Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jlAZs01CEyTidj7aufRVVRxseyg.roa
File: jlAZs01CEyTidj7aufRVVRxseyg.roa (raw, json)
Hash identifier: S42VSJ6kRj4OFtgJ2IKCzeWLAl4s/LFH0Yxs+AUPHT4=
Subject key identifier: 8E:50:19:B3:4D:42:13:24:E2:76:3E:DA:B9:F4:55:55:1C:6C:7B:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE39A5916E5264B9534FFF6EF7A7DB8FF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jlAZs01CEyTidj7aufRVVRxseyg.roa
Signing time: Mon 15 Apr 2024 21:12:07 +0000
ROA not before: Mon 15 Apr 2024 21:12:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:9a:59:16:e5:26:4b:95:34:ff:f6:ef:7a:7d:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 21:12:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e5019b34d421324e2763edab9f455551c6c7b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:4a:44:be:cd:9a:33:9d:d9:f7:3b:bd:52:
21:43:57:5e:1a:5b:ae:f8:b1:ed:4f:88:51:0e:4a:
51:65:0f:9f:4f:f0:b5:c7:83:09:55:b4:ba:0a:81:
54:f3:37:ab:fb:e4:56:4d:31:67:45:4d:dd:3f:71:
38:0f:d4:54:a2:a8:c2:3a:2f:6b:8c:1f:f1:c9:dd:
87:d2:a4:a1:eb:a7:c9:86:d1:a2:a8:17:7f:0f:d0:
28:28:66:e0:1e:a7:4d:90:a8:ea:e8:43:6f:4b:55:
27:9c:af:e1:35:a1:89:86:b1:15:67:dc:da:4f:07:
75:3b:c7:16:0f:d9:e8:c8:9d:7d:44:7a:7c:7f:0b:
0d:6a:d3:c4:1d:26:b4:b7:fc:82:45:d7:fe:6f:c9:
39:28:f4:6e:b4:fd:3a:8d:ee:28:e4:a8:82:e6:93:
2a:90:6d:98:42:e2:78:7c:f9:0e:c6:eb:d6:fb:0c:
f6:bb:af:eb:63:8c:47:cb:a1:37:d3:7d:62:3e:ee:
e3:55:83:15:c2:38:9a:be:93:96:a6:a0:17:0a:a2:
8e:1b:32:e3:22:2a:44:3f:29:dc:d3:75:4b:1b:d9:
22:b5:ca:56:13:75:89:d4:e3:7c:30:f9:06:ec:f9:
94:7e:0f:7d:ce:f3:b4:a2:fb:cf:82:38:f7:05:60:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:19:B3:4D:42:13:24:E2:76:3E:DA:B9:F4:55:55:1C:6C:7B:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jlAZs01CEyTidj7aufRVVRxseyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:b2:d8:a4:fc:f9:95:7c:65:61:f7:7f:20:06:ef:a4:11:70:
ed:d4:51:6d:5e:aa:0e:fb:2b:f8:d7:28:0c:63:e4:d8:de:c4:
b2:b9:c2:7a:6b:94:52:46:46:84:3f:ac:07:e2:6e:2a:18:3d:
12:20:11:79:33:81:3d:3b:86:28:e7:f9:4a:3a:38:27:de:19:
4e:cb:b0:93:b3:14:01:8b:68:95:41:80:c2:95:fd:c1:e3:51:
49:53:9e:5f:50:c9:76:fb:b9:eb:e9:3e:60:29:64:7d:ed:87:
6c:1b:f7:9b:fe:15:bf:b1:8d:0c:e8:6b:90:32:81:1c:7d:fe:
bb:72:64:d6:6c:4d:f7:cf:fc:cc:fb:6c:3c:bd:37:c1:62:d4:
ee:4e:fb:04:3e:6f:22:b3:a7:86:51:53:2d:0c:7f:54:a8:ed:
ab:b6:7a:47:d3:e4:e0:5a:9c:b1:6f:2c:3b:c7:09:f4:46:a2:
4b:02:46:cc:2d:f7:65:ba:0f:bb:13:b1:e7:3d:73:82:0b:4f:
d2:3c:15:1e:bf:02:17:26:d4:66:e1:07:90:b1:b9:71:86:0b:
0f:80:40:c4:99:59:5a:fd:02:1e:d9:80:60:e8:ca:97:08:0e:
71:28:d5:09:ae:77:4f:76:35:3e:ed:d1:a2:2a:4c:af:e3:ea:
9f:e9:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:51 2025 by rpki-client