Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cYtJnVYPnQOzx8QyxCIDdnsdRmI.roa
File: cYtJnVYPnQOzx8QyxCIDdnsdRmI.roa (raw, json)
Hash identifier: 2zA+dp7gx57ANhSECqmU8xMCKwg8Ts3Hwvcfm7Py3LU=
Subject key identifier: 71:8B:49:9D:56:0F:9D:03:B3:C7:C4:32:C4:22:03:76:7B:1D:46:62
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF37FFDECAF5F0D46677EC562451F27F0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cYtJnVYPnQOzx8QyxCIDdnsdRmI.roa
Signing time: Wed 10 Jan 2024 13:11:40 +0000
ROA not before: Wed 10 Jan 2024 13:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:7f:fd:ec:af:5f:0d:46:67:7e:c5:62:45:1f:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 13:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718b499d560f9d03b3c7c432c42203767b1d4662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:ed:30:d4:94:7a:37:8e:9d:69:25:96:ca:
32:65:d4:77:d2:05:b6:fb:b3:ec:46:71:f9:68:8e:
b3:90:e0:21:57:38:50:f6:55:22:17:17:80:1c:f4:
e7:d4:16:0e:1d:9b:eb:9c:a5:fc:d6:e2:4c:f5:d4:
ea:5b:1e:1d:dd:6b:7e:1e:48:a1:91:4f:6b:dc:23:
88:9f:52:fb:7f:4d:c7:f7:e5:f7:42:fb:79:e9:08:
64:45:de:f9:b6:df:a3:5a:dc:57:11:98:76:63:d8:
af:0b:5c:34:57:56:18:25:1f:21:d3:97:7a:52:b7:
13:51:c6:45:5a:79:be:f9:38:f4:b5:bd:7e:74:30:
67:51:4b:56:c8:db:40:a9:2b:f7:0f:27:0b:56:cf:
36:15:74:23:a7:2e:b5:8d:40:4d:34:89:37:95:46:
b2:56:40:d2:62:32:28:33:1b:8c:ce:d4:00:45:a1:
e2:59:44:df:41:75:32:53:9b:1f:4d:6d:41:63:b4:
b5:e2:b9:57:32:5b:64:9d:a6:a6:e6:24:7a:44:41:
ba:14:ae:94:40:ba:a0:a5:0e:d4:69:18:53:89:4c:
19:dc:d5:9d:f0:08:46:2e:97:9b:69:4f:2f:52:6a:
bc:2c:87:d0:eb:e4:1f:09:7e:db:0d:f8:9b:01:45:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:49:9D:56:0F:9D:03:B3:C7:C4:32:C4:22:03:76:7B:1D:46:62
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cYtJnVYPnQOzx8QyxCIDdnsdRmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b0:ae:5f:b5:c7:80:f0:12:01:06:d6:d4:ec:a5:a4:aa:e7:
6e:10:67:0e:47:6e:c5:d5:06:e7:bd:80:45:b6:50:c4:6f:3c:
cf:ce:a4:ad:b6:cb:8b:a2:d1:ff:be:d0:4e:37:4a:e7:5d:cf:
2d:86:ac:c6:f1:f1:56:83:07:aa:be:36:16:9f:8c:a2:e1:56:
22:dd:20:6a:43:80:c4:d6:c4:fe:9c:07:f1:d7:0c:0e:bd:43:
66:be:18:44:ec:93:db:3a:d1:33:b4:65:8d:b5:99:02:4d:2c:
40:f9:0a:02:a2:e7:5d:33:03:23:f9:9b:da:3f:4f:21:14:a3:
91:94:15:f5:6b:eb:86:3c:c6:9a:5a:6c:a8:48:d7:84:28:e2:
f3:28:8e:4b:91:8d:0d:d6:e4:23:85:ce:fa:69:c0:ef:c3:97:
c2:fc:3d:17:05:e8:29:7e:43:f7:66:4d:9b:2d:14:c5:af:64:
fd:4f:5b:99:b7:50:96:33:eb:0b:84:b9:13:93:36:dc:d1:78:
7b:54:0b:9d:ba:ed:07:9d:53:14:0a:67:87:4c:b3:af:e6:35:
e7:08:cb:81:77:d1:26:f7:de:38:a3:d7:15:2f:23:fb:f1:d9:
23:9b:00:cb:e0:fc:f7:ff:17:56:39:0b:60:b7:3d:bf:69:51:
c4:9c:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:38 2025 by rpki-client