Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rYKj9L4zJMHcTArqPLIQ-oUcZNw.roa
File: rYKj9L4zJMHcTArqPLIQ-oUcZNw.roa (raw, json)
Hash identifier: W92Y7SiO/7w5bogoFECOWFOuGfIDVXeSJ54TMIfhUW0=
Subject key identifier: AD:82:A3:F4:BE:33:24:C1:DC:4C:0A:EA:3C:B2:10:FA:85:1C:64:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D86E42740D062655AFDCAD338CD57D88F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rYKj9L4zJMHcTArqPLIQ-oUcZNw.roa
Signing time: Thu 08 Feb 2024 04:05:15 +0000
ROA not before: Thu 08 Feb 2024 04:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:86e3:3a5e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:e4:27:40:d0:62:65:5a:fd:ca:d3:38:cd:57:d8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 04:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad82a3f4be3324c1dc4c0aea3cb210fa851c64dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:e8:46:c3:1c:2f:99:4f:68:46:be:04:15:
fb:f7:fb:51:8c:3e:6a:b0:aa:86:b4:81:4d:af:5a:
e7:0a:a7:d9:f5:b4:b0:ec:3d:ab:b6:bb:4a:93:4a:
a6:49:37:fd:bb:a6:7c:e6:d9:63:26:9e:4a:24:5f:
c5:75:6e:33:6c:6f:9f:39:22:1b:8a:ea:11:7a:25:
57:88:57:aa:0e:77:2b:12:cc:59:ba:35:96:18:30:
54:b9:73:a6:73:88:d8:09:50:a7:a9:3c:07:cb:58:
6e:bd:b0:fb:40:7f:dd:de:b8:0f:da:42:d2:b9:9f:
42:71:be:d0:92:f0:1c:ed:e3:18:77:64:22:41:38:
bb:fe:69:b9:9f:49:82:0f:68:01:82:4c:6f:8d:4d:
7c:d3:88:2d:00:bd:28:9d:c9:a3:93:ed:ec:48:38:
ba:a0:2f:c2:4d:f6:59:d5:48:3c:ab:f1:00:8c:ec:
5e:51:f0:ef:ce:53:14:33:d1:a1:02:6a:ce:bc:49:
5f:05:97:a4:db:3a:e9:7f:cf:2d:67:c6:17:28:97:
7b:28:ac:84:97:15:4d:cb:67:80:16:d9:c6:1b:92:
84:50:f9:3a:7a:6e:dd:8c:ee:c6:74:e1:34:16:d1:
17:90:1d:96:38:95:92:f0:60:1e:bc:a3:d3:85:00:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:A3:F4:BE:33:24:C1:DC:4C:0A:EA:3C:B2:10:FA:85:1C:64:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rYKj9L4zJMHcTArqPLIQ-oUcZNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:73:a8:f3:bc:33:81:6a:c7:a3:53:ed:4e:c9:81:9b:5f:c3:
f3:e7:e2:05:cb:83:6a:b5:b6:e3:e2:52:e5:b3:11:a5:03:32:
d2:cf:3b:6f:96:0a:8e:fe:3c:d0:e7:ae:bd:32:d2:d5:94:78:
2f:51:a5:38:59:f8:d7:67:1d:4d:84:95:c4:4f:55:45:4f:35:
33:21:fe:2d:8c:0f:16:62:a1:0b:b8:25:f8:43:69:10:55:51:
7e:99:53:c6:57:ed:c2:1b:dc:68:cc:0a:48:39:1f:6e:31:20:
d2:76:da:6e:46:4f:9a:05:09:fe:92:96:c2:41:b6:24:66:6c:
38:19:41:59:ca:e4:de:5d:79:01:d2:46:df:53:94:74:17:ab:
a6:ee:6e:8d:fc:34:1b:fb:00:b3:e3:b3:2f:52:f6:4f:91:29:
dd:29:4f:72:29:8e:54:75:0a:ed:a2:43:b6:84:5a:bf:a0:3b:
86:35:3c:57:97:04:21:7f:7d:9a:32:b8:9b:6d:ad:b4:6f:e1:
91:f7:1d:df:bb:de:c1:6d:55:2f:fb:d6:bc:23:45:77:3a:59:
07:97:b6:9e:72:35:70:73:d5:d2:4d:2f:58:c7:f2:c5:da:bc:
5e:a2:93:e0:4a:a9:60:48:71:5f:17:0b:8a:91:73:91:59:fb:
e2:a0:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:31 2025 by rpki-client