Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8ZWyVIEQaVIJzuvN6ByTh6J2RI.roa
File: c8ZWyVIEQaVIJzuvN6ByTh6J2RI.roa (raw, json)
Hash identifier: dPCM44CFE6Pw7e5PVrx9WsNZkUgIuytL5KKna2FloDQ=
Subject key identifier: 73:C6:56:C9:52:04:41:A5:48:27:3B:AF:37:A0:72:4E:1E:89:D9:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E31B89924C2A6346793CD152C3A87FA43
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8ZWyVIEQaVIJzuvN6ByTh6J2RI.roa
Signing time: Tue 12 Mar 2024 08:12:45 +0000
ROA not before: Tue 12 Mar 2024 08:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:b8:99:24:c2:a6:34:67:93:cd:15:2c:3a:87:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 08:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c656c9520441a548273baf37a0724e1e89d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:2f:4f:58:d3:59:b8:02:b7:92:8c:cc:6a:
29:bb:c7:68:f8:76:ab:ab:6c:ec:62:71:f8:6e:53:
b5:c2:29:a8:fd:6a:02:8e:81:21:1a:e6:f3:d6:49:
22:d0:c0:7b:08:11:cc:9d:56:6b:71:6d:6d:54:d2:
c2:7b:fa:e5:55:6b:12:ca:10:8d:1b:82:78:60:e6:
c4:02:f8:b5:ef:5e:b6:31:3e:58:30:01:77:8b:b6:
56:a1:76:37:a4:2f:b4:60:5e:30:f6:b5:ff:85:02:
ae:d6:ef:53:43:0f:aa:a0:98:83:a0:6a:ad:41:7e:
f9:d6:71:bf:a6:3b:62:a8:37:a1:63:6f:7d:db:0d:
71:83:9f:c2:09:65:e6:ff:22:82:72:32:74:4a:85:
62:d4:17:00:34:66:69:f7:4e:48:b3:5c:8e:1a:0a:
fa:cd:61:6f:0f:e3:87:16:f9:e8:36:8b:3b:af:91:
80:fb:f0:44:ef:10:a5:bc:6f:43:b8:c0:3c:b2:0b:
1b:46:6d:c8:31:da:0d:d0:cd:ea:a3:69:12:19:08:
90:b3:7a:f9:44:e2:05:45:3d:09:a6:f2:eb:a8:23:
7d:0f:71:5f:d9:1f:ff:06:54:ce:1b:f1:fa:ef:64:
18:2e:04:0e:02:e5:eb:0c:56:e8:39:4f:b3:17:75:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:56:C9:52:04:41:A5:48:27:3B:AF:37:A0:72:4E:1E:89:D9:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c8ZWyVIEQaVIJzuvN6ByTh6J2RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:b9:d2:bd:e4:5c:9e:4e:fb:fc:80:42:8c:99:80:6e:e7:a9:
d1:00:bf:44:96:3d:2f:90:ee:d0:8c:8e:d8:3e:87:9f:68:0b:
09:4a:fd:94:f0:54:49:8c:06:96:91:a3:7a:02:a1:28:4e:2e:
3a:c6:5c:23:47:61:50:66:44:56:8b:82:0f:9c:b7:dc:2f:39:
df:02:f9:d7:81:10:37:df:0e:e8:82:3a:4c:74:fa:2f:67:0a:
7f:0d:ca:37:a5:9d:2d:0b:ab:4a:ce:76:5d:82:a3:a4:e5:bc:
5d:9b:9f:5d:84:28:e3:e3:e7:67:68:79:fc:12:2a:9d:8c:8d:
e6:4b:ec:7b:3b:5e:18:56:98:32:5e:4b:12:0d:83:03:d1:cb:
ea:c6:7c:58:89:c5:ec:ec:d4:43:f0:6a:b3:0f:e5:61:5c:dc:
08:49:9c:e3:1a:1c:de:b8:34:bc:c9:28:9a:a1:91:cf:3e:75:
34:4b:15:d2:7f:0d:bc:5d:26:42:a9:7b:a3:3c:26:68:8b:fc:
2d:ad:33:03:90:0c:59:3a:2b:7b:50:a8:fa:a2:16:be:32:05:
16:87:24:ee:f1:72:4c:2f:96:c1:ac:c5:e9:e1:40:7b:53:a7:
a6:d0:34:9f:62:c6:48:8e:7c:7a:35:4e:f1:0e:32:b7:ac:42:
0c:b8:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:39 2025 by rpki-client