Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zAPBn8DNcU8ZPHC8dAsYC46TXHE.roa
File: zAPBn8DNcU8ZPHC8dAsYC46TXHE.roa (raw, json)
Hash identifier: mJAFNHEqg7XYWHnYPJenOAsqYx2Y7fMXH1b2wCbvh+M=
Subject key identifier: CC:03:C1:9F:C0:CD:71:4F:19:3C:70:BC:74:0B:18:0B:8E:93:5C:71
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9C5B9A96CEE69CB58451F809404ABA9A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zAPBn8DNcU8ZPHC8dAsYC46TXHE.roa
Signing time: Sun 24 Dec 2023 15:04:58 +0000
ROA not before: Sun 24 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9c5a:f624/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9c:5b:9a:96:ce:e6:9c:b5:84:51:f8:09:40:4a:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc03c19fc0cd714f193c70bc740b180b8e935c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:6c:cf:33:55:d5:2e:14:cb:77:1c:8b:fb:
29:4a:8a:d0:c2:ef:7f:05:81:5b:57:36:31:6d:90:
61:00:6b:60:22:e5:10:16:88:78:e5:ab:b9:a3:a4:
b0:be:61:20:be:80:18:17:b3:44:ca:b8:bf:96:fd:
85:dd:1b:00:6b:d4:e5:84:d8:5c:eb:56:3b:27:78:
61:89:ba:c4:70:61:37:de:1a:e7:e2:cc:e8:02:5e:
7b:d9:45:79:81:fc:10:36:9e:c9:40:55:e5:26:e6:
69:30:48:46:59:7e:15:7e:75:08:65:c6:4c:41:76:
40:68:7b:fc:84:31:f7:07:db:26:0c:ca:6a:e6:e6:
a3:e0:d0:02:33:ca:aa:b4:94:1c:02:5e:e1:a3:05:
19:00:f0:ce:7d:8c:80:e5:54:25:23:d6:90:bf:40:
34:9a:f3:b5:18:46:20:79:fe:92:be:44:b5:9f:18:
b7:e9:d7:4b:8e:7a:88:bd:05:11:c2:b8:19:36:6d:
e6:b6:60:b5:39:e4:2e:5a:4e:00:a4:03:c9:48:42:
d5:0a:3d:96:be:5c:de:dc:6b:21:64:b6:53:d3:99:
0c:c8:a1:e8:cf:94:45:bb:1c:00:bf:46:fe:73:8c:
1e:34:f6:9a:f1:07:e8:60:0f:06:6b:6c:e1:e2:7b:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:C1:9F:C0:CD:71:4F:19:3C:70:BC:74:0B:18:0B:8E:93:5C:71
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zAPBn8DNcU8ZPHC8dAsYC46TXHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:a2:3b:9a:44:3b:5a:a1:dd:eb:ca:94:b7:27:f3:de:d1:b7:
7f:f1:7a:ae:64:c2:dc:b2:ce:c9:1d:74:6a:b1:5b:86:24:a4:
a9:59:33:74:b6:f8:88:ca:b2:24:3b:fb:54:84:36:cf:4e:0d:
94:43:86:69:00:ae:e8:57:a2:4a:05:ae:1e:70:85:da:7a:c8:
69:0f:b0:2d:bf:a7:87:26:18:d6:c4:86:95:1d:70:62:f7:25:
e2:09:29:18:be:9e:48:b3:a6:76:3c:28:e3:c6:1a:b7:63:c0:
b4:73:53:43:a7:5f:1d:00:71:34:75:c5:11:db:67:1b:76:ae:
14:f7:e8:3b:34:a7:c1:54:89:0f:0c:e4:8f:e1:44:54:45:1b:
8f:71:8f:0d:cb:7c:e6:6b:af:6f:43:68:6b:1b:1d:43:89:10:
e7:d6:22:6c:dc:31:ed:dd:ba:f1:50:5e:c6:8b:db:9f:93:4e:
64:f1:62:1d:52:93:31:30:74:4f:5d:38:5a:98:08:f0:92:f2:
bd:bf:7b:1e:64:ad:5c:98:40:81:c7:ad:6b:e0:b2:db:83:74:
fd:78:17:30:c3:c8:ee:9c:b9:04:ba:ec:08:42:5c:53:42:26:
7d:00:f0:e1:ad:77:71:c7:7c:66:27:3c:79:58:49:bf:92:e9:
23:46:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:02 2025 by rpki-client