Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tW1XYHGkms9V6zv2F7scz-BSqAA.roa
File: tW1XYHGkms9V6zv2F7scz-BSqAA.roa (raw, json)
Hash identifier: lSMw7pHSAqFf+aOT+dRK42ZONNpoXV9j4YtTa3CqRZk=
Subject key identifier: B5:6D:57:60:71:A4:9A:CF:55:EB:3B:F6:17:BB:1C:CF:E0:52:A8:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB0C659BFDBF9C27D541AE840512027CC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tW1XYHGkms9V6zv2F7scz-BSqAA.roa
Signing time: Thu 28 Dec 2023 14:13:58 +0000
ROA not before: Thu 28 Dec 2023 14:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:c6:59:bf:db:f9:c2:7d:54:1a:e8:40:51:20:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 14:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b56d576071a49acf55eb3bf617bb1ccfe052a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:50:d0:25:c0:45:68:d8:8b:7c:24:1e:82:
96:8a:d9:69:54:8a:f6:90:48:d4:40:6d:6d:00:c1:
bf:06:60:4d:3c:e1:b4:a3:22:6f:26:1d:60:b8:26:
c7:a5:21:fb:28:75:97:9c:e6:5c:ce:f9:d5:1c:e4:
91:89:af:94:34:a7:55:74:5a:02:94:08:ee:8d:3f:
ba:78:5e:2e:5b:b6:37:aa:5c:7b:c6:3f:d4:9f:ad:
54:9b:d5:92:ca:8b:10:9d:12:da:cc:6e:a7:5b:c7:
6b:ba:3d:57:9b:d9:3a:da:3c:52:a1:e0:a0:b9:b0:
94:02:73:b4:5b:99:98:13:6e:0b:6b:8b:e5:4f:55:
2b:ee:e8:54:fc:83:d3:ab:c7:12:1b:28:b0:43:78:
37:76:48:23:ff:d1:19:b0:ed:2c:b0:99:db:29:85:
46:0e:c3:23:df:bf:4e:54:ef:e1:52:24:49:22:b8:
70:ee:87:a8:01:d0:e5:8a:b5:a3:6b:4e:dc:59:a0:
6e:78:32:c2:43:e9:41:58:17:1f:e9:aa:b3:23:75:
2a:05:72:e6:49:e5:06:b2:b0:ef:a1:2c:a0:39:fd:
66:5f:1f:aa:bc:76:38:35:76:62:2a:3c:9e:96:ef:
01:41:8c:69:76:e4:23:6f:79:a4:d2:c1:78:cf:ab:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:57:60:71:A4:9A:CF:55:EB:3B:F6:17:BB:1C:CF:E0:52:A8:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tW1XYHGkms9V6zv2F7scz-BSqAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:5b:77:fd:4d:d6:c0:9a:48:3d:93:16:de:20:94:5e:af:63:
7f:60:b8:a4:27:78:d4:2a:5c:e4:06:95:bd:21:9d:bc:34:8e:
ce:8c:90:c7:da:ae:24:31:d7:51:b6:e1:ef:db:d0:24:38:f1:
4b:2a:d5:8d:a0:52:b8:53:08:2f:27:8e:ec:92:97:f9:48:a4:
2d:83:58:c5:a5:78:79:60:bb:46:67:8b:88:a4:d9:42:dc:e9:
e6:ea:b3:cf:bc:12:cc:c7:7b:77:75:41:1f:38:b4:e8:5f:e7:
0c:ae:d7:11:25:58:cf:19:9f:3d:bd:29:60:18:b7:0a:37:c6:
aa:34:ad:39:d1:bf:58:63:02:41:bd:3d:c6:d9:ec:a0:ff:04:
a3:11:fa:da:ce:86:a2:e3:b2:94:f0:b2:8a:f3:18:8c:f1:1f:
db:f8:53:1c:4d:90:3c:ef:ef:52:84:d9:de:11:70:8f:13:f7:
ab:7f:c4:c7:4e:a9:09:d7:99:da:16:69:20:da:58:26:59:d7:
a1:7b:44:09:b5:2a:7e:bd:fb:7c:80:0b:9a:5f:af:d2:99:b3:
f8:ba:a5:d7:41:bc:45:6f:12:ae:00:53:d3:9f:92:dc:c8:1d:
56:39:81:c0:ba:29:0d:a7:19:ae:0e:f7:f3:61:d3:7e:2e:4a:
ed:82:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:55 2025 by rpki-client