Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h7xwaanIhjNSFxfdQ8mv-g-ryI8.roa
File: h7xwaanIhjNSFxfdQ8mv-g-ryI8.roa (raw, json)
Hash identifier: erpKo0qAfWQREXw3FJ0RYfWenUw1lEiKRTogxx0l4CE=
Subject key identifier: 87:BC:70:69:A9:C8:86:33:52:17:17:DD:43:C9:AF:FA:0F:AB:C8:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF567F7B3EA4BB9ABBC4A8DB6589B94F1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h7xwaanIhjNSFxfdQ8mv-g-ryI8.roa
Signing time: Wed 10 Jan 2024 22:04:40 +0000
ROA not before: Wed 10 Jan 2024 22:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:f567:97f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:67:f7:b3:ea:4b:b9:ab:bc:4a:8d:b6:58:9b:94:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 22:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87bc7069a9c88633521717dd43c9affa0fabc88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:c1:78:f6:f9:94:32:d4:fc:af:46:52:cf:
73:46:67:c0:9e:bf:08:23:c1:57:70:92:c6:3e:30:
ed:e6:25:8b:ae:77:68:29:e6:d9:e8:eb:57:91:c2:
7d:51:29:53:a1:7f:95:41:ac:2a:60:59:e7:53:14:
e6:e8:9a:b9:df:94:b6:b2:22:88:20:09:d8:84:ef:
c9:ea:6f:65:a0:01:33:ee:8c:66:b8:a2:cb:0b:4a:
3c:bd:84:9b:ea:5f:9d:a6:c0:c0:71:db:b8:54:9f:
7f:3a:d4:24:51:06:2c:f9:d9:e9:6a:90:4e:bc:78:
ac:2f:19:7d:77:ce:2c:3d:74:cd:04:33:54:dd:c1:
57:8b:64:6f:d8:96:09:59:51:da:c4:d4:cd:76:f7:
23:62:33:f6:3c:59:c8:91:1c:a4:77:b3:a8:4a:65:
fa:a0:66:15:62:a3:4f:ee:ea:48:85:1d:14:fe:11:
02:16:15:94:04:4c:e7:5c:1a:a6:4a:b2:7d:97:2a:
13:2a:3e:c3:95:3e:78:49:53:44:8b:00:18:2f:21:
8d:74:65:eb:f0:09:e7:b1:95:c4:fc:ad:18:c8:6f:
16:6d:7c:2d:04:b0:ff:f2:46:fc:4d:63:5e:1a:15:
a4:45:3e:d4:3c:60:ae:59:11:7e:a7:4c:c2:70:46:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:70:69:A9:C8:86:33:52:17:17:DD:43:C9:AF:FA:0F:AB:C8:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h7xwaanIhjNSFxfdQ8mv-g-ryI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:2f:7d:9c:94:01:16:5a:c2:49:fc:15:d4:5a:fa:7f:0b:53:
3f:95:a2:d5:b7:f2:ab:34:74:75:09:1e:e0:9b:40:10:bd:b9:
9c:38:d1:96:57:85:e2:21:92:16:73:af:18:3d:f6:08:89:64:
cf:ce:3b:c3:e1:ff:3d:93:0c:c3:d4:80:67:2e:c1:9e:b8:fb:
5b:f0:2e:25:e9:10:30:15:f2:63:65:02:33:ff:8e:12:ea:78:
00:b1:99:b6:c7:24:17:ce:6e:4b:2f:6e:52:79:7d:0f:a3:8b:
af:59:72:88:0b:8f:e0:8f:c3:40:73:03:3e:54:4c:73:41:aa:
14:b9:c3:40:f3:44:31:ee:89:eb:ef:99:73:b8:9f:91:ab:fa:
9c:41:fd:26:c6:af:f8:97:fb:98:04:03:3d:51:b3:95:e2:36:
2a:71:f0:9c:cf:33:d5:15:d3:bb:48:65:37:98:2f:bb:5e:bc:
9f:c7:62:33:67:49:74:da:a0:1b:5f:1a:1f:4a:96:9b:13:0c:
e1:0c:64:43:1e:f5:ab:7a:6c:9d:aa:a6:34:bb:44:18:44:65:
3f:24:57:d5:5f:5c:07:23:f6:cc:af:0a:2c:46:f9:ac:87:3f:
16:67:fd:c0:bd:95:d8:16:1f:d2:25:86:0f:f1:6b:35:9a:ea:
0e:d4:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:29 2025 by rpki-client