Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBgggxGKJbAxa-q7eR63dVIlGYc.roa
File: uBgggxGKJbAxa-q7eR63dVIlGYc.roa (raw, json)
Hash identifier: 47yNcoLLNuRVCGgSFq009nJSbVdVBS1WtiAsbVP4Syo=
Subject key identifier: B8:18:20:83:11:8A:25:B0:31:6B:EA:BB:79:1E:B7:75:52:25:19:87
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D97A56574D82862544266692780E9F4CC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBgggxGKJbAxa-q7eR63dVIlGYc.roa
Signing time: Sun 11 Feb 2024 10:10:15 +0000
ROA not before: Sun 11 Feb 2024 10:10:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:97:a5:65:74:d8:28:62:54:42:66:69:27:80:e9:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 10:10:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8182083118a25b0316beabb791eb77552251987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:ee:4c:74:04:54:1c:08:9a:f1:0b:79:55:
b7:51:bd:9f:87:33:87:a6:e1:4b:96:c6:2e:c5:d7:
02:3b:b3:2e:11:6a:0d:e4:d3:75:46:50:36:96:38:
12:dc:c4:6f:4b:78:d2:56:02:83:43:96:57:26:18:
1a:98:10:ef:d1:db:aa:ba:bb:1e:bc:e9:95:84:f3:
a3:0b:da:fb:ed:cf:23:d6:8b:39:57:69:16:b3:c7:
c6:25:ac:52:96:65:cb:44:88:e3:87:fc:7a:e5:32:
37:3c:b7:1e:60:cf:ab:db:fa:3d:3c:a8:dd:3a:61:
ae:44:0c:72:b7:38:7b:e6:56:50:0c:da:fa:9e:43:
2e:4d:da:7d:08:b3:30:ac:d9:b8:fd:5c:00:a3:39:
3a:fb:d7:a6:1a:7e:a4:73:7e:62:c4:75:0b:6b:7f:
67:4c:a6:63:a3:5f:ee:f5:c5:ce:10:9a:2f:ee:aa:
99:44:7f:4f:ab:8f:e2:e1:2f:a2:74:5c:ae:38:92:
80:bf:4f:94:87:5f:26:d9:a1:23:ee:9c:2b:bc:ec:
89:95:8e:94:99:6b:06:33:9c:3c:36:c8:fc:0c:d1:
fd:8b:76:b3:c0:45:bb:07:a3:b9:7f:49:44:c4:3c:
f6:95:d1:ac:ff:a9:6a:4a:33:0a:ef:90:06:1c:36:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:20:83:11:8A:25:B0:31:6B:EA:BB:79:1E:B7:75:52:25:19:87
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBgggxGKJbAxa-q7eR63dVIlGYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:07:d0:68:85:b2:bd:7d:1b:b3:29:55:52:21:87:44:fb:71:
8b:ce:2e:ed:79:b8:b8:fd:9b:38:98:b3:58:35:1e:20:a5:ce:
64:dc:d0:82:48:f6:a5:8b:5b:3b:84:ad:84:7a:c5:86:ee:6b:
49:0d:73:9d:e6:3e:bf:52:e1:2c:0b:f2:df:a6:5f:08:81:a8:
93:02:33:e0:e6:61:d2:8c:72:28:2e:b2:87:32:8d:44:79:3a:
4f:03:51:57:6d:e0:ec:f5:16:cf:7a:6b:7d:ce:d1:24:72:21:
00:4b:35:d8:47:06:3c:55:0d:78:31:0f:d0:7a:73:8c:60:02:
09:84:06:53:79:da:e4:31:61:10:e6:1b:b7:02:84:3d:f3:aa:
73:46:91:b9:37:29:c2:79:95:57:19:f6:33:cf:79:71:2e:f8:
03:c5:07:3b:c9:a3:0b:4f:b5:d1:46:2b:14:c7:33:e8:3a:f7:
ee:0d:1e:c7:7b:2d:c0:40:23:f3:08:c5:fc:68:87:53:00:94:
c8:90:37:10:97:b1:bc:18:64:36:c8:be:77:91:a5:18:57:19:
b0:90:29:89:08:bb:c3:5d:47:5a:15:1a:f9:a4:94:e3:55:7d:
71:46:82:e7:b6:80:b3:05:82:23:47:e0:c1:e4:bb:20:3e:06:
18:40:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:58:29 2025 by rpki-client