Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g_zGZAGFt2cTZ6txAIaF84qVqH8.roa
File: g_zGZAGFt2cTZ6txAIaF84qVqH8.roa (raw, json)
Hash identifier: EfEGONcD6ye3/cSTZJD2AkKAbtdVIlMVkI6ZrVkemuw=
Subject key identifier: 83:FC:C6:64:01:85:B7:67:13:67:AB:71:00:86:85:F3:8A:95:A8:7F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E491B3BB96AB3D3ECAD4864C430863AE3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g_zGZAGFt2cTZ6txAIaF84qVqH8.roa
Signing time: Sat 16 Mar 2024 21:11:45 +0000
ROA not before: Sat 16 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:49:1b:3b:b9:6a:b3:d3:ec:ad:48:64:c4:30:86:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83fcc6640185b7671367ab71008685f38a95a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:a4:df:ad:5b:a6:6b:27:2c:46:01:c6:88:
e6:15:d3:ab:ad:38:df:91:d4:25:3d:18:cd:37:ff:
ad:20:a7:bb:e9:20:f7:9f:97:8d:58:8b:74:91:00:
c6:22:82:f7:68:6d:cd:54:5d:12:83:c5:4c:13:02:
eb:68:44:c5:76:b2:83:bb:d8:a1:38:ca:cb:9d:a1:
30:a4:57:42:c0:42:db:cd:46:39:4a:c6:3a:92:a3:
0a:14:5c:9a:31:08:9f:41:f9:74:0d:04:b0:00:23:
5a:a1:c5:79:43:40:f6:2d:c9:a2:3a:24:7f:01:22:
9c:25:3b:dd:92:62:53:66:92:8d:d6:8a:f0:9d:e6:
b6:64:f3:7d:ca:c4:94:d9:15:16:6f:b0:9f:f1:03:
25:9c:4b:27:84:49:21:e6:e3:33:9f:1f:d9:f2:69:
23:5f:65:bd:95:74:e0:a3:4a:b8:16:ad:80:0d:a1:
1a:59:67:32:eb:06:58:8c:5e:7b:82:e6:0f:c6:50:
88:8d:f0:78:f7:c1:53:c6:29:0a:f5:48:75:e6:bc:
5a:3b:86:9a:10:0b:c4:8f:0e:2f:fa:f5:c0:e1:87:
9b:7a:ac:02:16:e7:4e:46:91:92:e4:31:8a:21:d1:
f8:b9:1d:ab:1a:a7:76:3e:31:a8:64:c5:df:3a:90:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:C6:64:01:85:B7:67:13:67:AB:71:00:86:85:F3:8A:95:A8:7F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g_zGZAGFt2cTZ6txAIaF84qVqH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c9:28:32:0b:a8:a8:46:be:bb:ad:c7:26:03:ba:c4:ab:a2:
7e:84:c9:a6:66:3b:fd:67:2d:65:b3:9a:a1:d3:94:a8:24:7b:
20:e1:6a:b6:c7:6d:6e:92:4f:7a:6c:23:62:45:5e:91:07:72:
82:d7:c4:55:18:df:e6:ef:ea:93:78:b0:1b:89:f4:54:03:4d:
c0:03:dc:b8:ad:9c:0b:cb:b8:f7:f0:52:05:da:70:71:b0:f7:
95:be:ff:be:24:dc:a3:09:cc:87:b4:f4:3c:fb:21:4d:00:75:
d2:ae:b4:82:41:96:a7:e9:01:5a:a4:2a:75:50:b6:d6:18:4b:
cc:a7:17:31:60:3a:3d:25:5f:97:29:a3:4f:ab:86:b9:62:e9:
8c:37:84:58:94:ba:93:de:2e:56:7e:95:a1:ed:ff:19:39:20:
f0:46:76:9d:31:98:06:fb:3f:5a:6d:1d:53:1e:f1:38:f1:64:
ea:4c:64:42:d7:3c:59:17:1d:3a:56:d5:e2:b1:ef:38:d6:a5:
75:55:13:63:6c:0d:a4:5e:e7:34:01:e2:7b:93:e7:5f:9a:40:
43:90:94:fa:a9:9c:61:00:a9:7a:c4:a5:f7:0e:c7:13:16:a8:
b7:c8:f5:f6:39:3a:57:dc:e0:8b:ec:c4:e0:97:96:48:b2:d3:
6f:3b:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:27 2025 by rpki-client