Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_jgwCz49Ul2Zcvc9IuMGD0tS2sY.roa
File: _jgwCz49Ul2Zcvc9IuMGD0tS2sY.roa (raw, json)
Hash identifier: pYXX/TOYx/HPvTypQZwHn/b874AC8VmSK9TpwKud9yQ=
Subject key identifier: FE:38:30:0B:3E:3D:52:5D:99:72:F7:3D:22:E3:06:0F:4B:52:DA:C6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8D1F756ABBA32C8E9335C84832C576A4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_jgwCz49Ul2Zcvc9IuMGD0tS2sY.roa
Signing time: Thu 21 Dec 2023 16:04:58 +0000
ROA not before: Thu 21 Dec 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8d1e:c0d1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:1f:75:6a:bb:a3:2c:8e:93:35:c8:48:32:c5:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe38300b3e3d525d9972f73d22e3060f4b52dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:80:d0:3e:85:4d:73:68:6b:71:48:90:75:
76:35:70:76:d7:43:de:1f:df:d9:cc:d5:ce:1d:cf:
fc:d9:f8:fd:88:58:33:fe:a4:cf:ef:75:45:ee:4c:
6b:21:6b:36:b7:2d:6d:a0:c7:1f:aa:eb:b2:90:60:
46:99:47:6d:dc:75:85:9d:e7:87:e3:06:3c:41:5e:
c7:1c:49:f2:81:20:09:0c:32:d2:ed:6b:8b:7b:0d:
d9:bc:0b:0f:ba:f2:ed:ba:39:50:8b:51:a7:58:27:
0d:fb:66:a8:a4:34:8f:86:33:46:ad:8d:68:97:62:
6f:53:5e:61:fb:23:fe:e2:88:d7:81:72:86:04:5d:
2b:10:2b:68:4f:4b:5a:ea:4c:72:75:ce:8a:5f:33:
a4:fa:bd:b0:9f:9e:45:2f:6e:88:2a:d7:ab:f8:5a:
8b:14:a0:b8:22:2c:0d:34:0b:6a:cc:41:67:b5:dd:
41:ce:3f:a7:ba:d1:b2:9f:e2:34:40:08:a1:29:8c:
45:71:4e:17:18:18:02:bd:3c:db:18:4a:4f:9e:5f:
7e:95:84:37:80:43:b7:a5:24:d5:bd:e5:bd:20:fe:
e0:c8:db:37:d1:26:29:1f:3b:5e:e2:aa:82:3d:d4:
4b:12:ef:75:c4:9f:34:e2:ff:ba:27:00:11:73:42:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:30:0B:3E:3D:52:5D:99:72:F7:3D:22:E3:06:0F:4B:52:DA:C6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_jgwCz49Ul2Zcvc9IuMGD0tS2sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:49:35:9e:77:fe:79:e2:60:d5:08:a9:ee:43:c5:7e:e7:63:
79:df:29:a3:c3:8e:7f:cc:8a:b8:bd:dc:8b:93:8f:2d:3e:17:
77:3f:6a:f7:94:e6:b6:2d:81:2c:a4:f5:e3:90:6b:4d:64:95:
6c:af:90:1b:5e:58:54:c4:4e:1f:e2:b5:da:2f:e5:7d:81:2d:
ed:41:27:b7:c1:cc:ca:80:e0:91:b4:e3:72:0c:fb:e9:9f:be:
fb:f9:7f:bf:b7:b5:92:de:5e:4f:6b:4a:f2:4d:86:4a:42:af:
c1:84:09:48:bd:8f:09:12:f5:62:67:d9:e2:72:54:08:46:59:
fb:a7:b4:b2:ca:65:30:37:b2:9f:40:83:7e:bb:67:82:27:da:
8c:45:02:1d:2f:f4:c3:05:51:c2:69:b9:71:e5:61:da:0b:fb:
41:5a:5a:49:d0:fd:de:f8:b3:48:03:cf:25:b7:53:1a:79:08:
e6:1c:d3:d9:13:b1:bc:27:83:36:f2:1b:43:a9:25:d7:ca:8e:
ea:0e:24:5f:d3:ba:eb:b8:d8:7c:bb:a5:d2:39:c5:36:b6:46:
b3:cf:49:ba:fc:44:5f:18:df:fb:04:04:ed:ca:06:b4:33:e9:
0e:74:8f:f7:12:cf:9f:98:db:15:f3:c9:4b:8b:a9:50:ab:5c:
9f:5a:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:08 2025 by rpki-client