Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dnnLueDMAhY67wpXSalaQVgizJk.roa
File: dnnLueDMAhY67wpXSalaQVgizJk.roa (raw, json)
Hash identifier: P5utYN3BjPWyuJtuhxG1p1pEFLUsPyyG0/E+29SkMgg=
Subject key identifier: 76:79:CB:B9:E0:CC:02:16:3A:EF:0A:57:49:A9:5A:41:58:22:CC:99
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7D4561DA673F4CBBD77DC210ACFEAF8A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dnnLueDMAhY67wpXSalaQVgizJk.roa
Signing time: Tue 06 Feb 2024 07:15:15 +0000
ROA not before: Tue 06 Feb 2024 07:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:45:61:da:67:3f:4c:bb:d7:7d:c2:10:ac:fe:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 6 07:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7679cbb9e0cc02163aef0a5749a95a415822cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:1a:c0:7c:4a:b9:69:1a:fb:f4:02:39:54:
8e:5c:8d:d1:e2:9b:35:78:07:58:ab:99:15:e0:51:
fd:b0:82:ec:64:98:5d:e9:73:06:a1:76:7c:cb:79:
ef:cf:02:ce:01:11:bb:f3:21:2c:75:42:ca:68:a5:
a0:4b:c8:8a:ab:67:2a:09:23:a1:42:6c:7d:30:f0:
b8:07:46:4a:22:8b:27:f3:23:0b:47:08:26:30:9c:
d5:23:88:0b:b2:b1:a8:44:a7:fa:35:8b:b4:25:92:
ab:e1:3b:8d:5a:c7:14:49:30:89:92:46:b2:d7:12:
db:38:c3:7a:dc:16:00:f9:87:e7:0f:31:1f:3d:27:
9d:79:fe:71:5f:f7:18:07:36:62:56:cd:ab:7c:a4:
3d:b2:73:61:1d:87:17:25:18:76:50:17:4c:c1:80:
fa:9e:cb:88:ca:a0:42:ac:d1:1a:5c:88:71:02:5c:
62:bc:99:13:55:aa:64:c0:b9:3c:3d:15:04:5b:1d:
2a:92:41:66:65:f8:08:34:a0:aa:63:e0:e1:88:8c:
99:53:c4:10:78:f4:a3:dd:5a:52:35:ac:ba:04:e4:
e7:d7:06:8d:75:33:48:0d:91:78:b0:62:1f:68:bb:
bc:1d:97:02:9a:12:51:d4:15:ed:74:58:47:f3:b3:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:CB:B9:E0:CC:02:16:3A:EF:0A:57:49:A9:5A:41:58:22:CC:99
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dnnLueDMAhY67wpXSalaQVgizJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c4:74:b3:c7:2d:c2:96:8d:5c:46:a6:2c:32:b2:f3:d4:e5:
16:ca:24:c1:a3:eb:da:f7:5e:e0:68:36:c0:8e:d0:d3:0e:09:
a6:74:be:a1:ae:ca:c7:53:bb:d0:1c:82:40:b4:52:5f:da:3f:
9a:3a:79:cf:8c:f5:b1:c9:d6:3d:20:c7:78:71:b8:9a:9f:63:
8a:42:0f:51:7e:db:b1:3b:59:66:77:ac:ee:3e:a4:9e:7a:36:
c6:1d:04:11:11:e1:9d:fc:f7:51:95:1f:89:8c:bc:bd:45:cc:
98:10:ee:b4:29:dc:3e:16:d6:86:0a:68:ec:61:26:fd:fe:e6:
be:8e:07:84:18:34:a3:49:ae:bf:fc:30:23:58:4a:7c:34:4a:
3b:13:e5:85:84:2b:14:93:62:57:ae:aa:aa:fe:d5:52:75:df:
e4:a2:f3:71:cd:ae:90:36:72:fa:23:80:f3:cb:ec:6f:11:d2:
39:9d:1e:6c:90:e9:6f:c8:fc:a0:a9:5c:39:16:7d:82:ce:fa:
76:e8:2f:55:2b:5e:94:b1:81:6a:18:c6:16:45:12:a1:b8:3c:
11:4b:8e:e4:67:94:ce:17:89:c2:23:ce:4a:fb:fd:60:99:b1:
dd:4e:e3:82:8d:e6:37:37:31:c5:86:d4:79:c4:2e:67:78:78:
e0:a6:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:02:09 2025 by rpki-client