Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dOLYa2ghqmkcnWu4QXr4MIog-o0.roa
File: dOLYa2ghqmkcnWu4QXr4MIog-o0.roa (raw, json)
Hash identifier: 6c7klGQo+myJJ3G7Oezk/k9tE2SASuYy1VTYysWhs18=
Subject key identifier: 74:E2:D8:6B:68:21:AA:69:1C:9D:6B:B8:41:7A:F8:30:8A:20:FA:8D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2437C6B3AC103EC47F49B49BE2AEDC47
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dOLYa2ghqmkcnWu4QXr4MIog-o0.roa
Signing time: Sat 20 Jan 2024 00:14:11 +0000
ROA not before: Sat 20 Jan 2024 00:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:24:37:c6:b3:ac:10:3e:c4:7f:49:b4:9b:e2:ae:dc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 20 00:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e2d86b6821aa691c9d6bb8417af8308a20fa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:19:0d:d7:1e:3c:8a:82:a0:ee:4f:21:78:
ca:3a:3d:ca:8b:ea:8c:af:0e:53:b4:74:2a:ff:8b:
6e:36:26:50:3e:cd:af:25:fe:c9:bd:f5:49:13:88:
79:07:63:ad:84:39:ac:83:ed:74:4f:39:ac:27:75:
2f:56:16:f4:2c:d3:34:d1:bd:60:30:50:d1:2b:1e:
9c:eb:11:66:09:f1:e8:7a:93:3d:59:39:fa:98:a8:
85:d8:fd:50:c7:9d:f8:8f:d6:71:84:ae:22:46:60:
52:16:8e:1f:67:d0:c4:67:80:8b:42:bc:a5:ec:9c:
40:fc:30:5d:e8:e1:1b:7e:6b:81:d1:d2:a3:e3:73:
df:71:b9:f1:0e:c8:18:90:48:16:ac:d6:f4:b4:ad:
5d:ba:6f:b1:99:c6:a0:2a:45:1f:83:c7:5f:9e:bb:
2e:f9:47:1a:f6:59:44:7f:da:0e:ca:4e:ac:5b:61:
84:c6:ea:cc:76:d9:d9:65:c5:96:f4:ec:cf:51:13:
3f:3a:11:4e:f5:1d:53:b0:5a:a2:23:f5:7e:23:84:
ac:f2:bb:d3:ba:3a:19:db:6a:17:b2:6f:71:77:82:
00:84:88:77:64:0e:20:c0:5e:37:ac:26:d2:ce:cc:
0d:b8:bb:20:e7:af:33:5f:92:3b:cb:2f:e7:d3:32:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:D8:6B:68:21:AA:69:1C:9D:6B:B8:41:7A:F8:30:8A:20:FA:8D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dOLYa2ghqmkcnWu4QXr4MIog-o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c6:04:96:62:71:1f:0d:1a:2d:ec:58:62:08:37:18:63:fe:
65:42:b4:1e:be:fe:d7:63:28:da:cd:41:9b:8c:2c:35:04:5d:
47:31:99:d1:2e:34:e5:88:2a:26:b9:fa:34:ad:9e:f5:00:b1:
a8:6e:20:fe:e7:c4:67:cd:53:09:db:0a:b0:cc:b6:b7:46:43:
a6:99:05:a6:26:4d:2d:36:be:e0:f7:63:60:4c:02:4a:f4:42:
e7:8f:39:22:52:6f:58:5a:73:a3:0f:24:d9:61:89:64:65:df:
dc:ab:73:3d:17:a5:8a:59:df:79:39:6b:d4:03:71:76:df:67:
f9:92:49:84:ac:37:a7:c4:e3:b7:f5:77:a0:51:a9:0c:0c:32:
16:86:00:57:5f:cd:07:0a:da:3e:60:f6:ca:fb:52:2c:58:64:
8a:34:17:0b:ee:8b:76:6b:44:e1:45:ae:7d:e5:9c:99:85:bd:
7d:7b:73:60:05:98:81:02:ea:26:61:6f:ce:4f:d4:11:da:bd:
f6:59:ed:70:42:6c:2e:de:a8:eb:47:7e:8f:5e:c2:20:ad:17:
10:25:b0:9c:3d:1c:d1:17:c3:59:a0:46:01:f1:1e:76:ed:7d:
8a:9b:d8:d5:6e:12:29:f3:14:7c:10:29:24:df:2a:22:e4:9b:
3d:6b:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:07 2025 by rpki-client