Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8-nYYpVzjl3Nzc_2iEztWG33do.roa
File: c8-nYYpVzjl3Nzc_2iEztWG33do.roa (raw, json)
Hash identifier: Uf/HPJAuuxXbfpH8JNp7qKmTNvIMWVMJE9yNkp2kgiU=
Subject key identifier: 73:CF:A7:61:8A:55:CE:39:77:37:37:3F:DA:21:33:B5:61:B7:DD:DA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E26CA36BDF58B4FF241E30C72A9E6B6D1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8-nYYpVzjl3Nzc_2iEztWG33do.roa
Signing time: Sun 10 Mar 2024 05:16:10 +0000
ROA not before: Sun 10 Mar 2024 05:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:26:ca:36:bd:f5:8b:4f:f2:41:e3:0c:72:a9:e6:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 05:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73cfa7618a55ce397737373fda2133b561b7ddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:f5:be:c1:c8:d1:da:e5:cb:90:42:ec:8b:
b9:2d:96:e9:32:b9:09:2b:2d:2c:57:d2:1a:d1:09:
6e:4d:96:1f:fa:5e:fc:2c:61:09:3d:c8:86:2d:b8:
d4:b7:1f:dd:72:79:69:eb:bf:23:c9:bf:65:84:3a:
4a:5d:74:35:64:e4:71:9d:9f:05:59:64:5a:60:7b:
d5:e8:07:c5:2f:95:e5:00:f0:0c:39:86:c0:69:50:
7f:53:75:38:e4:70:2e:a0:76:e8:00:68:91:57:29:
e8:d2:b5:ce:d1:2e:31:0d:1e:69:ee:82:c1:ae:3b:
28:41:02:b3:d3:18:11:bb:07:89:59:f7:e9:7f:be:
68:9c:d1:95:79:02:e5:14:2b:7e:44:ce:4b:e9:37:
51:ee:da:a6:e1:94:00:5e:75:a7:8b:86:56:e8:2c:
99:4b:b4:df:5a:91:e3:25:62:49:55:e6:6a:24:e5:
4c:26:89:8e:9a:99:77:2e:36:27:8b:05:0e:37:1b:
e1:1d:a6:85:cd:06:8a:f9:4a:05:38:e5:de:62:49:
97:62:73:76:f7:c9:72:40:f4:49:6b:2c:24:ec:fe:
2b:41:30:76:32:3c:6f:ab:3f:97:c9:c1:b0:d8:cf:
e3:ed:5e:80:8c:9f:c6:b3:da:b9:e4:58:1d:03:0b:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:A7:61:8A:55:CE:39:77:37:37:3F:DA:21:33:B5:61:B7:DD:DA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8-nYYpVzjl3Nzc_2iEztWG33do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:96:fe:ed:41:f5:db:1f:d7:7e:0e:5f:4e:fc:fd:4d:6c:c1:
30:c3:68:c6:9f:15:40:d3:52:1d:e0:77:5a:c8:54:58:06:1d:
1e:68:25:95:15:2c:a1:dd:4d:77:97:8a:24:a5:7e:d2:b1:4d:
17:70:62:8c:6a:49:c3:a1:78:8d:6d:7b:c2:63:94:e9:a2:6e:
52:e9:5d:8d:0c:28:42:ca:61:55:02:7e:55:ef:06:6a:0a:c2:
b9:f1:df:23:98:91:6a:b0:2e:af:fd:71:32:63:90:84:07:be:
98:cb:f9:6e:17:cd:4e:d1:57:c1:af:e2:a9:26:b6:bd:49:6e:
d5:54:52:d8:d3:eb:19:b3:e4:12:3a:ce:df:0b:93:db:aa:ae:
09:c5:13:c7:77:bd:83:78:39:07:db:6e:e9:80:9d:f4:76:da:
6d:29:21:7c:db:54:24:49:b2:e1:b4:97:5b:ef:66:74:a7:da:
de:47:9e:fb:37:6a:76:cd:9f:c4:c9:dc:00:cd:50:7f:d1:d0:
ca:85:2b:ab:1b:ea:da:aa:a6:9a:8b:f1:0e:33:46:60:08:69:
44:45:e8:9c:45:f3:d7:23:9b:db:7d:35:48:86:09:18:96:c8:
bc:c9:04:48:2b:5c:2a:ca:45:0e:2d:60:61:f2:1a:57:9a:c0:
1f:e2:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:36 2025 by rpki-client