Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ilN_8MO6l81zviVKwFMzdLoTiiI.roa
File: ilN_8MO6l81zviVKwFMzdLoTiiI.roa (raw, json)
Hash identifier: jH/wT5XiIOUJAOrXa5lfUs+OIUxSCHEF0X8TCB9JxVE=
Subject key identifier: 8A:53:7F:F0:C3:BA:97:CD:73:BE:25:4A:C0:53:33:74:BA:13:8A:22
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEBF6FA18CBC67417D3C14DFF0124E527
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ilN_8MO6l81zviVKwFMzdLoTiiI.roa
Signing time: Tue 09 Jan 2024 02:04:40 +0000
ROA not before: Tue 09 Jan 2024 02:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:ebf6:789a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:eb:f6:fa:18:cb:c6:74:17:d3:c1:4d:ff:01:24:e5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 02:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a537ff0c3ba97cd73be254ac0533374ba138a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:a1:c3:79:0d:15:1b:9f:b5:bc:8a:14:85:
a9:98:aa:39:4b:ef:7f:2f:87:9a:ab:70:78:32:73:
5a:ca:de:15:ba:7e:d1:d4:13:cb:93:76:33:5e:69:
08:34:83:f9:a5:b2:28:68:60:2f:30:00:d7:66:4b:
73:ac:33:75:93:90:24:08:d4:d8:16:01:f7:af:76:
b1:42:44:9b:94:e2:68:2f:19:b5:fd:fa:ad:4a:df:
66:df:23:b0:4f:10:16:b2:75:6b:7a:43:26:c5:c8:
9c:d0:b3:49:7e:4a:f6:6d:21:98:17:e9:94:56:98:
e5:90:75:9c:14:27:82:b7:19:0f:86:fd:80:95:4c:
bd:bf:7d:4a:63:c0:aa:5b:32:57:61:eb:89:27:6d:
11:33:39:5a:d2:12:01:fb:7e:a6:e2:4e:9e:90:8d:
43:c7:dd:4a:e2:82:76:73:f1:74:1e:cd:2c:9e:56:
a0:52:cd:6d:d9:02:36:d0:89:81:f5:ec:fe:d8:b7:
db:53:1c:a9:7c:d4:db:e0:aa:2a:42:47:f3:ec:d9:
79:1b:21:ec:fe:6a:c8:57:af:cf:bf:07:d2:5f:95:
2c:b8:e9:45:b7:0f:39:2a:c2:35:57:46:13:58:55:
21:88:fd:57:6e:78:11:62:11:ff:1d:64:06:4c:6a:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:7F:F0:C3:BA:97:CD:73:BE:25:4A:C0:53:33:74:BA:13:8A:22
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ilN_8MO6l81zviVKwFMzdLoTiiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:fd:cf:80:b3:25:3b:5b:30:7d:fa:1a:96:8c:a2:c4:bd:fd:
dc:01:22:f4:41:3c:ab:54:b0:10:79:6a:04:94:3a:d6:af:23:
b1:03:31:e8:e0:52:b9:59:7c:04:1c:8c:29:e2:6e:11:e0:85:
1e:04:36:a1:23:d6:29:c6:07:19:be:ba:07:4f:a3:83:d1:c4:
d9:11:9b:70:54:8b:70:98:16:67:74:83:d7:5f:1b:b6:e7:d4:
67:a1:3a:df:6f:40:d1:1a:53:16:47:cb:e2:56:bb:c3:52:b8:
96:de:fd:b5:3f:f4:9c:7f:12:60:45:0c:3c:2c:d3:9a:19:17:
09:f1:58:96:f9:6d:84:27:c0:9d:eb:1e:ac:6c:d1:86:53:83:
16:88:bb:e0:de:ad:a3:3d:29:3d:e9:e6:3e:b1:d8:8e:6c:a5:
34:27:44:6f:16:7c:a0:9a:27:85:6a:5b:74:d7:73:7d:2e:99:
d9:f3:32:d5:43:c6:43:40:93:21:80:24:cf:99:ca:2e:d9:b1:
1c:f1:9b:8c:23:cf:ab:ef:e9:21:d5:08:f5:11:9d:f2:ea:1e:
60:66:95:cb:e7:7d:1b:64:cb:61:27:84:19:64:01:e1:c4:46:
d0:bc:45:37:90:02:bc:ce:5a:f7:c7:48:d0:bb:0d:23:42:f6:
a2:82:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:20 2025 by rpki-client