Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxE9nKYB90CB83RB4OBkxIDV1qo.roa
File: xxE9nKYB90CB83RB4OBkxIDV1qo.roa (raw, json)
Hash identifier: atFkfih/yRN3kn0pwwgYfwouLnoaC3dzcuRn96xzl1E=
Subject key identifier: C7:11:3D:9C:A6:01:F7:40:81:F3:74:41:E0:E0:64:C4:80:D5:D6:AA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E30D58BA8A697EFE5224BA32E115ED2BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxE9nKYB90CB83RB4OBkxIDV1qo.roa
Signing time: Tue 12 Mar 2024 04:04:45 +0000
ROA not before: Tue 12 Mar 2024 04:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:30d5:65ed/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:d5:8b:a8:a6:97:ef:e5:22:4b:a3:2e:11:5e:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 04:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7113d9ca601f74081f37441e0e064c480d5d6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:19:45:3d:ee:7d:51:65:16:11:d4:cc:70:
18:97:58:01:b1:6e:0b:46:3b:80:c9:30:c0:a1:13:
82:76:11:ad:aa:70:23:44:42:93:df:e7:93:d6:8d:
ca:a7:01:b4:ce:a6:12:6b:62:08:d0:82:b1:b9:99:
05:5b:fe:e2:4d:18:a7:71:76:fe:41:79:a4:24:69:
ba:68:ab:90:91:2f:a1:ab:3d:50:fc:59:d2:0a:1b:
26:f8:b3:a9:b0:01:96:17:83:fd:b9:8c:3f:bb:81:
56:92:7d:6c:d4:30:4a:e2:66:b5:4a:32:f2:f4:78:
b4:e3:84:87:20:b5:3b:43:4b:68:6c:7b:17:5c:5d:
2a:96:8e:c8:9d:20:09:c6:60:0a:01:91:d6:8a:30:
24:90:7c:4f:33:a3:32:86:5a:d0:1a:1c:d3:f6:67:
e8:37:b5:1c:88:fc:b0:02:17:95:5e:a9:77:3e:ad:
e8:1a:c9:61:60:95:99:df:94:32:4d:cf:d2:d9:a1:
9a:8f:30:ea:66:37:2d:fe:3f:ee:f6:56:84:3a:6f:
6b:85:b5:26:96:c7:38:08:d6:18:8f:a9:0f:fe:07:
82:3a:48:11:fb:4b:0a:69:94:b1:63:10:62:9a:62:
8e:44:55:bf:19:16:41:1d:e1:74:da:e1:18:c3:af:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:3D:9C:A6:01:F7:40:81:F3:74:41:E0:E0:64:C4:80:D5:D6:AA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxE9nKYB90CB83RB4OBkxIDV1qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:28:78:5a:c4:a6:ec:45:cb:8e:bb:36:9c:b2:e0:00:6d:86:
dd:70:36:f5:bf:c3:39:59:cc:9f:99:50:43:c0:5d:4b:e0:7d:
83:1b:e5:b3:ee:50:21:1e:40:78:12:4c:98:78:5e:e8:74:e5:
9a:11:69:db:da:88:d3:88:dd:c9:1c:2e:ae:1c:03:cc:05:66:
17:12:5d:d1:5e:4e:a6:77:33:d3:d5:2c:b1:e6:ed:b4:2f:a1:
0e:86:d3:28:e7:b6:6e:df:9c:0e:94:09:a2:79:ec:64:68:d1:
bd:71:6f:54:84:73:77:46:5e:eb:86:51:c2:9b:f2:78:79:d6:
bb:ed:aa:81:38:76:22:75:14:5c:b4:b2:c6:37:0c:6e:b8:4c:
20:a4:3c:3a:ee:c6:17:22:3a:f0:ba:38:b8:04:0f:94:b7:10:
b8:9e:e3:20:38:ac:34:1d:29:3a:41:55:ee:0c:a9:df:61:3d:
3a:20:0d:a9:5a:4c:6c:b3:ed:d5:ce:fb:d5:8f:09:e2:2c:50:
70:a8:3c:fd:dc:3c:a9:73:5c:c0:dc:51:6e:6b:5f:70:8f:bc:
19:03:55:28:77:dc:30:bf:90:f0:e7:72:d5:ed:08:3c:19:1c:
03:92:41:81:00:d8:9f:ac:63:4e:d0:37:37:65:82:d8:c0:15:
21:ea:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:12 2025 by rpki-client