Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f3eR2TrLdeXz4yztxEiVQ9lmr9k.roa
File: f3eR2TrLdeXz4yztxEiVQ9lmr9k.roa (raw, json)
Hash identifier: j93MIPzjmyFlhd1De8DSJJfmTP6gNB1iOMm92fkVgQo=
Subject key identifier: 7F:77:91:D9:3A:CB:75:E5:F3:E3:2C:ED:C4:48:95:43:D9:66:AF:D9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE58F6135F89B8FFF6ED8DB652E051FAC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f3eR2TrLdeXz4yztxEiVQ9lmr9k.roa
Signing time: Sun 07 Jan 2024 20:13:48 +0000
ROA not before: Sun 07 Jan 2024 20:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:8f:61:35:f8:9b:8f:ff:6e:d8:db:65:2e:05:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 20:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7791d93acb75e5f3e32cedc4489543d966afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:32:4c:e8:4a:2b:1f:60:3d:6b:3b:af:24:
52:43:e3:6a:3f:13:07:ce:63:22:1c:1c:6a:33:4a:
cd:c9:bc:11:82:b6:04:5c:86:40:0b:20:32:cc:95:
86:fe:1d:e0:24:0c:63:e4:ff:76:f2:dd:d0:ab:aa:
b8:b0:36:d5:f1:fe:88:a0:51:e4:29:f9:76:2f:eb:
1c:0d:23:91:78:56:97:01:4e:37:cf:cf:b2:38:5a:
bd:8d:8b:16:83:1d:0f:1c:ac:52:96:ad:ef:0f:7b:
8f:c6:08:34:fd:3b:cb:0e:14:10:1a:8b:0c:f1:6d:
16:3c:bd:cc:c0:69:67:f7:b0:57:5f:91:98:31:d8:
f8:ef:94:f2:54:d1:d7:8b:99:cf:88:d4:fb:62:79:
13:d7:4a:33:f4:d8:7f:48:83:b6:03:2d:62:20:8a:
87:18:1c:72:86:89:33:7b:55:e3:f1:ab:86:72:90:
e0:85:8b:90:c8:ca:3f:dc:a9:8a:8d:11:72:96:a6:
f4:87:93:0e:42:69:17:ba:2b:f0:c9:9a:b0:b0:02:
13:cf:d5:87:d9:47:ea:d0:79:e8:e1:53:4e:54:23:
8c:bd:5e:f0:c4:a4:18:f1:60:39:19:30:4d:ff:98:
99:f9:b5:22:08:4e:d6:f9:ce:31:74:fe:6f:fb:5c:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:91:D9:3A:CB:75:E5:F3:E3:2C:ED:C4:48:95:43:D9:66:AF:D9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f3eR2TrLdeXz4yztxEiVQ9lmr9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:ec:d7:93:15:b4:8b:bd:8c:1e:10:ce:90:a8:57:59:f8:b4:
75:19:db:cb:9f:04:2a:77:5a:58:03:58:01:11:8e:55:15:8c:
37:0b:ce:a6:e7:6e:d7:76:b9:b2:ce:bb:a7:b0:94:90:97:bb:
76:1f:00:cd:f6:87:b5:63:1e:2d:5e:9c:d8:f9:aa:12:f9:ed:
0b:91:d9:0e:8d:fe:17:64:11:49:ab:83:6d:8c:1f:4c:67:f4:
1b:a3:52:68:69:79:fa:ad:9b:15:eb:21:f9:27:4c:92:bd:f8:
22:90:0b:9a:09:b5:49:f0:1c:31:5e:d1:fd:db:60:04:6d:53:
38:40:c9:a7:53:36:f8:cd:c7:09:ac:ff:87:73:98:76:db:ad:
e6:2f:8a:04:f5:a9:51:a8:b4:8f:d1:57:09:1d:0a:42:a3:83:
c0:9e:fa:6f:af:16:74:1b:3f:2a:90:43:26:4a:32:92:b9:3d:
96:d9:b7:58:6a:80:49:0d:18:db:29:e7:06:a5:08:b3:81:f9:
9d:d2:2f:1a:b8:78:9d:30:fa:41:46:e9:af:c5:2c:00:ff:3d:
66:e7:0a:1d:6d:38:c3:17:0b:45:a0:7b:c5:6b:a4:79:99:a2:
83:be:11:f5:93:d1:28:d9:d9:4b:36:c6:c4:63:01:30:f6:87:
c3:f0:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:27 2025 by rpki-client