Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x-dzpNNQCZOqpmkf5zWZPgnAP_I.roa
File: x-dzpNNQCZOqpmkf5zWZPgnAP_I.roa (raw, json)
Hash identifier: Etc/rsgvTDyZl/buZ059H+dmyoOCIdVxOJhCVYDdNOw=
Subject key identifier: C7:E7:73:A4:D3:50:09:93:AA:A6:69:1F:E7:35:99:3E:09:C0:3F:F2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D04AD45D40FE954729846D38F3E626790
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x-dzpNNQCZOqpmkf5zWZPgnAP_I.roa
Signing time: Sat 13 Jan 2024 21:14:40 +0000
ROA not before: Sat 13 Jan 2024 21:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:ad:45:d4:0f:e9:54:72:98:46:d3:8f:3e:62:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 21:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e773a4d3500993aaa6691fe735993e09c03ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:98:6d:05:9a:03:7d:6b:e1:f9:62:84:82:
35:dd:f5:b7:ec:c7:ad:c3:d0:1c:8f:df:3f:58:bc:
3c:03:8d:70:57:32:fd:89:9e:95:ed:34:58:7b:76:
71:5e:2a:35:99:4f:a5:9e:4b:36:70:57:bb:72:c1:
06:05:dd:88:bd:41:58:9a:75:41:b6:21:62:e7:00:
2a:a5:b7:0b:b8:3c:67:12:53:b1:fa:f4:3b:28:bf:
96:24:2f:a5:d2:15:3b:03:e0:4d:c1:0c:12:86:cb:
69:5d:6e:a8:5d:f1:8a:2d:c3:c0:1e:54:28:31:3c:
b6:80:b5:6e:23:d7:bb:24:f6:ff:0b:ea:c6:d0:4c:
86:13:8f:8d:51:91:02:57:20:4a:fd:ae:5b:fd:96:
21:3c:46:5b:4e:88:e4:9d:d8:97:e9:83:80:3a:ef:
7d:6a:e0:b6:2b:6f:60:9d:26:28:08:b7:f6:22:f7:
b2:33:30:d4:60:15:89:a6:b3:00:7a:03:86:b9:bd:
c1:4d:5e:6b:b0:d0:3d:28:76:78:b4:72:65:b0:bc:
de:26:c5:56:ee:09:5d:20:57:be:64:c8:24:3d:bc:
66:b3:ee:71:3d:0c:6d:7b:b8:7e:6d:31:e3:53:0d:
bd:19:d6:43:91:0d:84:44:22:48:cb:0a:5f:af:1d:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:73:A4:D3:50:09:93:AA:A6:69:1F:E7:35:99:3E:09:C0:3F:F2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x-dzpNNQCZOqpmkf5zWZPgnAP_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ea:b5:58:7d:82:76:c2:8d:d5:88:28:87:5b:37:c2:85:03:
84:97:e8:ab:1f:d8:d4:22:4a:3c:31:64:21:7a:cb:61:eb:d0:
03:85:af:d2:1d:8a:ad:8c:7e:b7:f7:91:a1:4d:bf:55:a3:03:
ea:48:0c:7f:20:16:ac:8b:a6:17:3d:da:11:f3:15:20:01:16:
8c:50:51:da:35:11:cf:ae:4d:77:03:28:e9:c8:e9:7c:12:e4:
be:79:e8:fc:03:0f:0f:a7:2c:29:9a:19:bf:6b:b1:3c:89:5d:
08:2d:b5:5f:82:81:21:13:61:31:f9:2f:9d:40:e0:91:df:85:
01:d0:fd:e3:7e:da:eb:bb:89:46:34:57:cc:ba:e7:0f:73:a9:
4f:a5:96:db:3a:68:60:79:c1:f7:a4:8b:49:43:43:51:40:ac:
74:5d:72:86:ea:00:12:fe:38:88:0e:15:29:74:3d:19:a0:08:
f0:61:2e:9a:c2:9f:61:0f:4e:e0:75:04:94:99:f7:b8:9a:19:
11:48:f7:3d:78:8e:9b:a6:6f:30:90:b6:f7:45:e8:22:0c:05:
4d:2f:9d:5b:26:56:64:31:64:bc:7f:fb:e4:84:a0:ae:99:88:
cd:16:8b:a8:30:7a:6b:39:d4:bd:a2:b3:6b:8f:6e:b2:d3:21:
d3:9c:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:57 2025 by rpki-client