Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jwhcSVEXWdLvA6b-Z_otUo-ICPU.roa
File: jwhcSVEXWdLvA6b-Z_otUo-ICPU.roa (raw, json)
Hash identifier: Amf97HJgClVtFb/3JrFpWRu7O5VVwJx/+kQKvEviPNE=
Subject key identifier: 8F:08:5C:49:51:17:59:D2:EF:03:A6:FE:67:FA:2D:52:8F:88:08:F5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E72F2E6D5E2A704EB53B1A9DD38AB0056
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jwhcSVEXWdLvA6b-Z_otUo-ICPU.roa
Signing time: Mon 25 Mar 2024 00:11:45 +0000
ROA not before: Mon 25 Mar 2024 00:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:72:f2:e6:d5:e2:a7:04:eb:53:b1:a9:dd:38:ab:00:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 00:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f085c49511759d2ef03a6fe67fa2d528f8808f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:72:6c:3a:1f:66:ee:36:2b:b4:84:09:d9:65:
63:45:3b:f6:f1:01:9c:f8:98:88:d9:a7:fd:95:9b:
09:d5:68:31:b6:d7:70:1e:66:4f:88:ea:3c:fc:a8:
f1:12:59:59:52:c1:f1:06:a6:30:06:a5:c5:c9:2c:
38:31:c2:84:14:e6:d5:c0:af:5d:93:3d:08:e0:5b:
d0:04:ce:f5:95:9c:05:bf:ae:02:6e:d7:2e:66:61:
b5:aa:06:45:9f:fc:71:26:b2:f6:3e:71:9d:68:10:
ae:c8:4c:70:8a:4c:49:11:86:b6:36:46:09:94:02:
66:f5:a4:b7:24:e8:18:00:af:fa:d8:34:1e:ed:51:
2d:bf:d5:27:17:2c:fc:d5:bc:fd:28:20:e5:1b:3d:
5c:31:bb:64:45:0b:19:ad:80:7f:0f:04:89:43:41:
ba:c0:2d:f0:11:40:af:64:78:f3:a6:06:b1:1c:66:
e9:a5:a3:6c:7f:ce:6e:30:a3:b3:30:41:dd:50:f8:
d2:04:5c:59:99:86:95:d5:33:93:1a:48:21:8f:30:
c8:62:fe:e9:40:b7:e8:99:8b:51:a9:61:b9:c3:21:
d7:c6:57:bf:74:02:59:05:5e:c7:50:47:8d:70:1a:
a3:d0:d1:46:70:0e:44:70:0c:66:f6:6a:0b:bb:a0:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:08:5C:49:51:17:59:D2:EF:03:A6:FE:67:FA:2D:52:8F:88:08:F5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jwhcSVEXWdLvA6b-Z_otUo-ICPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:5a:41:62:ac:53:cb:e1:50:3a:3b:7b:2b:47:53:b6:db:ce:
64:df:6f:21:c8:3d:d6:55:d7:bd:28:73:f8:1e:66:78:1c:9f:
97:b0:5a:5f:96:88:fa:90:f9:e1:7a:2e:65:84:69:03:97:d3:
a7:e0:f0:c3:e4:1a:ff:69:37:8d:0d:c6:cc:f6:78:de:58:22:
02:89:45:17:4c:c7:98:77:a7:0d:ef:02:73:b9:9e:5c:cd:60:
97:b4:6f:2d:01:13:2d:27:31:a7:d1:af:e3:dd:28:25:02:7f:
74:0e:7f:df:7c:f0:0f:76:1b:2f:be:70:76:91:57:de:42:34:
6f:a1:08:c6:2a:35:eb:0d:98:f4:db:1b:6d:c6:9f:6f:9a:2f:
cc:59:cd:57:29:1f:bc:29:8b:ff:f5:66:46:58:c5:39:17:8a:
7a:f7:6d:b2:08:61:d2:07:80:94:71:39:1e:e9:44:b6:67:6b:
06:0e:2d:36:ca:2e:70:1c:48:14:5c:b1:9f:c1:14:82:dc:17:
fe:92:2f:3b:9c:f6:20:b7:23:f2:ee:eb:36:b2:76:02:4d:e4:
0d:e4:e8:72:57:da:5c:e5:44:bc:3a:51:0c:01:71:89:0e:11:
3f:a4:77:8f:e4:d0:6c:e9:6c:a9:dd:2a:8f:f3:ee:a7:e5:51:
20:4f:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:27 2025 by rpki-client