Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i9YnPEuBqPAcJ5l_Rwk61KwkqBc.roa
File: i9YnPEuBqPAcJ5l_Rwk61KwkqBc.roa (raw, json)
Hash identifier: OjfKlTlnBgDOwYrUG8WvlgsEltMlBA9eMQM4DfYYXgo=
Subject key identifier: 8B:D6:27:3C:4B:81:A8:F0:1C:27:99:7F:47:09:3A:D4:AC:24:A8:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAFE262F56BD4C4EDD3C3675F87D309EE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i9YnPEuBqPAcJ5l_Rwk61KwkqBc.roa
Signing time: Thu 28 Dec 2023 10:04:58 +0000
ROA not before: Thu 28 Dec 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:afe1:c3ef/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:e2:62:f5:6b:d4:c4:ed:d3:c3:67:5f:87:d3:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd6273c4b81a8f01c27997f47093ad4ac24a817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:c0:ac:76:ae:b9:e5:7f:42:a2:e8:62:1a:
a5:93:11:2a:96:a3:81:8a:af:00:bd:b7:24:57:ba:
f5:a4:93:09:77:f3:de:a1:93:b6:b3:09:81:6e:51:
49:0b:19:40:41:ef:10:a2:57:f6:2e:f7:53:1d:e1:
c8:88:1f:25:95:1e:43:32:ec:9d:40:49:5d:46:e9:
c9:f3:e7:c7:f2:1c:80:0a:cf:b3:a1:c6:48:f4:aa:
a6:4d:45:a9:54:0f:99:6d:ed:99:c9:70:78:71:f0:
03:f4:40:56:25:86:63:6c:93:8e:a5:22:cb:e4:f3:
c6:24:92:ab:5a:33:8b:93:3f:95:63:75:36:96:ff:
d5:78:8e:7b:3c:80:03:29:64:42:0c:9e:44:7a:c0:
6a:5a:3b:50:4a:dd:f7:0e:cb:29:8c:4b:7a:66:c0:
87:95:d0:9f:f7:87:ec:2e:7d:70:3a:d7:07:c4:c4:
a1:8a:34:13:98:ab:3a:f3:02:50:f0:97:82:bc:17:
60:d3:7c:05:00:5a:12:5a:c3:85:26:e9:b8:fa:f9:
13:2f:b1:ae:a0:f1:da:51:8e:11:59:02:d4:fa:ef:
b3:f5:83:7d:ce:b2:d9:77:54:03:29:11:b8:ef:03:
2c:d4:da:30:dd:00:ba:c5:3a:68:0f:fb:1f:ac:bb:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:27:3C:4B:81:A8:F0:1C:27:99:7F:47:09:3A:D4:AC:24:A8:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i9YnPEuBqPAcJ5l_Rwk61KwkqBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:da:3f:9a:a2:b3:6c:76:f0:26:2f:a9:3d:0b:fb:bc:76:59:
b5:b0:c0:a2:c9:8a:c7:a8:c3:5a:47:e1:f4:0b:ed:97:fd:6c:
8f:48:55:bb:f0:2f:9d:41:57:80:a6:f5:d5:31:4a:d0:d0:58:
91:23:46:9d:98:1d:76:9d:a3:0c:1c:2a:93:6e:10:ae:bd:9f:
7d:ee:2d:bd:46:d3:ae:b4:3e:f6:fd:4e:6a:b3:d0:73:19:7a:
b9:10:7d:e5:64:48:92:db:36:1b:60:c6:e8:56:3f:03:11:2e:
7f:a6:83:82:c3:46:e5:bc:81:ca:a0:1c:a1:2e:b0:b5:3f:0d:
11:d8:aa:6c:44:bc:b4:12:52:ac:c1:aa:1a:8b:8e:2e:9b:ec:
1f:a4:30:92:b6:2f:4a:47:57:cb:a2:6f:e3:e5:38:f3:f7:71:
49:44:ca:ff:68:b9:09:52:f2:c0:20:6d:de:5f:f0:2f:db:0f:
bc:99:97:85:d4:8c:86:7f:07:f6:43:cb:77:55:17:12:26:96:
c3:97:68:20:2e:4e:4f:2f:6e:7f:fa:41:02:1e:d5:f9:d5:83:
a8:b2:12:cc:f0:c4:8f:cd:81:5c:f2:04:db:13:a1:29:ba:32:
ff:3b:9a:05:15:ff:cb:66:7f:24:24:ae:ea:6f:03:b1:98:ff:
08:2d:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:43 2025 by rpki-client