Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eLOayoYrB_bUBKIbOfvpjMaVv9w.roa
File: eLOayoYrB_bUBKIbOfvpjMaVv9w.roa (raw, json)
Hash identifier: sqmmvBapbWWk4OEnOklHheRg93OBtcXCFDoCBei6zKo=
Subject key identifier: 78:B3:9A:CA:86:2B:07:F6:D4:04:A2:1B:39:FB:E9:8C:C6:95:BF:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBEB0A9C79F3A2060BF3DEF638F54D26A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eLOayoYrB_bUBKIbOfvpjMaVv9w.roa
Signing time: Mon 08 Apr 2024 17:10:32 +0000
ROA not before: Mon 08 Apr 2024 17:10:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:b0:a9:c7:9f:3a:20:60:bf:3d:ef:63:8f:54:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 17:10:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b39aca862b07f6d404a21b39fbe98cc695bfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:8d:d3:01:3d:b8:42:88:fc:ac:21:b9:b5:
89:35:26:2c:db:b2:59:a0:cb:24:ba:f0:f2:6f:8b:
91:04:33:2d:a8:ee:b5:29:1c:1e:ae:cf:f5:51:02:
a3:70:6a:7f:09:ab:3b:b4:fb:5d:f1:44:8b:e5:4a:
66:a8:7a:7b:80:6b:48:4a:3d:33:89:87:c1:2a:f6:
11:59:3e:30:92:d6:f6:0d:64:ad:80:1c:11:03:22:
a0:c3:a5:78:da:05:51:3f:c5:54:e9:48:d0:04:6c:
7f:9d:00:ef:e2:77:17:6a:37:04:a0:e8:6f:e3:e1:
40:2d:86:74:03:d8:bb:bc:b7:a4:9e:3b:b1:03:90:
0c:1c:92:98:86:c8:de:b3:fe:45:bc:f6:bb:61:f4:
7a:57:0d:33:84:00:72:b8:8d:71:1c:7c:17:30:47:
25:f8:a6:10:40:bf:55:7e:59:34:a6:64:ff:d4:41:
1c:ca:5f:d8:39:1e:31:16:1e:bf:32:6a:68:24:d7:
3c:84:3f:40:3e:9c:7f:c6:fa:69:d3:0e:9b:49:15:
ca:42:42:20:7d:08:63:35:fe:5c:b7:89:30:25:fb:
3c:cd:ab:e5:30:f7:ee:3f:7b:fb:63:d0:fc:b2:40:
f3:fb:0f:69:7e:fe:c4:11:41:5f:e7:3e:a9:c4:ab:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:9A:CA:86:2B:07:F6:D4:04:A2:1B:39:FB:E9:8C:C6:95:BF:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eLOayoYrB_bUBKIbOfvpjMaVv9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:df:40:1c:57:f3:36:80:b0:2c:6f:66:83:68:c5:19:1e:c7:
15:8e:db:19:ca:89:e2:c2:ca:2d:c0:95:94:97:68:75:87:bd:
ce:3e:16:15:9b:5f:91:0b:7f:f2:a0:cf:be:f1:dc:f5:c9:2e:
c5:e6:f1:ae:14:de:a3:e1:c5:7b:1c:22:e9:37:5b:61:bf:e6:
c3:2c:cb:cb:67:67:34:fa:72:11:88:66:8c:70:a2:12:88:e6:
bd:cb:d6:b2:87:77:76:71:80:04:3f:9d:c3:b4:17:d8:91:88:
9c:4d:49:8d:48:c0:56:66:56:2a:f0:0e:4d:14:ad:bc:a7:42:
d8:51:6c:ae:72:6e:49:cb:f9:96:ab:e5:95:2b:27:bc:3b:5c:
f5:58:70:1c:16:4a:70:b7:0e:cc:da:81:a0:0c:85:f3:90:d5:
9c:b2:c7:73:f0:29:ac:44:2e:e9:f0:c3:7b:68:60:7c:dc:0c:
ed:ad:78:fb:8e:f0:11:c5:63:ef:37:76:08:94:22:b8:1a:6a:
c5:21:d5:87:7e:1d:32:53:31:2a:e6:ce:ef:10:2d:2a:bc:0e:
f8:8c:7a:9d:d6:09:71:67:96:d1:d7:9d:bc:01:cf:6c:2f:44:
41:e7:5d:84:33:d5:f8:62:26:72:56:60:7c:08:dd:be:80:21:
a0:29:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:09 2025 by rpki-client