Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r-Oo4zmvr_3qPzsDB-t_UY6qnx4.roa
File: r-Oo4zmvr_3qPzsDB-t_UY6qnx4.roa (raw, json)
Hash identifier: uzQwVLMBROtm9pGfgV+V0NfFLAvSAEqIbJBbs8fwueY=
Subject key identifier: AF:E3:A8:E3:39:AF:AF:FD:EA:3F:3B:03:07:EB:7F:51:8E:AA:9F:1E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6269C8EC29B44E4D155C289018DBDF17
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r-Oo4zmvr_3qPzsDB-t_UY6qnx4.roa
Signing time: Thu 01 Feb 2024 02:05:16 +0000
ROA not before: Thu 01 Feb 2024 02:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:6268:dfb0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:69:c8:ec:29:b4:4e:4d:15:5c:28:90:18:db:df:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 02:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afe3a8e339afaffdea3f3b0307eb7f518eaa9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:a1:90:c1:7b:5b:02:64:a2:60:7b:14:3d:
8d:bd:6b:af:a9:52:b8:f9:6e:ba:65:80:01:27:9b:
d7:45:b4:79:22:be:e6:c8:5f:4b:8f:63:f5:93:c7:
20:af:3e:58:db:28:51:c1:dd:69:7c:2d:9a:5e:cc:
d6:ce:c1:14:06:dd:c1:26:3d:e3:be:ee:f2:03:ab:
a8:1d:48:82:5f:36:83:95:d7:4e:8c:2f:62:e4:cf:
5e:85:42:8a:62:5f:2e:f0:32:0b:a5:b2:17:e1:06:
c9:6d:be:0b:26:42:5d:33:2c:03:0e:05:0d:d9:ed:
cc:ff:37:b2:c7:2b:82:d9:d2:ac:be:1a:95:4e:50:
c1:2c:6f:08:bf:97:7b:48:ac:59:60:83:83:1f:df:
1a:09:75:4c:52:40:a0:95:9d:41:57:5c:a7:cb:0c:
fa:4b:ee:29:a5:5c:4d:bd:65:e2:bb:24:40:45:54:
ec:ba:e0:53:eb:5c:7a:aa:c1:e4:71:3c:1c:6f:a3:
96:a5:6e:30:0c:04:a0:7d:d0:f0:08:f6:b3:2b:33:
fb:6b:fd:23:e2:96:72:ab:d7:5d:6b:90:e1:0a:62:
c2:37:c3:9c:1f:7b:62:ab:27:6f:e7:13:33:2d:cf:
ee:13:46:c9:7e:cb:c5:df:d1:49:ff:af:24:78:76:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:A8:E3:39:AF:AF:FD:EA:3F:3B:03:07:EB:7F:51:8E:AA:9F:1E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r-Oo4zmvr_3qPzsDB-t_UY6qnx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:8f:af:6a:0b:8a:03:99:f2:47:3d:80:99:1d:17:36:4e:3a:
29:f5:0c:0c:bb:a6:14:f9:6c:9b:d5:51:1c:e2:69:0f:1d:a1:
75:ce:9d:18:ba:6f:0e:32:59:2b:15:29:99:9c:f4:f7:9b:fa:
39:6a:dc:5f:4d:89:4b:28:30:58:5c:ca:d2:61:ad:a7:6f:c8:
06:0b:89:6c:3a:37:21:fe:cc:ff:e7:84:0a:41:7e:d3:9c:81:
47:e1:07:9f:eb:f1:98:7e:d6:15:a4:e1:33:a8:b2:2d:10:84:
ad:45:34:2b:31:49:1c:9c:f3:6f:1c:3a:ba:02:44:2a:c4:1e:
4f:25:d9:19:3c:e8:0a:3a:d9:e2:38:c1:71:8d:a2:ac:c1:81:
dc:aa:d0:27:4b:12:79:49:6a:c2:2d:93:85:bb:08:51:b7:aa:
47:b7:1a:ae:fc:7e:d9:54:2b:5c:6a:42:97:bb:cb:9c:c5:f5:
8d:34:8e:c6:b6:11:a6:9b:de:f9:99:c9:dc:c8:88:5b:35:66:
7c:5b:3c:11:3d:a6:f5:df:2a:0d:51:04:a6:fe:5d:f7:99:3f:
a9:9f:d0:b0:3b:17:9e:37:87:12:2a:cf:be:e8:9a:0d:08:96:
1f:64:a5:37:d2:28:61:31:58:aa:89:6f:a8:de:23:10:35:75:
ad:a8:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:14 2025 by rpki-client