Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKNdApDVnOJmDcD9msJfKfi80Fg.roa
File: eKNdApDVnOJmDcD9msJfKfi80Fg.roa (raw, json)
Hash identifier: RTmDN3Ppp/6fbLrKdy8GqaveHWDd3EwpL/CjZDPwCHI=
Subject key identifier: 78:A3:5D:02:90:D5:9C:E2:66:0D:C0:FD:9A:C2:5F:29:F8:BC:D0:58
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D494E38D5C5E6EE2F01BCC3A44966EA82
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKNdApDVnOJmDcD9msJfKfi80Fg.roa
Signing time: Sat 27 Jan 2024 05:04:39 +0000
ROA not before: Sat 27 Jan 2024 05:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:494e:2016/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:4e:38:d5:c5:e6:ee:2f:01:bc:c3:a4:49:66:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 05:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a35d0290d59ce2660dc0fd9ac25f29f8bcd058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:f2:37:a9:f8:9e:c8:e8:08:85:df:53:bc:
80:a3:3e:85:06:b4:0e:34:6c:ad:f0:07:f9:2f:55:
2d:95:70:93:bd:e3:71:ab:39:11:16:0c:16:de:86:
c0:30:1a:35:58:ce:b8:cc:0a:46:c8:57:67:a5:9c:
aa:ae:46:04:4b:e7:af:e1:68:83:61:c0:94:67:2c:
a2:6b:11:37:c7:fb:47:17:34:41:92:80:04:95:a9:
b2:94:10:37:69:43:f7:8f:3d:5c:74:0e:42:f3:84:
92:d7:d5:a5:2c:b8:63:55:fe:36:6e:45:ed:6c:f7:
b0:47:4d:97:d1:cf:0d:8a:a6:ac:57:04:c1:89:02:
7f:28:a8:f5:3c:ae:aa:f9:3e:fd:ff:e8:a0:a1:fa:
6d:bf:25:d2:9e:86:3b:46:96:60:f6:e7:bc:84:79:
f3:d1:c2:a2:c4:2c:85:72:fa:87:01:fe:e7:72:da:
3f:54:6e:e6:93:a0:16:8f:bc:2d:f2:e4:48:1f:04:
ed:74:88:9b:93:e9:2a:2b:af:c1:46:c2:66:5b:6a:
7d:8d:b0:4d:76:94:3f:13:40:78:4e:5e:5a:d2:49:
0b:41:45:b1:e1:f8:ef:bd:18:cc:a2:e2:40:45:95:
a5:a4:ae:a9:c4:63:5b:63:9e:37:46:8b:2c:03:f0:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:5D:02:90:D5:9C:E2:66:0D:C0:FD:9A:C2:5F:29:F8:BC:D0:58
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eKNdApDVnOJmDcD9msJfKfi80Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e3:92:19:e1:6e:5b:ee:fd:2d:9f:07:09:69:79:c6:96:2a:
92:9f:1e:1a:ab:29:f8:bf:c5:d2:f8:e6:8d:30:55:2b:9c:7b:
e7:94:61:8e:0e:b0:19:9e:3b:8e:62:8c:ac:71:3e:7c:63:83:
7f:89:65:d2:a5:82:fa:cd:91:78:5b:67:7a:92:0b:38:3d:64:
13:73:56:95:e6:55:ef:79:0e:e0:d4:b6:16:ca:7c:30:90:1b:
fb:5b:74:23:36:36:ed:de:f2:b1:f1:09:52:d9:b9:af:b2:4e:
e6:b0:85:12:06:51:d8:40:3c:85:3a:c1:a7:84:59:ed:1d:5d:
69:90:d9:ed:f0:39:7a:eb:00:f4:14:3b:3d:0c:d3:11:8e:04:
94:31:56:00:35:12:c1:24:d6:1b:75:ec:d1:8c:65:56:64:33:
bc:e4:a2:2c:63:66:8a:c3:11:4c:36:b2:ee:04:f9:57:5d:c1:
8d:be:51:5c:21:09:44:c6:db:64:87:00:ad:f8:c1:2f:9e:f4:
61:46:46:ef:19:d5:2b:0d:3a:ff:d9:68:f8:96:2c:13:35:3d:
62:c8:71:bf:a7:c1:3a:89:dc:ba:49:0c:6b:a0:60:69:2a:dc:
68:ff:36:b9:e6:c3:ac:43:ed:9a:e8:b9:f4:d1:21:e1:29:62:
41:c9:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:14 2025 by rpki-client