Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s5aRrKtrB8yoQiRlTKDStfpv-u8.roa
File: s5aRrKtrB8yoQiRlTKDStfpv-u8.roa (raw, json)
Hash identifier: eO8GZ7bdUgCg3jw2270CYVAWlLGrWqrd0UF3Wr5FYe4=
Subject key identifier: B3:96:91:AC:AB:6B:07:CC:A8:42:24:65:4C:A0:D2:B5:FA:6F:FA:EF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E306C42BDE41C409340AA84809EBD4716
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s5aRrKtrB8yoQiRlTKDStfpv-u8.roa
Signing time: Tue 12 Mar 2024 02:09:45 +0000
ROA not before: Tue 12 Mar 2024 02:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:6c:42:bd:e4:1c:40:93:40:aa:84:80:9e:bd:47:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 02:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b39691acab6b07cca84224654ca0d2b5fa6ffaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:52:24:5f:75:53:74:ca:e3:55:b4:30:5b:
00:24:69:3b:19:79:6e:bf:fa:32:b9:c4:f6:37:5f:
e7:84:ce:47:45:ba:b6:42:e3:5f:80:39:70:2b:6b:
17:53:1d:f3:d3:b7:21:a6:0f:db:d8:64:5c:0a:81:
30:b9:58:56:16:c0:28:f5:8c:2d:21:d9:b5:c8:84:
f2:97:5a:10:f7:44:f8:ca:e9:4c:8c:7e:c3:a8:85:
5b:65:a8:82:65:85:07:02:7a:03:bd:73:f2:75:5b:
50:40:c4:b0:5d:75:63:2e:29:db:44:55:70:c6:03:
aa:63:66:6f:77:06:e5:8b:da:eb:b6:52:ac:54:12:
be:dc:df:16:35:17:54:82:28:b6:01:a8:24:f4:fe:
66:15:1b:05:09:b4:2e:8e:f5:46:90:13:cf:f1:57:
f0:a3:f4:18:91:3e:68:ad:e7:0a:9f:d5:3e:e4:61:
bc:43:84:4f:b8:f6:7b:67:d1:1d:f8:76:33:4c:ec:
c4:76:5d:b3:7f:84:5f:e8:1a:79:d6:8b:52:bd:99:
0c:d6:38:58:f2:e5:8d:e9:ac:06:a0:75:2c:c0:ba:
3b:ed:3a:4c:1c:0a:0a:89:b9:3c:19:4a:f1:a1:7d:
5f:2b:30:60:9d:ba:86:58:f9:8e:8d:13:16:f4:66:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:91:AC:AB:6B:07:CC:A8:42:24:65:4C:A0:D2:B5:FA:6F:FA:EF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s5aRrKtrB8yoQiRlTKDStfpv-u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:56:9b:94:66:68:5d:31:35:11:69:c4:67:1a:fd:53:86:34:
fb:56:df:48:69:97:a8:42:2f:41:18:76:d8:55:e0:4c:1b:02:
01:fe:b7:3c:63:16:ab:05:8a:d5:80:57:6c:20:46:c6:0a:92:
1a:ca:98:60:1a:e9:e9:fa:19:15:86:36:e7:c3:7d:88:60:fd:
90:e2:9d:c9:1d:f0:c5:58:db:72:7d:ac:b5:f9:a7:67:96:b2:
86:a3:7a:b0:3e:0b:e2:d7:48:82:61:96:7c:c6:5b:15:ed:87:
6d:ff:ae:ef:d5:8d:a9:37:4c:61:b1:14:93:6e:15:d0:ac:19:
5e:32:99:05:1d:15:4e:4e:5d:27:24:b1:c2:8c:12:78:49:dd:
bd:74:a7:d8:59:90:d3:8f:7a:92:22:3b:a1:a2:9f:20:cc:be:
02:55:a5:0d:93:1c:d2:e6:66:92:51:c5:bf:ac:00:0f:d2:c6:
74:1b:ff:80:4c:00:ee:51:37:08:1f:43:94:ba:77:b0:09:06:
6d:b6:09:5e:de:05:e0:eb:e6:6a:e2:5c:a2:54:f0:ab:ff:98:
08:d6:fc:ae:e8:96:4a:fc:c4:4b:79:6a:da:91:e0:59:a5:72:
89:7e:17:08:3d:1c:8f:bf:ca:58:0a:84:33:eb:eb:f5:95:38:
bc:05:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:29 2025 by rpki-client