Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/t0qv8pn_enfB4VhJAMEtRJVkOyo.roa
File: t0qv8pn_enfB4VhJAMEtRJVkOyo.roa (raw, json)
Hash identifier: zGIfj/FMFvcjShzLiXrSnZRBKhoUW4I47BRykesuM0g=
Subject key identifier: B7:4A:AF:F2:99:FF:7A:77:C1:E1:58:49:00:C1:2D:44:95:64:3B:2A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF753EB02AB6DAFD1D6C6EFEE7135299F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/t0qv8pn_enfB4VhJAMEtRJVkOyo.roa
Signing time: Fri 01 Mar 2024 00:04:48 +0000
ROA not before: Fri 01 Mar 2024 00:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:f753:7d98/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f7:53:eb:02:ab:6d:af:d1:d6:c6:ef:ee:71:35:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 00:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b74aaff299ff7a77c1e1584900c12d4495643b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:20:fb:0e:4e:80:2a:10:81:3e:be:48:80:
29:52:4b:b4:fd:89:81:9a:5e:4c:1b:10:d0:8d:4a:
69:55:55:13:8c:b9:31:86:aa:6a:f5:16:a1:05:f1:
1d:9e:00:c9:ed:11:39:82:67:45:bd:7e:d3:a0:30:
85:7b:45:31:75:cd:fb:af:a2:9b:33:49:8b:97:09:
76:32:fe:22:80:e8:cf:c0:f8:9e:21:b7:ad:be:17:
a4:f1:69:b4:67:66:b9:5d:e3:04:cd:2f:8e:31:1c:
53:eb:30:f7:ea:3e:00:a5:25:36:b2:a8:f1:39:29:
f2:3d:fd:3d:d5:8b:3f:98:fd:d7:9c:4f:ce:79:31:
1e:01:1c:8e:ed:08:da:25:b5:54:b3:ef:f5:07:4a:
5b:a4:fe:bf:86:72:57:3a:81:a7:13:be:e6:06:4e:
63:bd:fb:af:65:ae:15:16:0a:9b:89:fc:38:39:c7:
17:27:02:4c:35:33:2f:40:8a:0b:c3:00:30:fa:b1:
8b:f4:0c:fb:e6:81:72:2b:37:44:7b:a3:95:91:88:
74:20:0c:bc:8a:6a:9d:32:b9:b8:5d:1e:bc:d9:12:
74:c9:d7:07:90:fa:6c:41:47:25:c8:98:8b:71:b4:
a5:2b:92:5d:f7:4b:34:21:88:9f:3f:f2:b7:e9:92:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:AF:F2:99:FF:7A:77:C1:E1:58:49:00:C1:2D:44:95:64:3B:2A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/t0qv8pn_enfB4VhJAMEtRJVkOyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:22:d6:8f:10:be:10:6a:16:b7:a8:ab:ba:72:d2:fe:1f:87:
20:b9:66:9f:3e:df:48:59:70:48:a1:bf:dd:85:65:e5:39:21:
97:0a:c7:fd:ad:a9:1a:95:ed:e9:ec:ad:7c:bd:f1:9a:8d:18:
74:b4:08:9b:cd:19:60:8a:86:d6:1b:15:fc:bf:d5:9f:d2:bf:
6a:2e:45:c9:68:30:1c:3f:58:a5:ba:51:3d:0b:c0:06:a4:07:
b6:28:07:4c:5f:f2:f3:74:a0:17:ef:46:a2:49:08:d6:c1:b5:
f0:18:1d:e8:f4:dc:1b:f2:45:b4:ec:6f:83:12:6e:cb:9f:ec:
f0:c8:a3:a1:e7:29:c8:79:c6:16:4a:7a:7c:3e:4e:60:1e:34:
23:1f:cb:45:a7:ac:44:08:55:75:3a:03:df:92:0a:4b:e1:52:
9a:61:b4:4a:51:a1:c6:6b:c7:d1:a9:b5:c0:2e:58:7f:e8:bb:
b2:4e:4c:94:0b:d1:91:e8:da:6f:c1:82:c4:1b:c7:30:86:e2:
0a:73:d6:db:96:04:1b:c6:bd:44:49:b8:06:04:da:28:7d:ea:
93:5d:e3:ef:55:53:ba:82:26:92:16:3f:f8:14:43:96:0f:d0:
5f:46:64:bf:f2:8b:05:cc:23:7d:2c:4b:d8:3a:ad:1a:c4:ba:
5b:83:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:59 2025 by rpki-client