Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dplNULNAgIat1bVbrZCbKV1-Spg.roa
File: dplNULNAgIat1bVbrZCbKV1-Spg.roa (raw, json)
Hash identifier: ZpQ7HeEMXYtvz2c3fc9P5U752jAwA+SMOJO4U7oOfac=
Subject key identifier: 76:99:4D:50:B3:40:80:86:AD:D5:B5:5B:AD:90:9B:29:5D:7E:4A:98
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD9B7596F672741F8D7583339E79A9EB5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dplNULNAgIat1bVbrZCbKV1-Spg.roa
Signing time: Sat 24 Feb 2024 06:04:48 +0000
ROA not before: Sat 24 Feb 2024 06:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:d9b7:3306/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d9:b7:59:6f:67:27:41:f8:d7:58:33:39:e7:9a:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 06:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76994d50b3408086add5b55bad909b295d7e4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:7c:a6:ca:0c:6d:45:ac:3e:c2:cb:fe:97:
b3:4b:14:53:45:cb:1b:8c:69:bd:a7:a5:a8:a1:f1:
ff:54:02:b7:b9:30:4e:b0:1b:0f:d2:3f:7a:1d:42:
9a:53:d4:c1:54:0e:3a:67:eb:58:f3:7f:f3:13:55:
66:28:d9:65:37:41:63:91:ab:ef:89:f5:b6:0a:e5:
1e:bb:f5:3c:3b:ed:4c:a1:08:ec:c6:80:48:60:3a:
05:22:8b:fd:65:fd:32:32:2c:67:f1:5b:da:9e:ef:
b9:9c:48:8c:fa:a3:ba:b8:fd:f8:fa:8b:a8:cc:d3:
a5:3a:aa:35:19:77:39:4a:8c:66:67:6c:53:99:47:
91:65:e9:04:93:d6:43:fc:ac:28:59:d1:71:0d:16:
b5:87:86:9b:18:a8:c7:b6:54:88:a7:fa:8c:40:83:
99:7b:5d:20:82:b6:b6:59:c1:bc:b8:2a:8b:3f:04:
3b:29:99:15:ee:05:f7:2f:f7:9e:99:14:2c:c4:f9:
62:4e:84:0d:75:aa:10:9a:d9:8c:4e:f0:43:2b:ee:
15:aa:ae:c2:22:aa:8b:71:48:38:94:95:d7:cd:a4:
fd:93:ff:28:c1:aa:7f:b7:5f:22:5d:db:d3:9c:6c:
b2:31:0f:ec:6d:8a:f8:a1:7d:64:67:32:de:81:83:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:4D:50:B3:40:80:86:AD:D5:B5:5B:AD:90:9B:29:5D:7E:4A:98
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dplNULNAgIat1bVbrZCbKV1-Spg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:6e:21:8e:4a:a1:7d:ca:2c:f6:92:8b:af:4c:1a:68:12:b9:
6f:3f:25:eb:74:e6:0a:90:fb:f2:af:d8:79:cc:b9:83:94:dd:
7c:31:96:90:27:aa:20:8e:5c:37:cc:dd:28:58:a3:e7:91:c7:
65:c0:cd:ab:b5:f7:42:db:c8:0f:d0:46:09:44:e2:fa:c4:41:
87:66:eb:a8:29:5e:f7:be:d9:c8:0d:8c:4a:3c:ad:96:d0:63:
52:7a:40:be:42:64:08:44:07:dc:1f:91:0d:a0:88:0d:36:97:
38:ef:07:fa:8a:6e:f2:92:f5:c4:59:4c:93:15:4e:f8:57:f9:
ab:23:7e:b7:f9:a1:a6:21:ff:f8:07:b9:f4:89:59:58:a9:6a:
d0:7f:87:bc:fd:0a:95:0c:78:a0:af:3a:80:02:44:69:8f:88:
7e:dc:22:1b:67:23:25:df:0b:d6:e7:35:d5:fe:0c:53:06:41:
b1:0f:cf:e8:e4:df:bd:e4:03:c3:09:89:77:55:9d:8c:25:ec:
55:f1:1f:1a:91:b3:25:e6:23:bd:bf:9f:96:05:0d:d3:f4:39:
a6:d5:e4:3f:24:69:dd:b7:3b:ec:76:d6:f2:3d:82:a5:1a:50:
9f:c0:f3:5e:a6:92:9f:78:06:2a:5d:97:5d:10:fc:5e:58:9a:
43:62:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:39 2025 by rpki-client