Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sx8rbLR3ukRJxB-9zsNSg7u2zRQ.roa
File: sx8rbLR3ukRJxB-9zsNSg7u2zRQ.roa (raw, json)
Hash identifier: 080yMNMWa+qBu5ZudgRTtEOC4seLwp6682+6mgb0qxA=
Subject key identifier: B3:1F:2B:6C:B4:77:BA:44:49:C4:1F:BD:CE:C3:52:83:BB:B6:CD:14
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2052C5988318AAD8246E098016B70512
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sx8rbLR3ukRJxB-9zsNSg7u2zRQ.roa
Signing time: Fri 19 Jan 2024 06:05:11 +0000
ROA not before: Fri 19 Jan 2024 06:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:2051:f173/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:52:c5:98:83:18:aa:d8:24:6e:09:80:16:b7:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 06:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b31f2b6cb477ba4449c41fbdcec35283bbb6cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:ce:56:b4:d0:45:51:88:ed:32:61:3d:8c:
53:e4:53:f6:55:cb:28:7f:33:00:02:e7:bb:5f:fe:
f3:cb:97:b0:2c:d1:d7:a8:7a:97:99:bb:6d:78:b7:
77:90:d6:4c:03:d4:22:09:25:e0:1e:6c:c4:4a:72:
07:75:03:48:83:21:8b:88:5f:16:01:c3:e4:6d:3f:
ce:7d:89:b8:74:64:15:15:b1:b5:a9:0f:88:3e:0b:
a3:93:ee:12:74:6a:96:39:bb:f2:d8:7a:10:a2:12:
d0:5e:8e:07:d9:4f:6e:90:78:e4:03:fc:3b:92:ca:
72:d7:de:bf:e4:18:ac:a2:26:7a:46:6f:e3:15:e2:
ee:fe:87:4e:2b:9b:b8:15:3a:be:ac:c2:9f:70:7e:
01:74:ac:35:19:cd:6f:87:32:a9:97:27:64:5a:bb:
f7:da:91:15:05:b1:1e:25:c5:83:50:4f:cf:84:6a:
d0:0a:cb:e4:2f:9e:77:41:70:8b:51:31:1d:c2:99:
7b:b6:47:7f:75:52:38:16:a5:2f:df:48:a5:f4:6f:
fd:6f:49:05:91:06:11:d6:b7:9b:09:9c:e2:63:c9:
98:98:86:8f:20:58:ca:b6:65:0a:14:27:cf:04:4b:
45:73:35:4d:83:63:50:8a:f1:05:57:ad:b0:35:42:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:2B:6C:B4:77:BA:44:49:C4:1F:BD:CE:C3:52:83:BB:B6:CD:14
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sx8rbLR3ukRJxB-9zsNSg7u2zRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:87:1a:cd:e9:09:c6:d1:eb:40:44:4b:15:b1:98:38:e7:fd:
9f:4e:31:19:12:ab:9d:96:50:64:55:ea:73:18:b5:2f:bc:59:
97:b4:4d:ca:00:97:54:12:74:f5:9e:97:86:fb:ef:dd:d2:8d:
57:9f:8c:89:45:74:ea:4a:3e:07:86:14:9c:db:52:d6:d2:49:
0d:21:fd:1d:da:68:c9:19:73:65:c4:cb:f8:31:b2:af:43:7f:
53:27:6b:93:21:48:7d:82:b7:54:48:18:1a:8c:78:a6:80:72:
c3:3a:ae:c2:33:e7:51:9d:3e:10:bf:a3:ed:81:06:ec:7d:88:
7d:76:31:87:cc:74:0e:c2:d0:14:1f:43:68:1e:b9:74:5c:09:
50:01:a7:86:07:a2:7b:2c:d0:6f:bb:41:0a:d9:27:38:9f:80:
b1:4b:25:33:fb:19:3c:df:b6:29:57:e0:e5:25:d4:4d:43:a4:
df:df:77:f4:7c:12:1d:e3:0c:dd:e2:de:a9:fe:18:7f:13:f7:
68:61:35:c8:75:2a:2d:3e:93:fb:4b:8e:51:6d:14:9d:95:65:
4c:55:90:dd:db:d6:e7:cb:c8:ca:de:96:cd:6e:11:9b:81:ff:
e3:2d:c8:df:de:4d:f3:cd:75:12:51:e2:17:1e:91:e8:b4:31:
96:34:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:13 2025 by rpki-client