Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Kb9D8ev-LVtg6gIy_JCqZYUzVM.roa
File: _Kb9D8ev-LVtg6gIy_JCqZYUzVM.roa (raw, json)
Hash identifier: mCnDBYPPmqgi4ntnoORdyaWLUn9Sx3bc4bJamx0YKSo=
Subject key identifier: FC:A6:FD:0F:C7:AF:F8:B5:6D:83:A8:08:CB:F2:42:A9:96:14:CD:53
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB64D2A92DDAA48979D36EE18E4E6BD7C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Kb9D8ev-LVtg6gIy_JCqZYUzVM.roa
Signing time: Sun 07 Apr 2024 02:04:54 +0000
ROA not before: Sun 07 Apr 2024 02:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b64c:8843/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:4d:2a:92:dd:aa:48:97:9d:36:ee:18:e4:e6:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 02:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fca6fd0fc7aff8b56d83a808cbf242a99614cd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:2d:dc:13:1a:d2:96:37:3a:ab:7e:03:d0:
7e:e5:c5:b8:8c:3d:89:4a:72:8d:6a:df:28:cc:a8:
98:a4:8f:1c:59:be:31:98:f9:35:ab:30:e4:8e:41:
49:9d:f7:95:bf:03:78:92:52:96:41:f5:47:94:e0:
47:19:ed:ad:1d:51:57:34:00:77:81:0a:3b:a4:fe:
c1:61:45:81:fd:77:2d:10:85:64:9c:ae:92:e6:82:
34:6c:f3:18:56:72:29:81:0d:4c:6d:bf:26:3f:64:
f1:9d:06:59:66:ec:69:99:e7:ab:31:89:65:73:56:
b3:16:ba:19:80:1f:bb:f6:bf:55:80:8b:7e:93:f0:
52:f9:5e:31:cf:9e:ae:9c:2e:c6:9b:06:bf:15:0e:
af:10:40:f4:4f:14:ee:1c:be:d9:36:a3:21:35:61:
b4:a6:20:ea:55:8b:cc:5a:0a:ff:b5:bc:06:1c:33:
f1:cb:01:77:af:59:d8:20:3a:da:73:de:80:0d:8a:
95:99:a2:5d:a3:49:86:56:c2:99:6e:ba:e7:51:de:
21:cc:07:56:e6:36:f7:3c:7b:74:27:fd:99:e6:1d:
8c:ce:5c:a5:6c:73:16:de:9d:1b:41:d5:df:a4:d4:
d0:30:2e:78:6a:a8:82:71:05:35:f7:1b:e7:bd:19:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:FD:0F:C7:AF:F8:B5:6D:83:A8:08:CB:F2:42:A9:96:14:CD:53
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Kb9D8ev-LVtg6gIy_JCqZYUzVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:62:07:b2:3f:c5:94:c6:db:9b:fd:bc:16:66:8d:19:96:b0:
52:a7:6e:dd:9d:5c:60:18:f6:a5:92:79:ca:13:3a:43:d2:54:
28:c9:32:5a:6d:24:09:ae:b2:8a:e6:85:25:b9:07:13:c8:8f:
42:48:c9:4c:db:44:37:11:28:01:97:e8:cf:4e:12:a7:13:fd:
2e:de:fa:1e:2c:9a:de:6a:e9:04:d1:69:38:cb:99:c3:27:25:
12:72:4c:bc:97:88:e9:9d:52:e1:eb:04:d4:5e:aa:da:9f:42:
09:dd:13:71:68:fe:d6:f8:83:c6:83:e4:93:e8:d5:45:39:53:
8f:ae:15:54:0c:21:51:6b:e5:92:80:bf:d7:c7:f4:b2:be:56:
4c:c3:e1:20:cb:88:24:eb:c3:59:64:56:81:17:24:a6:bf:ea:
4f:3a:5f:3f:ac:fc:b1:63:a8:4c:93:52:6a:a6:d7:8c:c9:75:
b0:08:5a:a1:7d:95:02:ea:d6:a9:80:9d:63:2c:28:0b:8c:35:
62:bf:b2:a3:95:35:ec:be:a9:e6:5b:b0:65:88:f3:4c:31:b0:
2b:f9:10:d3:a8:26:dc:39:e8:ab:18:d3:f8:0c:89:cc:5e:4e:
95:61:7c:6b:5c:6f:36:62:58:20:d3:f0:71:1a:b1:52:c6:f4:
f5:c4:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:37 2025 by rpki-client