Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Uspno7tWEBQNU7lZyWsZJqA8wg.roa
File: _Uspno7tWEBQNU7lZyWsZJqA8wg.roa (raw, json)
Hash identifier: gYOXndeQh7iYI+Jp+gvMbfi+zAlyWvpCxCu42e5oUq0=
Subject key identifier: FD:4B:29:9E:8E:ED:58:40:50:35:4E:E5:67:25:AC:64:9A:80:F3:08
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E58C368A99448C147AE9D6B58E5FA94B8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Uspno7tWEBQNU7lZyWsZJqA8wg.roa
Signing time: Tue 19 Mar 2024 22:09:44 +0000
ROA not before: Tue 19 Mar 2024 22:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:c3:68:a9:94:48:c1:47:ae:9d:6b:58:e5:fa:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 22:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd4b299e8eed584050354ee56725ac649a80f308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:09:28:a8:81:c4:48:e0:79:2c:c5:98:56:
19:e8:14:f8:d9:41:8e:d6:50:f9:ff:6f:72:2f:ce:
56:cc:d7:cb:f1:9a:da:f9:b0:5f:6f:65:f7:62:a8:
c2:36:55:ce:47:25:81:ac:91:f1:5e:23:f8:f2:f7:
56:ff:0f:1a:fa:95:41:73:54:03:4f:e4:3c:fd:83:
4c:ef:12:bd:c3:1f:a0:81:29:2d:ed:94:cf:f1:06:
b0:d6:68:d0:32:75:2b:19:c3:16:fa:58:74:33:7e:
fd:78:24:a7:c2:aa:e0:d4:89:e1:e2:81:e3:e0:8b:
ca:38:83:21:7d:25:cb:6c:fb:ce:e7:06:f3:14:ad:
7e:44:52:f0:a1:3d:b7:88:12:40:05:f2:b9:24:f5:
4b:5a:75:f8:34:ce:6e:85:1c:ac:10:54:58:97:16:
f9:ea:34:7a:97:aa:52:36:5a:ff:a2:32:27:ff:ed:
9e:3a:c1:76:08:1f:b2:93:c7:f1:7f:69:19:cb:30:
3d:11:b3:5f:d3:0f:d0:e0:a0:55:c2:c5:5c:20:a4:
59:7c:33:68:3a:ba:b8:de:d0:04:ff:ad:92:e6:74:
c2:1c:df:16:e7:12:f2:0c:a4:6a:a8:f1:89:cf:0d:
99:71:15:fa:51:ed:1f:67:7d:48:7c:35:b6:a8:53:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4B:29:9E:8E:ED:58:40:50:35:4E:E5:67:25:AC:64:9A:80:F3:08
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_Uspno7tWEBQNU7lZyWsZJqA8wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:8b:24:ad:8b:cc:39:53:27:17:9e:17:ae:2a:e6:b6:e5:7d:
12:4c:cd:84:b5:59:e4:df:d7:09:d0:f2:7f:cc:18:56:34:4c:
43:62:8f:85:3a:04:ba:55:82:02:07:d9:1f:ce:8a:97:24:50:
a0:8b:0a:c1:c3:9f:cc:26:82:0d:66:6d:51:46:16:06:8d:f6:
32:68:9b:2e:ab:76:95:ef:9a:f4:72:81:c2:6b:0c:d6:27:82:
75:0a:ff:aa:75:80:cc:ff:38:73:c8:6a:b0:a4:23:2b:bf:11:
84:5d:6d:7d:b0:2f:78:39:ea:5c:52:40:0a:05:bb:d9:15:54:
3b:90:5b:43:cd:9d:15:be:39:0a:a4:44:ea:13:29:f4:f4:18:
13:a8:0b:0d:03:b8:d8:ec:1a:b6:43:8a:f2:8c:2f:18:9c:d3:
00:5c:c5:b8:21:d3:09:97:98:7e:0b:a5:2b:c6:d8:83:89:94:
dd:08:c9:64:4e:52:3d:7b:5d:5d:a4:b7:23:4f:29:96:ad:94:
db:41:e8:b3:72:b7:90:61:cb:53:4a:b0:cb:b4:43:d2:d9:37:
1d:b0:9e:3e:55:7d:4f:c7:f4:cb:f2:41:d5:b4:28:cd:72:a9:
eb:1b:b8:9d:73:fd:84:53:ad:aa:6a:a6:d3:63:db:fd:58:02:
e0:48:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:25 2025 by rpki-client