc:5f:0a:ee:30:4c:e7:43:b1:8a:6e:
ef:97:fd:8d:16:c2:cd:93:b8:de:90:c7:cc:64:29:
d1:67:20:28:76:05:d5:e7:a7:dc:73:69:58:24:cd:
8c:36:7c:0b:9c:fa:56:02:db:b6:9f:21:aa:20:35:
ce:19:ec:6d:6a:27:3e:16:9f:c7:22:67:62:e2:17:
ad:42:8a:94:01:41:2f:36:ce:aa:ec:bd:05:88:bd:
e3:7e:72:b5:75:e4:c8:79:5f:8c:ad:45:96:9c:d7:
02:83:fe:05:e7:94:00:1c:79:5d:3c:6f:f8:de:ef:
e7:64:4c:7f:c3:08:57:ce:29:ae:fe:86:18:d2:81:
46:8a:8f:e9:b8:c4:e9:61:c2:82:d1:e4:e1:de:8b:
99:10:3c:70:4c:e7:95:a8:4d:6b:67:29:3d:39:07:
fa:a8:48:41:bc:86:0f:58:ad:87:4c:7f:f1:8d:3b:
3b:16:51:33:3d:86:d8:0c:53:dd:68:4c:0d:94:00:
c3:49:42:90:60:f4:63:8d:5e:61:e7:d5:2e:76:55:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:D8:97:B1:69:17:3D:99:34:7B:F1:19:F5:E9:CD:10:8C:49:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WrzYl7FpFz2ZNHvxGfXpzRCMSYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:dd:17:23:a0:d2:e9:37:26:b4:aa:7d:d8:d2:e6:88:a1:c9:
63:e5:9e:72:b8:71:70:ea:25:36:7c:4b:11:84:48:16:c7:86:
11:d5:7c:64:65:a3:8f:a1:cd:f0:01:b1:f9:4e:88:9d:ed:2f:
85:f5:36:e9:07:39:68:d9:4b:69:78:2d:52:0e:72:76:37:2d:
b2:fa:87:c9:f1:97:08:d4:c9:e2:ed:6a:76:ee:19:cf:89:36:
65:c3:46:89:9e:c2:73:dd:fa:81:63:cb:0f:f6:a6:72:56:49:
b3:87:9e:1e:fb:f7:40:95:45:2f:3a:72:4f:80:ba:06:1c:f8:
c0:ab:e9:26:48:bc:70:fd:c4:97:98:29:bc:96:e6:9a:33:fa:
45:15:02:f8:77:8d:2b:a8:eb:8f:c1:12:97:fb:80:7b:3a:d1:
1c:d7:d2:fc:a4:ef:f3:e4:7c:de:f6:76:22:b4:fa:f1:95:da:
13:cf:90:8e:df:7c:10:92:d3:6e:be:32:bd:e9:ca:fa:77:25:
c5:44:52:02:df:81:47:ac:84:3b:d2:13:59:f8:5f:a5:70:ec:
16:06:33:b8:f9:cc:e0:b3:0f:52:e7:73:35:68:a9:b7:c2:85:
39:e4:23:a8:fc:5b:60:7a:1e:40:bf:d2:9f:a0:3f:fc:82:a0:
37:83:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:15 2025 by rpki-client