Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m4cCQnoZNaCI_Lac1I9nn-IdO6I.roa
File: m4cCQnoZNaCI_Lac1I9nn-IdO6I.roa (raw, json)
Hash identifier: Pp8ztgMMvILgy3tCHEfQqH7giOmUUkMKlAJjhOYCBhs=
Subject key identifier: 9B:87:02:42:7A:19:35:A0:88:FC:B6:9C:D4:8F:67:9F:E2:1D:3B:A2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE5F78291BEFCA2BEC9A671EE53D85D5E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m4cCQnoZNaCI_Lac1I9nn-IdO6I.roa
Signing time: Tue 16 Apr 2024 08:13:06 +0000
ROA not before: Tue 16 Apr 2024 08:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:f7:82:91:be:fc:a2:be:c9:a6:71:ee:53:d8:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 08:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b8702427a1935a088fcb69cd48f679fe21d3ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:c6:a5:45:d7:1a:8c:45:84:cb:93:d0:79:
b5:3a:06:60:18:62:b5:41:02:d5:1e:29:2d:86:a4:
6c:e9:ae:cc:cd:07:69:86:15:ae:fb:e9:72:89:aa:
e4:5f:2d:32:9c:d2:62:bf:e4:54:30:77:75:42:ae:
10:c3:2b:bb:5f:f1:68:a3:55:f3:5d:dd:3d:6d:7c:
55:1c:97:20:34:fb:a8:dc:65:7d:00:04:e7:f4:1a:
de:10:02:90:2a:69:ac:2a:34:30:e1:bf:2f:f7:c0:
3b:5d:c6:af:30:62:09:69:d1:90:bf:dc:7c:fc:56:
e2:a1:6c:fc:4f:47:59:03:c8:09:96:89:c9:eb:66:
05:3c:b6:96:aa:6b:d5:84:a1:f0:43:25:68:87:8b:
e7:16:e0:59:9c:85:00:a5:fd:10:a9:7b:fc:44:b0:
12:57:38:f9:bb:fe:59:2a:ce:4d:f0:ad:1f:ab:1d:
1b:bc:2f:57:c6:f2:40:57:fc:7d:fd:a0:3b:16:3a:
b1:12:55:38:e7:5d:14:10:55:01:ff:7d:6b:4e:65:
65:2f:a9:09:0b:1d:27:5e:db:51:30:99:92:41:f4:
b9:f2:e4:ef:e5:fa:19:a1:14:30:f6:10:46:f5:23:
82:80:02:4e:26:90:2c:14:86:47:35:2c:54:91:5d:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:02:42:7A:19:35:A0:88:FC:B6:9C:D4:8F:67:9F:E2:1D:3B:A2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m4cCQnoZNaCI_Lac1I9nn-IdO6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:1d:5e:15:dd:b4:8c:bf:0d:e4:fd:20:7d:4c:07:20:a6:42:
45:33:05:ce:60:fb:4e:61:e8:2c:4b:0c:8b:b1:d2:c1:a1:a9:
61:7c:b8:54:08:b0:15:c5:a4:c9:44:c9:16:5a:72:45:18:9c:
6f:1b:e7:ea:80:44:92:ae:92:13:b1:56:c4:60:3a:8d:3c:84:
75:01:26:95:2e:ee:bd:61:15:3d:7e:f8:57:ba:86:10:ef:c7:
44:51:65:4b:7b:46:be:e1:e0:cd:bd:13:e2:07:f3:4f:9b:af:
49:e4:ed:48:f7:c9:3f:bf:5d:82:d9:b2:60:03:b1:8c:15:ec:
1f:50:9c:d7:3f:85:ed:9c:b9:05:b1:af:3c:b4:36:d1:bb:e8:
6c:4d:e0:90:9e:ca:c2:5f:b8:d1:f4:69:43:60:58:2a:46:d2:
1a:63:dc:e9:69:f2:1e:eb:01:a9:bb:c8:44:49:17:cb:9e:1d:
b8:8a:05:a6:3f:9d:8b:3c:a1:72:69:97:d1:0d:65:c2:b3:51:
7a:2a:dd:87:d1:6a:4a:09:ef:82:0b:42:77:de:43:21:0d:3a:
b8:12:29:4d:77:92:a7:6a:9d:77:e6:6a:e6:55:5f:de:ed:23:
c4:12:6b:31:67:b9:e2:54:5b:52:1e:19:f7:fd:a1:e7:44:61:
51:cb:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:46 2025 by rpki-client