Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c74khI239FSkv0XId7qNgszAs_M.roa
File: c74khI239FSkv0XId7qNgszAs_M.roa (raw, json)
Hash identifier: Uz6UVbhKJ7u7gVMc3SaIy23TyUXH/K/apKilC7BleuE=
Subject key identifier: 73:BE:24:84:8D:B7:F4:54:A4:BF:45:C8:77:BA:8D:82:CC:C0:B3:F3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D11C15A946FD5E7DD011BAE748E6FBBA1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c74khI239FSkv0XId7qNgszAs_M.roa
Signing time: Tue 16 Jan 2024 10:11:40 +0000
ROA not before: Tue 16 Jan 2024 10:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:c1:5a:94:6f:d5:e7:dd:01:1b:ae:74:8e:6f:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 16 10:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73be24848db7f454a4bf45c877ba8d82ccc0b3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:e7:0c:a3:ac:31:aa:6e:bb:75:22:20:7a:
c7:bf:8e:75:2e:eb:fc:4e:b6:ac:0c:cd:d4:a2:0a:
fd:f5:cb:9e:04:4f:61:2d:81:16:49:21:c8:92:83:
73:37:8e:3a:ea:69:73:a7:5f:52:b4:c6:8d:36:d2:
6b:1e:23:6d:ec:74:84:19:f6:0e:8f:61:15:f7:3b:
2f:03:0e:c2:b4:34:db:8f:f9:21:d3:c1:b3:2c:dd:
80:50:93:94:a7:c9:6e:75:22:fa:df:e7:b7:1b:2a:
52:ef:47:d6:e9:aa:c4:76:b8:4c:18:35:a0:fd:65:
57:42:f2:6c:08:c1:0d:f3:bd:9a:69:6d:d3:d9:82:
17:16:a6:8f:74:09:ff:b8:c9:e5:1d:24:9d:b3:87:
8c:80:f0:1e:5f:83:7e:6d:e6:61:14:25:7c:52:97:
36:ac:0f:84:0e:4c:c8:b4:86:7c:21:e3:4f:ae:a8:
86:48:eb:fd:d5:d9:ba:46:bf:91:e6:87:19:78:35:
c4:13:da:82:41:5c:2c:0e:66:21:40:20:ed:da:34:
ed:7b:37:37:cc:b9:7d:b0:cb:95:9d:8e:23:84:5c:
bc:16:0d:6b:17:3f:29:0c:99:73:8a:d4:f8:e6:6e:
83:eb:00:3a:77:f5:34:4c:48:ca:17:35:16:22:63:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:24:84:8D:B7:F4:54:A4:BF:45:C8:77:BA:8D:82:CC:C0:B3:F3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c74khI239FSkv0XId7qNgszAs_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:b0:e3:c8:16:10:54:74:24:a3:c5:7d:af:ec:59:d0:9e:99:
2a:ff:c4:c9:ec:93:28:e5:4c:fa:c9:46:a0:3e:f0:2d:fd:1f:
5e:04:f1:b4:db:c1:6d:94:b3:15:71:21:28:e3:96:e5:b0:ba:
9e:37:71:f4:01:c7:da:43:4e:f5:88:c7:67:5e:b8:14:c4:ff:
d5:92:2d:c3:4c:0d:7b:48:5a:23:e0:ec:cc:31:d3:4c:e7:54:
65:76:db:2b:f2:a6:6b:22:51:77:f1:4f:d9:a2:20:f4:f1:11:
a3:5b:00:c7:6b:3b:e8:59:9d:53:3c:37:d9:0f:b6:e7:1d:76:
57:37:0e:0f:4d:31:34:5a:92:a8:93:23:28:22:e1:b8:3f:dc:
92:c5:d2:10:17:a5:45:b9:5f:f8:b4:60:3b:fd:71:2c:d0:7c:
53:f8:d5:0a:a7:d2:33:6b:56:2a:cf:0b:7f:64:83:ef:36:b2:
63:57:1d:20:50:be:ae:4d:46:d1:b5:a9:e3:0a:86:69:4c:a5:
bc:c1:ec:43:da:46:f1:5a:a2:e1:cd:d8:32:f4:56:9e:e3:e4:
6c:38:73:3e:4e:5e:d0:fb:a7:5b:09:a8:f9:78:00:bc:54:0e:
bf:11:ff:b5:e9:45:62:7a:67:be:b9:31:36:c4:5b:4c:c6:97:
01:25:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:09 2025 by rpki-client