Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rfN6RHzYYpk7zh_Lg1o15QXrnbM.roa
File: rfN6RHzYYpk7zh_Lg1o15QXrnbM.roa (raw, json)
Hash identifier: UQ9WTzgMTQOFcQOUVEYtuP6bmjwrq4PKwBk1rxAooX4=
Subject key identifier: AD:F3:7A:44:7C:D8:62:99:3B:CE:1F:CB:83:5A:35:E5:05:EB:9D:B3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD509A4DF777F1EDDE1D27D891C5E4680
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rfN6RHzYYpk7zh_Lg1o15QXrnbM.roa
Signing time: Thu 04 Jan 2024 15:13:48 +0000
ROA not before: Thu 04 Jan 2024 15:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:09:a4:df:77:7f:1e:dd:e1:d2:7d:89:1c:5e:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 15:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adf37a447cd862993bce1fcb835a35e505eb9db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:68:e6:e9:9c:a8:0e:9f:0a:bb:06:42:e8:
c3:43:8b:b3:e3:7c:31:4d:a8:0c:30:ad:ae:63:90:
49:31:76:fa:6c:8b:3a:15:d6:03:c7:31:68:3e:61:
a8:19:21:ec:d2:14:4a:c4:c3:56:c4:e0:b3:1b:88:
ca:c8:6f:0f:69:86:ac:6d:67:00:09:b0:24:88:55:
8f:51:97:97:9d:0f:58:aa:fe:5a:12:73:40:6f:92:
7a:7a:73:1c:42:7f:4c:40:56:ad:c2:41:ed:ac:4d:
07:1b:54:de:40:53:33:53:e7:d8:bb:5f:da:29:0d:
8c:9e:0c:e4:4a:22:25:2a:6e:3e:c4:7d:cd:f8:ee:
e7:41:f2:5c:01:31:8c:41:5b:e0:6d:43:bf:26:06:
be:02:ad:2a:b4:33:56:70:e7:64:34:66:a4:3e:f1:
a8:83:ba:7a:0d:69:c2:9c:74:fe:1d:aa:b4:ac:23:
bd:b0:50:f5:e1:1e:cb:bd:0b:a0:3e:ac:3c:e4:92:
e6:32:d5:a8:ea:d3:56:0a:ce:c2:27:9e:82:70:8c:
c2:61:37:b7:05:3a:a2:e7:4f:8c:0e:f7:09:60:fb:
e4:ec:2b:d1:c1:c8:0a:30:b0:0f:74:34:de:34:77:
36:e5:77:ea:67:c4:1c:37:bc:66:cf:1e:0a:ea:40:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F3:7A:44:7C:D8:62:99:3B:CE:1F:CB:83:5A:35:E5:05:EB:9D:B3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rfN6RHzYYpk7zh_Lg1o15QXrnbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c9:0f:24:92:02:ab:16:35:8d:a8:3f:46:f9:45:c3:91:b3:
6b:a2:1c:6d:a2:5f:98:88:01:7c:2e:62:11:64:90:5a:5e:51:
af:c2:11:85:ba:6f:1a:ce:81:99:6a:30:7d:6d:b2:71:6d:dd:
4c:df:d2:18:cb:f3:71:a1:4d:0c:9c:17:88:d1:6c:20:e2:b2:
e7:28:32:2f:16:5d:0a:1d:65:0b:27:ac:67:aa:a1:8a:4f:2f:
00:c8:b2:26:97:61:f3:d6:1c:f1:8b:4b:8d:29:f8:47:43:61:
5d:a1:a0:8f:e6:1a:f3:bd:04:5b:e3:e6:e6:ec:f5:1a:28:ab:
ed:da:3d:4d:df:89:ea:75:81:f7:8c:5c:f4:14:d6:8c:d4:ec:
e3:68:45:20:8c:4c:dd:04:96:0d:b3:37:46:2e:b4:63:6b:73:
27:fc:ce:80:da:2f:78:da:c8:a0:cb:bd:33:8d:3d:69:35:bf:
da:f4:00:33:83:0f:6c:b2:c0:a5:9c:9e:38:ef:35:54:27:a7:
10:64:9f:b8:e9:47:bd:4b:8c:f7:42:31:59:aa:0f:1d:9a:b0:
70:43:ab:e3:2f:89:8f:be:2e:18:c8:ae:5c:aa:4b:1f:fb:25:
5b:8c:1a:da:b1:e1:44:89:0c:44:04:46:b4:58:cb:38:04:94:
25:3d:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:12 2025 by rpki-client