Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/akLKth6Sdv2xE9WEj2ZQYuhXvwU.roa
File: akLKth6Sdv2xE9WEj2ZQYuhXvwU.roa (raw, json)
Hash identifier: TkZzxr1VAFTBn7ftSDpcr6Qk55Y0EU/DKNcxw7TlktU=
Subject key identifier: 6A:42:CA:B6:1E:92:76:FD:B1:13:D5:84:8F:66:50:62:E8:57:BF:05
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E976C5D5CC26BC894D3C14D77C6979143
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/akLKth6Sdv2xE9WEj2ZQYuhXvwU.roa
Signing time: Mon 01 Apr 2024 02:10:45 +0000
ROA not before: Mon 01 Apr 2024 02:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:97:6c:5d:5c:c2:6b:c8:94:d3:c1:4d:77:c6:97:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 02:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a42cab61e9276fdb113d5848f665062e857bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:8f:d6:d1:24:99:e4:f7:4a:d2:4c:42:7b:
99:af:2f:82:7b:63:80:9e:21:04:f0:1a:70:75:fb:
ac:98:9b:f7:6b:7c:92:15:5d:8f:fc:93:6b:35:53:
1e:8e:9a:b3:8c:aa:10:6e:3b:f9:95:73:5c:bc:02:
01:a1:f0:09:50:39:b9:64:b0:1d:53:73:fd:8b:b4:
ca:af:a4:46:4c:64:b5:a8:4f:48:81:2a:7e:e3:f7:
7f:5b:e1:04:7a:34:54:47:76:01:e6:b7:e5:b5:85:
b9:e3:a2:92:6a:2e:e7:5b:7d:9d:62:88:7a:76:d4:
5f:a8:b0:fa:8f:d5:77:be:82:0f:60:92:f9:19:b6:
a6:26:0d:09:c3:00:32:e5:6d:a0:69:87:21:0c:c5:
06:29:eb:06:a7:bb:a2:b6:23:da:5d:3f:6b:cb:3e:
ff:b5:46:0b:86:6a:93:94:f2:7d:d9:93:8b:dd:d9:
bf:cb:ce:eb:59:fb:fd:3c:62:69:51:db:f6:f9:62:
8c:b8:ef:4c:3f:5c:95:5b:d2:83:f7:8d:59:86:20:
93:32:5c:fc:bb:56:9c:39:25:b7:69:1f:77:f7:bd:
4a:40:26:ab:39:5d:cc:68:c9:f7:26:0d:5c:08:17:
c9:f7:e5:29:17:dc:9a:1a:82:c3:3a:32:54:fb:24:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:CA:B6:1E:92:76:FD:B1:13:D5:84:8F:66:50:62:E8:57:BF:05
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/akLKth6Sdv2xE9WEj2ZQYuhXvwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:18:d1:79:ee:bd:2a:f4:0a:bf:6d:5e:d0:14:c9:10:90:08:
94:ba:68:ce:6f:59:2b:5e:6e:ce:38:87:c4:82:e9:0b:8a:3c:
ae:1b:f8:39:b9:8d:a9:46:1c:c6:42:53:9a:0f:69:eb:d8:56:
0c:9c:7f:fa:42:e3:c1:a2:ac:45:91:ee:cc:7d:5f:43:a4:1e:
a9:4b:b4:65:e3:0f:9d:52:dd:81:5a:16:b3:84:c1:37:4e:1e:
37:f1:bf:e8:a7:7d:3d:b1:4d:6b:40:33:35:ce:35:03:89:48:
23:5c:1e:a3:77:02:cb:b0:37:43:c0:c3:83:83:ed:b1:80:3f:
7d:d6:b7:63:48:ca:60:b3:4f:27:24:5b:c8:3d:83:11:6f:fb:
12:f8:cd:ab:08:fe:4b:a6:c5:60:40:ed:44:6f:d0:35:85:6a:
8a:e5:9b:76:1d:d2:fd:3b:c1:6a:5c:25:fe:ba:1f:69:6b:4e:
e5:d1:b7:59:92:25:8c:34:d5:02:51:7b:09:70:8d:8a:b0:8f:
38:9c:58:7c:4f:96:c9:2d:5b:a2:d7:d5:65:5f:5f:eb:4b:06:
2f:7d:c7:be:21:e6:fa:b9:be:d2:fa:59:98:81:8f:92:b1:80:
72:08:4e:e6:79:92:0f:c6:5f:5d:53:57:40:6f:58:8a:1b:dd:
ee:b8:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:37 2025 by rpki-client