Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIqK0VKYy8y8wd-p5T3mB1Bkcc0.roa
File: zIqK0VKYy8y8wd-p5T3mB1Bkcc0.roa (raw, json)
Hash identifier: zjU/s3glsiN2CyJ1K4fmZpP6ixWXWkZpc9Z6J56zllg=
Subject key identifier: CC:8A:8A:D1:52:98:CB:CC:BC:C1:DF:A9:E5:3D:E6:07:50:64:71:CD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8ED6E9819615C9F48B85F346E0659256
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIqK0VKYy8y8wd-p5T3mB1Bkcc0.roa
Signing time: Fri 22 Dec 2023 00:04:58 +0000
ROA not before: Fri 22 Dec 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8ed6:5963/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:d6:e9:81:96:15:c9:f4:8b:85:f3:46:e0:65:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8a8ad15298cbccbcc1dfa9e53de607506471cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:2c:03:5c:e6:fe:e8:3e:71:ae:14:6c:78:
9c:84:39:bc:11:b1:b5:66:08:10:aa:d3:2d:8b:15:
5f:76:35:88:2a:ea:15:1b:71:9f:cb:be:02:a1:ce:
2b:20:c3:11:f1:a9:7c:d6:2e:8f:6f:ce:fd:08:d5:
2f:0f:b7:cb:71:70:93:7a:5b:35:4e:4c:b4:89:60:
57:94:55:64:25:e1:7e:8a:da:0a:8c:2f:c1:ee:b6:
b9:e2:8f:2f:e6:a0:1a:41:9e:dd:63:18:ee:5e:ff:
c3:7d:bf:c1:9d:45:2c:88:9d:bb:54:57:d0:b6:f9:
d6:b3:38:91:6e:b9:67:9d:ea:61:23:8a:fb:f9:90:
6f:00:11:dc:3c:c0:78:d4:fd:81:9c:b4:68:4b:a8:
55:56:cf:06:ea:e5:60:e0:33:f9:ec:fb:7d:6d:96:
9e:69:38:b5:52:71:bf:e2:ee:f8:65:1c:9c:da:71:
5a:3a:93:cb:36:a7:15:a7:06:b9:c8:5f:24:48:5a:
42:87:a5:ca:46:5e:a0:e1:0a:74:be:bf:89:34:ac:
3a:d8:8a:e5:c9:5f:fd:4f:1e:08:62:3f:db:95:ff:
32:ca:95:94:db:54:8a:03:79:52:22:cf:80:63:d7:
d0:cd:70:3e:99:6a:9f:86:8e:d3:75:0a:c8:bf:ed:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:8A:D1:52:98:CB:CC:BC:C1:DF:A9:E5:3D:E6:07:50:64:71:CD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIqK0VKYy8y8wd-p5T3mB1Bkcc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:8b:c6:dd:f8:77:86:6c:6f:b6:44:35:0f:6d:10:46:e9:c2:
e3:2b:36:74:b8:d2:97:9c:23:7e:4a:a7:78:78:15:2f:79:e5:
2e:8c:06:c4:1a:8c:83:fe:1b:75:80:01:d4:46:83:bb:c9:9e:
28:d6:1e:4f:a7:b0:8a:e8:87:81:b7:0a:31:ec:31:b9:40:76:
3b:68:4b:35:8e:d2:38:4e:1b:69:c6:96:19:d5:cf:72:f7:8f:
87:43:2e:98:d7:af:26:54:6a:da:f2:9a:06:e7:51:19:8e:2b:
db:81:ec:84:1f:97:c8:49:24:92:f0:77:ab:07:b2:a0:20:d6:
ce:9a:50:00:b9:cd:1c:84:13:9d:4f:c4:ea:0f:4f:5d:72:b3:
ed:40:7c:01:a6:1a:92:46:4d:2b:fd:7d:78:f8:f2:81:73:b1:
78:09:25:c4:69:c8:96:16:31:58:dc:9c:38:03:39:6d:c4:64:
b7:70:f6:10:cb:3e:f4:1d:f8:92:ae:b5:14:ae:00:02:33:f8:
3e:34:5b:bc:9d:9c:38:23:43:0c:36:59:d1:c9:a2:d3:ee:d0:
5d:ad:bf:21:4e:ab:41:49:d4:4e:3d:d9:6c:3f:30:31:2c:2f:
41:7e:b3:32:9f:62:7f:95:a7:58:ff:ff:fa:18:a9:56:99:7b:
d2:c4:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:31:34 2025 by rpki-client