Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_I8SUZk3s0p9QS19oaElcB1vzAY.roa
File: _I8SUZk3s0p9QS19oaElcB1vzAY.roa (raw, json)
Hash identifier: J8YpED0Ycm3pmvtTi8FTFItp5W5KDf07zgmvpR/hyMU=
Subject key identifier: FC:8F:12:51:99:37:B3:4A:7D:41:2D:7D:A1:A1:25:70:1D:6F:CC:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E48AF32C1630B0922F864B3D8D61BD4BF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_I8SUZk3s0p9QS19oaElcB1vzAY.roa
Signing time: Sat 16 Mar 2024 19:13:45 +0000
ROA not before: Sat 16 Mar 2024 19:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:af:32:c1:63:0b:09:22:f8:64:b3:d8:d6:1b:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 19:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc8f12519937b34a7d412d7da1a125701d6fcc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:07:76:78:94:e1:b0:7a:03:5f:0a:3c:63:
35:63:86:6c:6d:2b:85:6d:01:4f:a0:1e:18:51:2f:
2f:79:b8:41:a1:98:0a:7c:bb:87:53:56:e8:f4:80:
dd:1b:75:44:01:c9:22:a9:4d:0e:cc:fc:6b:a0:44:
a2:d8:69:7b:2e:73:42:fd:7c:ed:89:f1:fb:97:06:
e4:01:2e:59:d2:00:f9:c9:16:72:22:51:81:16:66:
2b:f1:7f:24:60:c7:7d:51:db:30:c3:c7:9b:ef:15:
5b:98:cc:d3:71:19:37:f6:b2:b6:51:99:a1:73:57:
87:e1:65:8f:f2:ca:a3:b1:93:bc:e2:32:f4:d3:42:
21:4f:36:0f:77:bc:51:52:74:80:cc:df:8b:a3:19:
d0:8a:4f:73:7d:c6:e3:df:b1:d5:c1:81:3e:ad:ae:
12:b9:40:6b:35:c2:9d:e4:68:bf:f8:09:67:19:63:
df:5d:ca:4d:7e:60:02:d2:ab:9e:cc:2f:db:49:59:
b9:5d:a3:f6:bd:de:e6:06:60:82:90:23:37:51:76:
92:78:64:dc:d8:c7:76:3b:f3:9f:d5:18:e7:f7:59:
21:59:3c:8e:88:57:4c:b9:5b:e6:6c:18:6f:0e:3b:
e6:3f:27:71:0c:25:ba:f6:5a:2a:d2:a4:68:15:36:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:12:51:99:37:B3:4A:7D:41:2D:7D:A1:A1:25:70:1D:6F:CC:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_I8SUZk3s0p9QS19oaElcB1vzAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:7d:53:be:00:cb:ff:02:c2:ec:32:f0:c9:75:02:78:49:c0:
f6:5f:f6:fe:2c:d7:51:9a:cd:2c:3e:21:82:07:66:d1:68:14:
ec:9e:c7:14:2b:79:7c:5b:2c:ca:7f:e7:6b:f8:3b:97:03:91:
7f:12:ce:f9:b4:1b:33:d2:a2:50:c7:7d:8a:25:fe:ba:cd:2e:
72:97:45:b4:9d:ac:e5:1d:16:3d:f7:bf:70:b0:5b:9f:e5:6c:
a5:2c:a2:19:73:66:4b:39:e5:b9:6f:5b:e7:68:fe:88:d7:23:
da:a4:82:08:98:65:6b:d3:43:94:97:a2:5d:ff:48:60:eb:ac:
41:2e:f8:f0:9f:38:0a:74:cb:30:87:c6:82:fd:4a:94:a3:ea:
6f:37:45:52:65:32:f1:3e:85:07:5c:0f:ed:f8:2b:51:9f:93:
af:43:cb:95:6a:f8:dc:7d:6b:88:64:50:6b:3d:8e:cd:61:f6:
6b:5d:97:35:71:36:22:86:e7:ba:24:bd:0e:a9:3b:80:ff:d5:
1b:d5:73:58:11:51:ac:7b:1d:96:88:6d:a5:db:41:b7:14:c2:
84:14:5f:3b:2c:46:6c:8e:7d:9e:6a:50:cc:fd:c2:d0:d3:db:
1a:49:2f:cb:d5:0d:17:ca:36:cb:e8:c6:23:61:65:14:81:34:
4c:71:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:53 2025 by rpki-client