Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XjKnrc7fUW3Vz-M0xK9XxZV0edA.roa
File: XjKnrc7fUW3Vz-M0xK9XxZV0edA.roa (raw, json)
Hash identifier: CH0js+VkR/ZMg57jyIEs7pck/n2FNohrrPFTpGuKaE8=
Subject key identifier: 5E:32:A7:AD:CE:DF:51:6D:D5:CF:E3:34:C4:AF:57:C5:95:74:79:D0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE51B089601AE90808A9C4FD4C096D723
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XjKnrc7fUW3Vz-M0xK9XxZV0edA.roa
Signing time: Sun 07 Jan 2024 18:06:43 +0000
ROA not before: Sun 07 Jan 2024 18:06:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e518:eb4f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:1b:08:96:01:ae:90:80:8a:9c:4f:d4:c0:96:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 18:06:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e32a7adcedf516dd5cfe334c4af57c5957479d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:dc:98:d2:5a:6a:7a:18:03:0e:16:5d:42:
bc:9b:f9:df:56:1e:57:88:34:7d:c1:b4:8d:98:e8:
71:31:0e:b5:4f:7a:8b:b8:b9:06:da:bf:e9:3c:6c:
28:19:d2:f9:30:85:09:4e:9b:65:39:51:84:50:50:
14:6f:6d:48:ea:5c:54:0f:2a:ab:b6:22:37:60:1d:
d3:bb:2c:11:5e:be:a2:6d:0d:6b:cc:6e:cc:2b:e0:
e7:3a:53:a9:62:c2:84:ba:43:e8:e6:fa:5a:5c:65:
30:44:46:fb:75:ff:d8:3e:02:5d:37:a5:e1:71:64:
68:56:7e:d0:ca:34:17:71:94:df:06:ed:e0:e2:9e:
14:3b:56:82:62:d9:ea:0c:4f:41:3e:90:02:e2:82:
3f:ca:b3:6d:6d:69:63:01:2d:67:1a:73:c4:67:57:
7b:f3:f3:e3:c8:49:28:eb:4d:49:3f:7e:eb:fb:ba:
f9:4d:53:7b:c7:d5:a2:9d:b9:a2:de:0b:9b:c3:6d:
6e:a3:af:90:d6:d1:be:76:0e:05:0c:6d:7b:28:d1:
44:f9:5d:58:78:ed:e2:09:33:16:02:5a:a2:09:5e:
f9:b8:e6:0c:46:e5:c6:9f:53:ed:13:36:51:f1:c3:
85:1b:3e:98:1c:69:b3:98:2f:9b:5c:90:ca:ad:60:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:A7:AD:CE:DF:51:6D:D5:CF:E3:34:C4:AF:57:C5:95:74:79:D0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XjKnrc7fUW3Vz-M0xK9XxZV0edA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:5a:f8:00:3d:f1:8b:28:3c:35:85:e3:47:dd:4d:20:5f:89:
82:a6:90:86:39:33:54:c8:50:85:86:f0:34:28:d8:e1:6a:fb:
55:db:61:19:b3:5a:26:de:88:a2:8c:16:d8:8f:94:50:74:8b:
08:3d:0c:ed:e1:8d:ed:bb:d9:b4:20:e2:44:1f:58:1b:9d:be:
b7:c4:7b:03:40:73:8f:38:d0:a5:26:6d:8b:1b:07:30:58:21:
da:cb:20:2b:17:72:34:ad:06:37:29:0d:03:2f:e5:72:78:c4:
fb:35:eb:b2:2c:b0:77:9e:08:5e:fd:0d:44:9e:cc:da:bc:78:
06:34:25:43:e6:47:6c:82:cc:75:65:d2:a9:47:2c:d7:a1:e7:
23:29:c4:2d:bd:73:75:9a:96:2e:5b:45:2c:54:65:22:54:18:
7d:c1:08:e8:10:97:83:a1:54:19:cc:74:01:ad:08:43:1f:91:
2a:fc:bc:85:69:f6:12:9a:3f:ac:6b:4f:c5:ec:7b:5d:b5:95:
d4:2d:20:0a:64:9b:42:f0:f6:9b:df:3c:22:6d:30:5a:21:8e:
d0:72:a9:ab:ab:82:d0:ca:05:ff:48:7d:0d:f6:c8:fe:a2:7a:
21:96:13:7d:d5:89:f5:56:62:2c:cf:a4:3b:9b:a1:29:59:16:
81:7f:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:02 2025 by rpki-client