Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iUg-2qviOkPh3uy7yYWfpv1kru4.roa
File: iUg-2qviOkPh3uy7yYWfpv1kru4.roa (raw, json)
Hash identifier: l9E+58qHExR0XAXxnE97jjgpxF+LWddiz2/FebbSwoA=
Subject key identifier: 89:48:3E:DA:AB:E2:3A:43:E1:DE:EC:BB:C9:85:9F:A6:FD:64:AE:EE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E02B34AA5C2558764E18940C546B95C9B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iUg-2qviOkPh3uy7yYWfpv1kru4.roa
Signing time: Sun 03 Mar 2024 05:04:48 +0000
ROA not before: Sun 03 Mar 2024 05:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:2b2:bfdc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:b3:4a:a5:c2:55:87:64:e1:89:40:c5:46:b9:5c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 05:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89483edaabe23a43e1deecbbc9859fa6fd64aeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:b8:c0:0f:ad:95:f0:c6:cb:7b:e5:ae:36:
1f:88:2c:5d:73:7a:47:73:fe:a4:be:5e:8e:2b:e7:
73:4a:91:d9:63:15:d7:b8:a8:7b:e7:9b:1f:d9:3c:
9d:31:4e:69:ef:6f:b4:3e:17:37:d5:56:9e:aa:9c:
d5:aa:61:6d:14:ad:71:27:10:46:75:cb:7a:57:5e:
0e:6d:c9:c0:1a:67:e3:15:6e:cf:bb:94:9e:8d:71:
9a:92:3b:72:91:a2:bf:8d:84:00:ac:a3:95:81:07:
7f:03:e1:be:de:a7:21:87:3c:87:71:03:94:e7:78:
14:69:05:e2:01:fb:66:a3:70:dc:ee:02:b4:37:6a:
93:dd:f3:54:b8:6b:54:7b:0e:84:41:ac:52:07:e0:
f4:34:49:5d:cb:7e:d8:73:f5:df:c7:80:6a:d5:19:
0a:ec:31:9e:18:69:e6:31:54:13:0b:42:9a:60:af:
c1:5e:82:40:82:8b:3b:07:e2:f3:9e:72:2b:40:37:
5e:b0:51:43:8c:c9:df:5e:09:cb:1f:b0:50:3a:84:
7f:92:9a:71:a0:b3:5e:f4:25:06:3d:49:5b:de:28:
f3:e5:8d:4f:1c:1a:20:a2:e4:e7:f2:27:92:e6:a5:
3b:25:3d:89:81:a9:61:c3:97:cb:6f:52:9e:f5:a5:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:3E:DA:AB:E2:3A:43:E1:DE:EC:BB:C9:85:9F:A6:FD:64:AE:EE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iUg-2qviOkPh3uy7yYWfpv1kru4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c4:c1:a4:aa:e1:e7:bb:77:0f:9e:35:5d:94:b8:a0:dd:35:
7b:22:89:d5:31:79:f3:d0:b6:7f:9e:7b:7a:53:07:21:21:93:
e3:a0:cd:27:da:2f:79:f2:3f:39:d6:50:d0:8c:dd:6b:93:6a:
23:e8:07:25:f6:f4:ff:e5:82:f0:95:4b:0c:07:b6:58:96:7a:
f5:9a:6d:18:1e:5d:44:bb:34:e8:89:2b:18:64:4d:a8:6c:6a:
0d:ea:45:72:61:38:92:f8:47:3c:6d:da:60:f4:a9:a4:57:17:
7f:93:fe:22:f5:dd:36:fa:3d:38:b6:a4:63:87:95:76:4a:f5:
ab:ed:67:b8:18:61:47:f2:7d:95:d0:c4:15:82:cb:0d:77:38:
18:76:e4:37:d2:e7:53:ec:7f:ce:e2:d5:4d:e4:1d:bb:56:7b:
fd:93:d1:39:81:c3:b2:a9:15:85:dd:a8:eb:c4:53:02:90:63:
44:4e:c6:d1:63:33:1e:19:80:22:ce:49:94:4e:a1:9d:8e:b2:
63:43:6f:8c:d1:09:39:df:69:e9:69:fd:70:f2:6e:75:b8:62:
46:7f:bc:f8:2b:95:e0:87:b3:9a:0b:00:b3:87:bf:ca:9a:94:
9c:e3:7c:c6:19:92:56:b8:df:09:78:8a:e0:a7:4b:36:ca:98:
7e:66:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:05 2025 by rpki-client