Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjOctdu7vUaxTdwCmwnXCxD-F20.roa
File: bjOctdu7vUaxTdwCmwnXCxD-F20.roa (raw, json)
Hash identifier: wZrN/PBRrROv49btJrs58MS6yc+Muu9wBhf6+keWoc0=
Subject key identifier: 6E:33:9C:B5:DB:BB:BD:46:B1:4D:DC:02:9B:09:D7:0B:10:FE:17:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C89EDE57D8647D3F0344CB4F811B1009A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjOctdu7vUaxTdwCmwnXCxD-F20.roa
Signing time: Thu 21 Dec 2023 01:11:58 +0000
ROA not before: Thu 21 Dec 2023 01:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:89:ed:e5:7d:86:47:d3:f0:34:4c:b4:f8:11:b1:00:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 01:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e339cb5dbbbbd46b14ddc029b09d70b10fe176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:b0:0b:59:a1:1b:03:86:12:13:06:e9:e0:
92:4b:e6:60:97:3f:35:63:ca:36:59:c1:9c:70:a2:
fb:c9:83:9a:89:d1:29:ae:94:ec:f3:38:c6:a7:e6:
2d:b3:91:68:91:86:96:d8:75:27:69:2d:ab:ff:c3:
3b:93:f6:b8:31:e3:36:d9:7e:fc:ab:50:78:7b:ec:
c1:76:58:0e:a7:c6:f9:aa:6b:19:f0:53:68:10:03:
18:75:e1:d4:da:50:66:20:cc:be:90:43:d7:79:03:
bf:5c:f9:56:31:b9:4a:cc:d7:36:67:37:58:fc:96:
95:e9:ca:14:b1:91:c8:5c:43:04:40:d9:f7:73:94:
3a:f0:e8:43:b7:7f:97:24:40:9b:6a:29:21:d1:6f:
8d:29:ef:cf:f4:97:a5:ab:12:d9:67:27:40:3c:fb:
24:e1:66:c2:8e:5f:c1:4e:d2:99:b2:f8:f2:64:22:
62:e1:8f:b3:78:7c:8f:88:eb:b0:d8:00:de:38:a8:
4c:77:be:e5:c8:4c:93:69:63:fa:96:a3:ae:9f:13:
68:8a:b6:28:2b:63:4d:24:4a:81:ce:b0:89:8b:02:
2c:e2:d6:b2:62:59:83:cf:b2:e9:73:1d:92:18:a4:
b4:7a:39:95:86:96:20:f9:c8:4d:ab:4f:55:45:dd:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:9C:B5:DB:BB:BD:46:B1:4D:DC:02:9B:09:D7:0B:10:FE:17:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bjOctdu7vUaxTdwCmwnXCxD-F20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:07:ad:ee:e7:81:b7:e7:d6:c3:d7:16:ae:8b:7d:5f:52:d9:
c9:0a:2f:2a:bf:34:fb:db:0e:4d:36:5f:4c:d6:cb:ac:e1:a5:
a3:bc:b7:43:2f:71:32:99:a5:dc:1a:52:5f:7b:79:d5:53:9b:
58:cf:a6:bb:9e:b6:9f:a3:4f:56:eb:7c:dd:96:b3:ac:61:ab:
b5:d0:22:a4:d1:b3:c6:b1:40:b3:f3:4e:2e:4c:f5:03:b2:ad:
4f:e1:0b:00:fc:73:4b:e8:ce:ad:52:8e:46:45:4d:c3:51:a2:
43:97:b0:70:77:9f:7f:75:4f:42:c1:b0:92:b9:b9:21:6e:9f:
e2:f0:cb:6c:c0:b9:8f:84:5b:09:54:77:dd:af:5f:dd:ba:6b:
4a:63:4a:05:11:71:2a:87:e6:14:2e:f1:29:28:39:89:0f:45:
6e:36:ba:e2:cb:59:24:15:86:69:ef:7d:e9:f7:c2:35:e7:86:
45:04:cc:15:35:cf:0c:de:7b:8c:31:87:7c:d1:f0:c2:9b:1d:
4c:1a:4a:16:44:fa:17:7c:b0:81:03:52:14:12:4a:9c:1d:89:
45:84:2c:0b:15:3e:e2:c1:1f:7a:e4:93:e2:88:19:26:19:2b:
0c:87:1b:b3:39:52:4a:ae:09:ee:9b:6f:7a:64:fa:05:1f:5c:
38:a4:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:54 2025 by rpki-client