Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jPMrrybhzz7iruWS2BODDECoMVo.roa
File: jPMrrybhzz7iruWS2BODDECoMVo.roa (raw, json)
Hash identifier: cvcrS1cWk9uLvpNmshwVtxFCkB19+5bcUc2HKot00ew=
Subject key identifier: 8C:F3:2B:AF:26:E1:CF:3E:E2:AE:E5:92:D8:13:83:0C:40:A8:31:5A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB542BED4CBDCAEF080434801FEB6C24F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jPMrrybhzz7iruWS2BODDECoMVo.roa
Signing time: Sat 06 Apr 2024 21:13:54 +0000
ROA not before: Sat 06 Apr 2024 21:13:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b5:42:be:d4:cb:dc:ae:f0:80:43:48:01:fe:b6:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 21:13:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf32baf26e1cf3ee2aee592d813830c40a8315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:84:c9:e5:db:41:36:33:26:49:fa:d0:80:
aa:54:de:10:bc:b7:6d:71:54:19:34:20:60:f6:bd:
55:92:ce:db:0a:b7:37:69:37:56:c4:da:b6:bf:ae:
14:42:01:19:43:68:ee:12:00:4f:ab:59:1d:42:00:
4a:ef:0a:45:56:6f:93:e3:93:6b:52:e8:dd:b8:b1:
27:57:c4:56:87:2e:fe:b7:e8:86:ff:e6:08:dd:ac:
91:18:c7:e3:63:13:a4:92:cb:58:bd:a1:e6:e9:c7:
a7:63:53:cc:64:d2:58:ca:93:4c:07:2f:83:5f:d7:
3d:f3:85:da:fb:f6:28:92:fa:70:5d:d9:0e:db:d0:
a4:e1:87:1b:0e:96:d8:14:98:38:25:a3:66:05:f2:
ba:52:1f:fa:99:c9:48:0a:1a:a6:52:5c:e4:0a:e3:
28:0e:f5:bd:2d:50:3e:29:c1:53:93:c7:4a:de:3a:
87:7a:99:7d:0d:b0:9e:fd:ad:ba:a4:22:c6:b4:72:
da:b8:d2:cb:55:fc:21:c1:bd:b3:0f:41:a4:9e:ce:
9c:96:a8:82:8a:1e:f4:1a:be:ec:ac:72:0b:33:c6:
a2:74:43:a5:5d:27:c5:1b:42:00:ad:98:3b:13:b9:
5f:e4:c6:f9:a1:30:e1:b8:fd:00:38:83:7f:cc:c6:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F3:2B:AF:26:E1:CF:3E:E2:AE:E5:92:D8:13:83:0C:40:A8:31:5A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jPMrrybhzz7iruWS2BODDECoMVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:6a:87:49:0e:e6:9e:46:41:42:c0:74:f0:6d:86:6c:3b:e6:
70:3a:e8:60:ef:4b:f4:54:01:60:20:cf:13:1f:80:17:62:ba:
18:32:49:2c:4d:1d:4b:3e:2c:64:6d:5c:8d:c8:b7:94:35:1c:
22:da:61:db:e1:fa:1b:43:c1:1d:de:12:08:69:a2:20:a2:4a:
d1:a4:68:8f:ae:4f:a3:80:e0:b6:71:cf:d1:0f:e7:17:8e:26:
61:8e:b7:66:cf:1d:9b:7a:69:fc:6e:64:91:26:21:d7:8f:5d:
c6:d8:79:88:37:b1:fa:32:a1:fb:a1:67:d0:bf:3e:28:46:37:
d9:d9:98:41:6f:94:c7:b8:58:93:9e:b6:29:47:5f:6a:3a:21:
78:7e:41:a0:ff:20:e6:27:15:17:d2:e4:fb:ce:c2:03:a1:a2:
87:23:05:f0:6e:a9:2d:9f:84:fd:8a:c8:cc:e7:d6:93:07:14:
20:c0:58:21:01:83:7d:4b:6c:33:3b:b9:71:6e:13:06:87:4a:
a8:d9:37:3f:31:95:4f:ce:f9:ca:57:1a:5c:30:00:ac:df:bc:
ff:80:e0:7e:fd:5a:9f:55:17:36:6e:25:f0:54:d3:62:21:34:
f0:cc:9d:07:1f:c4:20:3c:b6:fc:5c:6a:7e:79:01:6f:9d:ea:
70:2f:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:14 2025 by rpki-client