Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dlmpPqrjjxCDoNyV6l-RqYsWm74.roa
File: dlmpPqrjjxCDoNyV6l-RqYsWm74.roa (raw, json)
Hash identifier: 6eixTKFD6BtRsUC6wU6fa8hb8ENRRc4lnUEHjN9+xAo=
Subject key identifier: 76:59:A9:3E:AA:E3:8F:10:83:A0:DC:95:EA:5F:91:A9:8B:16:9B:BE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD016BF7C35AA1DDD3130F01A5E9FEE4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dlmpPqrjjxCDoNyV6l-RqYsWm74.roa
Signing time: Thu 22 Feb 2024 09:12:48 +0000
ROA not before: Thu 22 Feb 2024 09:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:16:bf:7c:35:aa:1d:dd:31:30:f0:1a:5e:9f:ee:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 09:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7659a93eaae38f1083a0dc95ea5f91a98b169bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:06:32:f9:c0:1e:22:07:18:c7:f3:52:6e:
06:e0:a4:f6:ae:e0:20:d8:3e:b2:88:6b:aa:58:15:
26:b5:41:80:43:17:f6:20:6c:81:f5:5f:5d:7b:ef:
77:4c:a3:43:da:35:c5:85:fd:4b:e0:cc:8f:1e:af:
3d:e1:1c:27:83:eb:e0:24:4e:59:5a:7f:27:bd:70:
9c:13:96:3e:d1:db:2b:ee:87:ed:29:cc:94:ef:90:
a0:7c:ea:f4:0e:a6:22:fe:7a:6b:42:21:6c:2f:ba:
d8:b4:ce:f0:f9:9c:2a:4c:ed:f9:87:58:49:64:d5:
31:9e:6b:0b:13:ed:1b:b5:55:a9:c9:41:0e:c6:6b:
9b:a8:c8:f9:5e:95:0e:1e:ee:42:b3:5e:03:3f:36:
cf:04:ec:f7:6a:c4:7f:43:9b:38:b0:65:fe:b5:a0:
7f:03:a4:9c:c2:47:e4:45:d9:3d:d1:70:c2:2b:f3:
63:26:27:96:7a:e0:ef:45:bc:f6:34:a6:ec:91:d3:
d4:5c:43:37:8e:db:a3:d8:43:ec:26:99:59:55:11:
cb:01:78:a1:65:9c:8c:6f:1a:50:d2:66:d0:88:b7:
f1:e6:2d:46:15:36:67:b4:9d:89:5c:cc:31:9a:86:
d9:5b:58:87:54:6a:2e:c8:2d:60:bc:f7:86:b3:dc:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:A9:3E:AA:E3:8F:10:83:A0:DC:95:EA:5F:91:A9:8B:16:9B:BE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dlmpPqrjjxCDoNyV6l-RqYsWm74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:9b:3b:45:ac:f4:b0:a4:d6:e3:05:c1:53:9f:82:4a:a4:23:
fd:f9:4f:18:a9:b0:54:39:9d:7f:d7:f8:e5:ba:18:23:3d:b2:
77:81:f5:a3:62:b0:35:7c:15:70:8d:81:62:9f:93:3d:8d:c8:
14:f7:c8:15:8c:d4:90:d8:95:e9:9f:af:71:04:81:e0:18:08:
43:b4:13:54:51:74:4d:ac:3b:c1:e3:db:bd:38:b3:fe:d9:a7:
4f:6b:86:e6:ce:35:92:bf:88:92:14:56:70:61:be:6f:61:72:
5c:97:39:5a:d1:64:2c:c1:ba:53:68:e6:ce:7e:83:92:d4:a3:
8a:03:c1:76:63:2b:09:f4:41:f0:fe:b5:bf:97:c4:d2:4d:5a:
a2:39:49:42:68:29:3f:36:92:3c:e9:34:40:53:3b:63:9a:55:
33:65:12:26:d7:7b:8c:84:56:04:5f:2a:18:3a:4c:19:85:66:
c5:fd:70:2d:33:e4:51:47:a9:59:93:ea:6a:81:ad:16:9f:ef:
85:ca:e6:34:a8:44:93:64:96:05:e3:b3:0f:05:23:af:61:81:
8a:b5:9f:94:75:ea:34:87:b6:d9:75:d4:38:2b:b8:56:bd:2a:
ae:1e:a9:4c:18:59:bc:83:d1:56:dc:f5:f5:4f:2a:be:42:6e:
c9:63:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:07 2025 by rpki-client