Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yXy3MjHG7eJOZmkzzzlZoaI81BU.roa
File: yXy3MjHG7eJOZmkzzzlZoaI81BU.roa (raw, json)
Hash identifier: 2I85wD1z1BIEp+5WHYJmYa6O6zemCXGpeEz+5qrd0Uw=
Subject key identifier: C9:7C:B7:32:31:C6:ED:E2:4E:66:69:33:CF:39:59:A1:A2:3C:D4:15
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE8FBBC64A1B967A93A2B21E43E11B898
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yXy3MjHG7eJOZmkzzzlZoaI81BU.roa
Signing time: Tue 27 Feb 2024 05:13:48 +0000
ROA not before: Tue 27 Feb 2024 05:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e8:fb:bc:64:a1:b9:67:a9:3a:2b:21:e4:3e:11:b8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 05:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c97cb73231c6ede24e666933cf3959a1a23cd415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:a7:ad:1a:a8:83:df:0e:c1:be:ff:64:7a:
5f:09:31:80:0e:d4:0e:fa:d5:7c:0f:96:2e:c9:5a:
71:8d:5f:ee:84:56:af:aa:28:69:94:94:6c:f6:b8:
e9:91:53:ff:1e:e0:a8:ab:37:b5:34:9f:af:f8:4a:
66:ae:f1:ca:2b:ff:42:a2:f8:7d:1a:8c:88:92:a6:
d1:e9:02:00:66:78:98:e6:ea:73:76:3f:18:3c:32:
41:2d:db:96:fb:b3:dd:cf:0d:82:ca:69:5a:a5:1d:
8c:a8:ee:c9:95:16:af:e3:62:90:19:61:f4:c4:47:
b0:da:49:68:7f:a8:62:a8:c5:97:a9:d6:08:ca:fd:
a4:47:40:8d:98:8c:d6:99:13:18:7b:f5:12:38:a5:
b3:4c:c8:0b:94:77:d8:60:49:98:17:86:50:aa:f9:
72:46:3e:25:66:e8:9f:15:90:6d:c0:01:7f:7e:e2:
b7:8c:11:e9:d9:67:a9:d9:20:1b:a9:61:ca:b6:8f:
0c:ab:b8:ba:de:79:48:45:c3:b5:a8:d9:00:8d:12:
0f:24:24:30:9f:8a:7d:d6:5e:f1:13:e4:c6:c5:d9:
4e:a7:3b:a9:4c:cb:93:59:8d:e1:f4:0a:95:dd:15:
7b:31:dc:c8:50:89:0a:23:03:9b:da:7a:ad:41:7e:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:B7:32:31:C6:ED:E2:4E:66:69:33:CF:39:59:A1:A2:3C:D4:15
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yXy3MjHG7eJOZmkzzzlZoaI81BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:b5:dc:1f:7e:c3:c6:52:d8:17:4a:52:1b:33:c2:05:01:fc:
ce:e9:1b:28:38:48:0f:cf:89:da:1c:b1:dc:1a:1b:38:c3:ca:
15:b8:71:54:7d:57:3f:e1:2d:8a:0b:b0:8c:2f:ba:7a:00:2e:
4f:f2:9c:a7:7d:1f:31:7f:af:47:b2:b4:74:a0:de:10:bf:b9:
89:12:38:96:9b:78:e2:35:d8:91:d7:fa:45:4c:39:77:33:72:
70:52:8a:e7:50:d4:01:ca:73:a8:2a:53:77:90:17:c3:2a:60:
f3:a1:21:df:ff:2e:89:57:3d:06:25:2b:82:96:0f:ec:e3:ff:
98:24:4b:75:de:1f:f5:61:da:bd:82:fc:91:c8:63:44:0e:d9:
a6:91:f6:86:46:55:72:80:fc:ed:2a:7f:df:9e:2b:45:b6:ce:
22:14:8a:e5:c9:86:a5:85:cc:75:6e:2d:e3:46:96:80:e7:3e:
ed:f3:bd:68:df:b0:42:7f:39:a8:e1:20:b9:6f:6f:d1:6c:05:
ea:f8:08:43:d0:d2:c4:63:d4:d4:d6:ba:46:a6:ef:5b:45:f8:
a4:22:f9:0e:98:f7:9a:a8:41:1a:9b:55:d8:b0:11:82:33:58:
1e:eb:5d:77:72:fa:7b:14:a6:60:27:62:5d:c5:7e:8c:ee:4a:
ae:de:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:18 2025 by rpki-client