Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lr_42pQHsGXimCcHM9giDLL12qw.roa
File: lr_42pQHsGXimCcHM9giDLL12qw.roa (raw, json)
Hash identifier: Z/oyo2QELSNXDpBsNmRxNKJHxG8S0Co3lu//Uv9XhQw=
Subject key identifier: 96:BF:F8:DA:94:07:B0:65:E2:98:27:07:33:D8:22:0C:B2:F5:DA:AC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA228C7574B1D8667075370532A62761F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lr_42pQHsGXimCcHM9giDLL12qw.roa
Signing time: Wed 03 Apr 2024 04:12:45 +0000
ROA not before: Wed 03 Apr 2024 04:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:28:c7:57:4b:1d:86:67:07:53:70:53:2a:62:76:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 04:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96bff8da9407b065e298270733d8220cb2f5daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:57:b4:eb:b4:9b:c2:ac:82:b0:98:5e:5b:
12:68:63:79:e6:ca:0d:c0:f3:17:b6:e2:24:e9:17:
50:64:7c:72:44:1d:8b:fd:09:60:44:3a:2c:ab:f0:
c3:e3:c1:19:42:e7:4b:8a:a2:e4:30:a3:32:0f:a7:
36:8c:0f:95:0a:8d:a4:26:c7:1c:16:6b:3a:f1:97:
a3:39:6c:1a:0f:66:ab:92:4a:6b:27:27:89:52:24:
26:d0:6b:0d:2a:85:19:ff:e2:34:6d:8a:a9:17:29:
24:29:9f:5a:27:06:56:5c:8a:c2:58:a1:43:02:97:
72:96:47:6e:db:d0:47:4c:97:a0:79:15:8b:a5:eb:
ea:9a:27:bf:c7:cb:70:17:78:1a:d4:78:90:67:e1:
9c:57:4f:ed:09:d7:03:43:94:50:97:18:0e:e4:48:
69:99:07:1d:bc:3b:f2:f1:c8:1e:9a:af:6e:71:07:
9e:6d:bb:4e:e0:02:e6:48:c5:2e:8c:da:02:b4:9a:
5a:03:e4:b6:9b:00:5a:08:15:f4:ea:85:b7:56:83:
5f:bf:4c:c0:93:b5:f7:db:c4:6b:72:34:03:42:22:
0a:89:f6:68:5d:1f:3b:4a:94:d2:58:c7:7f:f7:b7:
c8:60:bb:ea:33:35:4e:18:a5:24:54:f5:3e:ec:58:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:F8:DA:94:07:B0:65:E2:98:27:07:33:D8:22:0C:B2:F5:DA:AC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lr_42pQHsGXimCcHM9giDLL12qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:a4:54:8f:a9:6f:0a:8e:b1:22:f2:90:cc:05:c7:25:2d:53:
0f:a5:08:a9:91:49:54:c8:73:07:f8:56:d4:e8:75:91:da:a1:
a1:b3:21:cd:3b:26:74:94:97:07:fb:26:02:03:ab:ca:bc:97:
9a:28:81:2d:38:3f:ae:d2:69:74:8e:7b:90:c2:51:0f:83:f3:
fc:fb:93:f0:59:c0:0d:e2:48:34:a0:41:16:15:44:7a:95:07:
84:94:34:f2:7e:7f:9e:27:e0:e6:46:6e:1d:2a:d7:6d:42:4e:
65:20:10:aa:97:11:8f:cd:c6:e4:c8:21:52:44:81:14:f0:1c:
e4:9a:23:7c:75:f2:47:e7:20:1d:f4:63:50:f9:55:bb:4f:28:
75:98:48:52:40:9f:e9:f5:56:e0:d5:a1:9e:af:7d:e8:df:e0:
d4:4b:e1:33:c5:5e:1e:cc:48:13:bd:3c:df:9f:01:1b:4d:26:
47:70:89:44:47:a0:b1:58:15:5e:e0:68:5a:8c:3c:8e:6b:61:
7e:2b:38:e8:0d:ed:31:3b:12:96:8c:ea:7c:fd:7f:54:ee:09:
06:c7:14:93:66:cc:03:d7:4e:b9:43:c5:d2:e0:a6:9e:e3:85:
43:9f:56:72:5e:05:e0:a9:49:c1:1a:95:72:88:33:9a:41:7f:
26:d7:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:44 2025 by rpki-client