Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ctL74KzQUdlAj4kPjgrrgis5L5s.roa
File: ctL74KzQUdlAj4kPjgrrgis5L5s.roa (raw, json)
Hash identifier: VQ9Equckw8ZInQJmlrYxfJzOMPtA8ZtUorL4pxfeGRY=
Subject key identifier: 72:D2:FB:E0:AC:D0:51:D9:40:8F:89:0F:8E:0A:EB:82:2B:39:2F:9B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3AF85CD287366F96273F6149B11818B7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ctL74KzQUdlAj4kPjgrrgis5L5s.roa
Signing time: Wed 24 Jan 2024 10:16:11 +0000
ROA not before: Wed 24 Jan 2024 10:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:f8:5c:d2:87:36:6f:96:27:3f:61:49:b1:18:18:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 10:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72d2fbe0acd051d9408f890f8e0aeb822b392f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:d2:85:2d:d7:88:92:6b:eb:d7:10:ba:02:
33:4e:ed:96:57:c5:2f:64:94:9c:79:b6:f2:20:de:
11:83:69:7b:05:59:1e:80:8e:7d:d0:61:8c:51:e4:
83:29:fb:10:66:77:17:62:6d:db:2f:73:de:5e:78:
c6:2e:35:ec:b0:b2:8b:a4:e2:b5:9c:cb:4e:22:bd:
84:d3:a0:67:a4:e0:5d:06:4b:e0:d4:d4:42:68:14:
39:ea:83:22:51:80:c5:a2:6d:64:51:84:8a:02:64:
f1:27:c6:30:e0:c6:92:2a:9d:2b:f4:95:80:52:75:
8e:cd:da:24:e3:0b:44:fb:61:c4:fc:cc:ae:3b:c5:
2d:f1:ef:93:0e:f8:e2:c2:4f:b0:90:f1:2f:f4:ea:
f6:7b:f8:02:c0:c8:28:46:a1:03:60:cb:47:11:d6:
47:23:f8:76:6b:2e:97:c6:b6:af:26:27:30:8e:bb:
59:56:12:b8:80:79:09:c3:69:c5:5d:75:59:94:12:
d7:5d:8a:b7:fb:77:de:2c:02:fa:39:3c:70:a1:98:
d6:74:a9:2f:4b:d0:98:8a:d7:2a:d4:38:39:cf:c2:
07:2e:13:7c:9a:f3:c6:7e:ae:50:46:48:71:2a:f8:
1c:b0:d6:e1:16:87:a6:1f:c8:c0:9b:c2:a0:2d:9d:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:FB:E0:AC:D0:51:D9:40:8F:89:0F:8E:0A:EB:82:2B:39:2F:9B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ctL74KzQUdlAj4kPjgrrgis5L5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:12:40:1d:57:aa:a2:3d:7d:98:f1:50:6a:4c:68:e9:fa:c4:
7b:e7:e8:e4:47:f1:33:aa:01:99:83:19:78:1d:ac:88:e4:c9:
21:3c:9f:ff:f9:67:76:ac:f0:6f:ae:0d:86:24:2b:a5:df:71:
06:f7:9f:8f:9c:2d:7f:38:70:66:19:53:1e:a8:24:b1:eb:6f:
31:4a:94:eb:d4:d3:a4:88:c3:44:a2:e6:ed:91:0f:ff:01:21:
02:c3:0c:04:e4:cf:cb:6e:3d:30:f0:e5:03:ce:1c:a5:6f:31:
3c:4b:52:92:79:26:6d:8c:8e:0c:5e:3c:a0:05:77:bf:20:18:
3e:c3:ba:a0:57:72:c8:51:06:f8:8f:6c:fc:1b:e7:43:d1:80:
a9:fa:75:af:27:a4:56:01:0d:75:6a:77:70:3a:94:59:34:57:
ad:ce:21:35:7a:de:79:bb:b7:2e:51:a8:1d:99:e5:c4:8d:e3:
07:8a:a5:e8:8b:29:f9:f4:ad:56:a8:24:21:fb:8c:fa:b1:79:
9c:c3:04:4b:10:14:ae:a1:51:c9:24:24:d2:04:ad:09:38:e4:
7c:2b:40:c2:03:c0:6b:8e:f3:d7:1c:40:bf:f4:9d:32:fb:81:
70:12:a5:74:99:d2:03:fe:66:3e:38:3e:54:ec:a4:55:54:55:
db:64:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:18 2025 by rpki-client