Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r4zs7gg_oxeS_VFWkEqNmPW7oTo.roa
File: r4zs7gg_oxeS_VFWkEqNmPW7oTo.roa (raw, json)
Hash identifier: q7UtIrGpbgphWzn/Gzuo8RhXhC8N1uB6rrUqX7H2l4g=
Subject key identifier: AF:8C:EC:EE:08:3F:A3:17:92:FD:51:56:90:4A:8D:98:F5:BB:A1:3A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDC1800BDCD8EE17D497083C00759FDDE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r4zs7gg_oxeS_VFWkEqNmPW7oTo.roa
Signing time: Sat 06 Jan 2024 00:06:49 +0000
ROA not before: Sat 06 Jan 2024 00:06:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:dc15:fef8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:dc:18:00:bd:cd:8e:e1:7d:49:70:83:c0:07:59:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 00:06:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af8cecee083fa31792fd5156904a8d98f5bba13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:e5:de:9d:8f:af:84:8b:6d:72:31:bc:72:
af:f0:44:a7:b4:48:86:a5:5e:3c:70:d6:d2:09:cc:
d6:36:42:0d:46:c2:37:6c:c4:9d:64:0a:59:63:14:
f4:89:c3:be:67:0b:57:78:bf:ce:26:ea:b9:85:6d:
fc:d6:0f:40:95:af:67:0a:7e:14:c9:13:d2:76:8d:
5c:ea:72:93:5e:f0:e1:61:0a:96:01:25:dd:f8:e1:
b8:28:31:1f:6d:21:8c:5a:a6:f9:d6:d9:c7:d2:e5:
ce:65:9d:8f:a1:4a:0b:01:52:05:9d:21:f0:cc:82:
d3:9b:df:26:05:84:c8:41:29:1a:55:18:bb:6d:b0:
02:4a:a1:16:cd:29:85:f0:46:6d:b4:a1:bb:9d:7f:
04:dc:bf:77:17:63:07:9c:2f:5e:9b:94:84:c7:2c:
71:b0:c6:82:c1:c7:26:98:4e:62:e5:31:3c:cb:53:
22:58:c4:d9:21:e5:eb:32:6e:30:0e:66:62:3c:a0:
45:12:1a:15:4c:d4:59:e5:0d:bb:48:94:d6:59:de:
2f:98:87:86:40:1c:67:d1:b4:21:ca:48:8a:76:91:
52:71:5b:4a:9a:ad:89:30:c5:2a:99:63:d4:a3:52:
b8:33:f9:a3:37:b0:99:b9:e9:fa:b3:3f:39:d5:9d:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:EC:EE:08:3F:A3:17:92:FD:51:56:90:4A:8D:98:F5:BB:A1:3A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r4zs7gg_oxeS_VFWkEqNmPW7oTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:a3:3e:3c:ef:ee:5d:dc:7b:4c:f8:e2:01:9a:15:6f:d6:9d:
ff:e2:42:a8:44:84:9f:ee:b7:b1:92:cb:2b:0b:03:61:27:b3:
a2:b4:f6:61:1b:99:34:90:52:8a:f6:68:c2:1b:37:8b:7d:c8:
b3:49:49:93:d8:c6:25:1a:66:78:33:9a:1b:84:53:c9:a9:4d:
6c:38:0f:87:b3:47:d9:30:19:a2:4c:81:45:89:7b:2b:17:7a:
17:fe:91:f2:41:b1:d7:d5:2f:62:44:2f:bb:7f:2d:e3:c1:c2:
ed:8a:03:e7:bc:78:0f:36:ce:cb:77:68:80:e6:43:09:1d:2e:
62:71:bc:c8:f4:0e:af:f8:84:cc:01:ea:83:6e:d9:eb:62:38:
c7:82:12:03:1f:03:df:c7:08:0d:34:ea:a9:f8:7f:ca:d7:36:
48:c5:7f:db:d8:cc:83:21:f8:46:eb:32:89:cf:ec:cc:83:1b:
c0:40:e4:78:72:39:62:89:d4:fc:cc:33:af:91:f9:34:5d:80:
6b:10:b2:c2:e6:35:6a:fc:be:4f:d6:03:aa:95:07:35:7d:fe:
ec:3f:9b:0f:bb:9e:6b:1a:47:f7:fa:be:77:fe:63:6e:ae:36:
02:9c:26:2a:f5:83:90:43:d8:35:6d:03:86:14:6c:b5:d8:53:
30:df:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:10:13 2025 by rpki-client