Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/scnlsEXFgmL7pfSgcuiGLD1BuCc.roa
File: scnlsEXFgmL7pfSgcuiGLD1BuCc.roa (raw, json)
Hash identifier: Gqy7IE9q0YYyDhbXKayilZLmC6Fm4EBD8o/XaXrhD3s=
Subject key identifier: B1:C9:E5:B0:45:C5:82:62:FB:A5:F4:A0:72:E8:86:2C:3D:41:B8:27
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7CD69A625BC0BDEA368736CB7B6F8C97
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/scnlsEXFgmL7pfSgcuiGLD1BuCc.roa
Signing time: Tue 06 Feb 2024 05:14:15 +0000
ROA not before: Tue 06 Feb 2024 05:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:d6:9a:62:5b:c0:bd:ea:36:87:36:cb:7b:6f:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 6 05:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1c9e5b045c58262fba5f4a072e8862c3d41b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:ec:8f:98:40:00:ac:e7:38:9b:33:32:c1:
eb:71:c8:c6:69:6b:ca:c6:39:2f:5c:15:87:a6:c3:
e3:2f:d1:3e:05:3e:7a:a5:54:fd:2e:3b:75:97:95:
36:ef:4f:ce:9f:f6:25:51:1d:a7:e9:77:90:ee:fc:
26:7c:13:5c:fa:32:36:17:e6:8d:6e:d3:8a:d1:7d:
3b:aa:22:99:dc:c1:ea:bd:f6:b3:5d:f0:8c:b2:94:
39:b2:d6:dd:f9:97:ee:65:01:05:3e:11:98:ff:34:
03:ee:d4:4b:49:f7:6b:68:12:f2:16:df:95:4e:b3:
ee:d9:38:9d:70:4d:fd:55:6a:26:63:38:4a:e2:2f:
f1:91:03:d8:20:7d:ea:ad:e1:81:8c:48:56:48:96:
e3:a5:73:e1:f4:ed:a1:39:67:b0:b8:04:0e:6a:af:
73:75:87:a6:9f:d5:1f:68:88:4f:33:d2:9a:d8:33:
62:44:50:22:d2:2f:2a:94:6f:6a:55:34:33:72:17:
e2:27:34:73:98:27:18:3e:26:96:ca:99:d2:fb:60:
55:08:be:22:32:27:7f:fd:2b:02:68:a2:7f:21:99:
73:7d:f2:fb:e8:99:45:12:76:7a:49:1d:42:9c:bd:
d4:d4:ea:57:d0:6c:42:9e:2a:dc:37:33:97:01:4a:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:E5:B0:45:C5:82:62:FB:A5:F4:A0:72:E8:86:2C:3D:41:B8:27
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/scnlsEXFgmL7pfSgcuiGLD1BuCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:f4:a5:1e:b1:2b:fe:45:0d:04:18:d0:2c:00:60:a8:fe:9e:
ae:fe:89:e2:dc:2f:cc:d4:85:e5:85:1d:d2:be:20:cf:fb:74:
55:7a:bd:42:ee:af:db:90:6c:fa:58:5d:14:5b:2a:a4:ec:ee:
88:70:a5:95:10:0b:8a:6b:df:a4:3f:92:1c:90:3d:61:b8:83:
c4:d3:aa:11:f2:a2:1f:b5:c0:dd:91:28:50:da:a8:fb:8e:50:
b7:49:5e:e0:6e:0c:3d:0a:aa:e0:8d:4a:bc:2f:00:e2:45:36:
3e:15:47:a0:c1:d6:14:4a:94:fa:8a:2a:7d:51:80:5e:5e:d3:
1e:85:cb:3c:d4:64:ec:c3:2d:c7:79:96:f0:50:73:7d:f8:80:
8f:70:8f:49:06:7b:be:56:a0:24:6c:5e:14:34:fc:01:e3:f4:
40:e7:59:76:a2:1d:bb:39:13:36:ad:a1:50:f0:97:0a:1a:db:
2e:46:d9:20:c3:db:48:11:79:6c:ab:04:56:f2:97:e3:ac:b7:
6c:5b:39:d0:9a:b1:17:19:f2:dc:9d:a4:dd:20:ac:d2:01:67:
03:a0:39:6a:67:5e:24:01:5e:e4:94:87:d3:d2:49:d9:52:93:
62:96:37:6e:8a:93:2b:0f:36:1a:e1:8e:dd:a2:6c:55:5a:48:
9c:fb:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:13 2025 by rpki-client