Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rS-MFGdXunji5-NsG2d354QbNPE.roa
File: rS-MFGdXunji5-NsG2d354QbNPE.roa (raw, json)
Hash identifier: 8f5RUSzAZLbNxzU3sn4JEwWKTEYdeOhM9TycNID+Lmg=
Subject key identifier: AD:2F:8C:14:67:57:BA:78:E2:E7:E3:6C:1B:67:77:E7:84:1B:34:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E05B455CC392FEE4F8915B317444697BD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rS-MFGdXunji5-NsG2d354QbNPE.roa
Signing time: Sun 03 Mar 2024 19:04:48 +0000
ROA not before: Sun 03 Mar 2024 19:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5b3:e66b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:b4:55:cc:39:2f:ee:4f:89:15:b3:17:44:46:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 19:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad2f8c146757ba78e2e7e36c1b6777e7841b34f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:96:d7:98:50:a4:49:5e:34:8f:35:92:15:
79:b4:64:48:4b:91:07:90:a5:d3:fb:4b:87:d5:9c:
18:6f:56:f1:af:e3:d8:f7:12:6b:4d:81:5c:49:01:
de:c2:b6:71:a6:40:65:ad:26:9e:e4:f5:dc:5c:da:
7c:c6:2f:a2:31:e7:fe:2a:2a:bf:b3:21:78:a4:68:
99:aa:f8:b3:89:23:49:fe:43:b0:88:c6:6e:da:83:
fd:f7:28:6c:00:0d:b9:f3:84:ab:3a:30:d9:59:20:
45:7b:81:81:4d:f8:61:71:6d:6c:c5:e1:cf:0a:76:
31:dd:de:75:7b:1c:ca:19:35:f0:cc:5c:70:58:c7:
52:6b:4b:a8:c8:3a:22:ad:7d:e5:91:8a:ab:e4:0e:
2a:97:8f:3e:6f:74:e6:bd:62:3c:49:8b:6f:2c:9b:
d3:2d:5b:16:82:da:fe:f9:98:1f:48:51:16:88:9d:
8d:69:0f:ad:51:db:0b:ad:f6:74:03:ef:8b:26:bd:
9c:b1:53:73:a8:33:25:e1:7d:39:19:2e:de:de:8b:
a6:f4:6b:c6:31:49:8c:82:04:42:82:96:ef:4e:89:
28:f1:4d:9e:92:6e:8d:02:8c:a2:66:e5:f5:40:87:
e3:64:7b:52:c9:a2:40:e6:df:3e:dd:99:62:86:4d:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:8C:14:67:57:BA:78:E2:E7:E3:6C:1B:67:77:E7:84:1B:34:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rS-MFGdXunji5-NsG2d354QbNPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:d8:c2:c8:df:77:8c:f0:d6:22:5d:39:9d:ac:ff:5e:44:67:
95:d7:33:51:58:0a:a4:73:60:e8:36:00:b1:d6:c3:5d:4a:4b:
ad:da:48:c8:bf:a7:61:90:b0:5b:d4:25:ca:35:c3:9e:a4:06:
e0:27:9d:55:e8:2a:4a:e1:a3:89:d0:3b:0e:37:d8:42:d4:b2:
93:15:5a:8f:b9:7d:13:7e:5a:f5:02:46:db:84:34:14:65:11:
cd:00:91:20:64:1e:84:de:45:04:ec:0b:66:f0:c9:5e:ac:3b:
b8:d6:ef:62:f3:86:75:1b:fa:66:50:c3:e9:2a:94:9e:13:eb:
01:9e:c2:b0:97:33:d1:3f:f2:1c:a4:2b:ef:40:87:96:63:7e:
43:11:9c:a1:06:70:48:3e:49:d3:d1:43:90:6c:d8:1d:e5:13:
c6:6c:cd:4f:c2:9e:5a:0c:7b:9d:81:1a:d6:08:1c:9a:55:31:
e7:58:6a:1c:c9:bd:c5:c2:03:7c:34:02:82:49:a5:15:17:5f:
85:d3:e0:68:2d:a9:80:7f:79:90:5c:00:9d:dd:ac:34:65:7f:
5c:dc:ad:db:3b:9c:fe:d6:b0:78:0a:fd:be:0f:c4:1c:36:e5:
27:4c:db:87:79:2a:41:22:69:de:6a:f0:2e:8c:ee:67:92:07:
bf:99:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:08 2025 by rpki-client