Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lvGXb7fpXUEkmkKEuprEvNsuyA4.roa
File: lvGXb7fpXUEkmkKEuprEvNsuyA4.roa (raw, json)
Hash identifier: plVj7oRQPfuH8nngRrrjd3TY9j3X2RpezBzfYePazVk=
Subject key identifier: 96:F1:97:6F:B7:E9:5D:41:24:9A:42:84:BA:9A:C4:BC:DB:2E:C8:0E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E62372673ABCA66C3FD38F5381B687936
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lvGXb7fpXUEkmkKEuprEvNsuyA4.roa
Signing time: Thu 21 Mar 2024 18:12:45 +0000
ROA not before: Thu 21 Mar 2024 18:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:37:26:73:ab:ca:66:c3:fd:38:f5:38:1b:68:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 21 18:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f1976fb7e95d41249a4284ba9ac4bcdb2ec80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:f0:74:f1:cc:ef:33:c5:d0:15:76:fb:4f:
d9:1c:3d:55:6d:91:ab:7a:87:1f:27:3b:fb:2c:84:
0c:1c:13:83:49:42:6c:0d:96:fd:cf:fc:ee:ad:52:
86:0a:23:bd:0f:d8:75:fa:7c:f0:17:8c:b6:fc:89:
89:ea:bc:91:68:e8:e2:48:b1:5d:90:a4:2a:d9:db:
39:56:8e:01:0b:d9:4f:41:de:9e:be:08:bd:4b:0d:
bb:21:b8:75:29:d8:14:56:9b:15:ff:b7:9b:37:0b:
79:0b:b2:3b:50:d3:f7:f3:ec:b8:d1:59:70:ce:e2:
9b:1f:81:c9:e3:61:b6:57:83:47:ff:74:2e:55:a9:
30:5e:68:b3:a6:15:77:fd:c7:7f:64:73:18:14:72:
7d:48:d8:14:cc:ae:a2:1f:77:7b:2a:a9:96:6c:7a:
cd:f0:bf:d6:99:54:a1:8c:11:0d:a8:b3:07:17:ca:
06:7c:a4:b8:ac:27:e3:c2:2f:9a:66:3a:ff:1a:05:
d0:15:74:7a:d5:1a:e2:c3:db:cd:ed:05:28:43:2c:
f7:a2:aa:8a:84:28:f6:7e:cb:67:6a:95:bb:a2:77:
e6:0c:71:4d:53:4d:06:ef:20:b1:93:4e:49:5e:aa:
bb:b4:df:f4:a7:10:6d:18:41:70:43:18:4b:1b:1b:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F1:97:6F:B7:E9:5D:41:24:9A:42:84:BA:9A:C4:BC:DB:2E:C8:0E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lvGXb7fpXUEkmkKEuprEvNsuyA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:02:96:49:7f:00:94:6c:24:69:31:0c:c9:89:f1:68:81:58:
12:ce:39:b6:00:bb:b2:85:61:9c:2d:62:b2:31:48:70:c0:f0:
54:6f:37:da:9a:02:a3:24:41:36:8d:b7:22:81:4b:fb:49:c4:
08:4f:13:c3:8b:ca:31:21:17:95:50:70:5d:9d:a8:36:0a:d8:
95:49:81:93:06:3e:34:38:84:8f:0a:fc:05:e6:e2:56:66:9a:
f9:c2:4f:03:4f:56:ea:0c:23:54:63:8f:01:92:9b:b4:95:8d:
0e:d9:0b:5e:d5:7b:50:1d:58:d3:99:fd:e1:e7:6e:39:ca:05:
a9:7a:4d:f0:f5:5c:bb:2f:72:4a:86:42:16:78:d7:8e:78:61:
9a:60:1c:46:da:b0:55:66:0f:35:3f:fd:e2:3f:e3:3b:a8:58:
5f:8c:5c:be:86:dc:f9:f9:bd:a3:17:1a:69:4e:7e:7c:14:7e:
45:63:9c:02:ce:01:55:de:4e:a2:80:ac:ed:4f:51:a6:4e:8d:
dc:cf:f9:3b:66:e5:82:50:ba:c2:c8:be:c4:ed:08:ca:45:4c:
c0:c2:62:a5:b2:fb:bd:cd:9b:ac:9a:65:60:a7:d5:c6:7e:21:
12:77:11:65:19:cf:1f:54:34:13:2b:29:09:50:ed:e3:a0:84:
c9:7b:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:12 2025 by rpki-client