Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sYjxjAwG5bumahCCX74TAM9RWYE.roa
File: sYjxjAwG5bumahCCX74TAM9RWYE.roa (raw, json)
Hash identifier: wjKtnsmgiXwkohdGCDBqBJunNDNnHXUoyiB1a6hAxIg=
Subject key identifier: B1:88:F1:8C:0C:06:E5:BB:A6:6A:10:82:5F:BE:13:00:CF:51:59:81
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D53DA1DB05C80EB6248F442C390DEAA23
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sYjxjAwG5bumahCCX74TAM9RWYE.roa
Signing time: Mon 29 Jan 2024 06:13:39 +0000
ROA not before: Mon 29 Jan 2024 06:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:53:da:1d:b0:5c:80:eb:62:48:f4:42:c3:90:de:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 06:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b188f18c0c06e5bba66a10825fbe1300cf515981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:65:64:d1:d0:4b:4c:a7:66:b5:34:f3:1d:
07:ef:96:b6:d5:2e:18:9f:0c:99:d2:ec:e9:28:40:
d2:48:69:39:ba:c1:3b:2a:86:06:2a:76:e2:e8:dd:
c6:b0:80:9d:0e:4b:62:94:09:f6:bb:ee:16:d8:8c:
f0:ef:89:f4:7f:f8:c0:c4:97:e3:71:9e:37:ce:fc:
47:5e:0b:15:c8:f4:b6:8a:26:f3:cd:66:54:03:4d:
50:56:53:35:8f:21:91:e0:f4:32:14:62:f8:fa:6c:
10:88:2f:5d:34:fb:05:b5:d1:e2:cf:d1:e0:73:a0:
cc:65:e5:da:e8:d8:4d:02:c0:38:dc:3e:93:4a:8a:
df:06:ce:49:a6:45:35:bc:d3:8b:36:e6:18:fd:fc:
bc:c2:7e:5f:40:f3:80:21:c0:e8:72:a4:a6:6c:98:
6a:1f:dd:c6:69:cd:42:f4:ba:ef:4c:96:fa:3b:62:
48:1c:5b:ee:f6:25:6a:42:e0:8b:eb:47:0a:8e:2f:
ed:e4:a4:b5:f8:d2:d1:ad:0f:9a:43:7a:05:9b:10:
75:e7:ca:5f:de:70:e6:af:97:a3:af:a7:e8:f1:4a:
e7:3e:a8:59:22:ef:34:b0:3b:8f:a5:52:66:d8:f8:
8a:39:a1:cc:0c:95:72:02:ac:c8:55:ad:f5:4c:b6:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:F1:8C:0C:06:E5:BB:A6:6A:10:82:5F:BE:13:00:CF:51:59:81
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sYjxjAwG5bumahCCX74TAM9RWYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:84:19:31:6c:08:e7:b3:b4:67:84:8e:12:4b:ff:d4:ce:4f:
65:6c:cb:b1:c6:7b:12:46:20:65:82:fe:8e:04:82:43:f8:5a:
3d:aa:c9:1d:d4:5c:49:2b:1a:1a:3d:3c:72:4c:14:04:f8:b4:
45:61:d5:84:70:0e:a7:b9:ea:bf:2b:42:eb:d5:f2:d1:8f:db:
2e:ac:52:8e:ad:3c:bb:30:d3:b8:f4:a0:43:9f:3c:de:21:40:
63:51:5b:9e:5e:6b:3a:00:7c:6c:de:3a:1b:f6:5c:e8:48:b3:
94:2b:d3:98:e1:30:f1:ec:dd:f1:70:d7:e1:90:ab:73:e7:40:
36:c4:73:49:d0:04:ce:67:ea:9d:cb:50:91:bd:c7:66:89:80:
56:37:00:8c:d2:71:f6:e2:f2:28:95:42:9e:a4:f1:f1:62:6f:
77:32:4f:16:a5:cb:45:54:48:39:cc:87:ba:b5:16:b3:71:eb:
ce:d4:31:7f:cb:97:ba:4c:10:f8:b0:a8:b5:4b:49:f8:fd:38:
d9:69:8d:b0:4a:a9:16:6b:47:e0:c0:d6:93:c2:b3:13:b0:54:
a1:19:94:5f:cb:42:47:5e:0b:18:f6:cb:1f:a7:d9:f6:4c:eb:
aa:7c:73:6e:8c:a7:94:50:ef:d5:8a:ac:5e:86:ea:db:2c:e5:
a4:75:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:20 2025 by rpki-client