Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zYZVCSK8IZESVns4_jmfLkPUS9w.roa
File: zYZVCSK8IZESVns4_jmfLkPUS9w.roa (raw, json)
Hash identifier: tud8Ck7qiA2ze7Q1UV4qjFCEAH0zu/EW1xwRkuYm9jc=
Subject key identifier: CD:86:55:09:22:BC:21:91:12:56:7B:38:FE:39:9F:2E:43:D4:4B:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E59D8D0BB0A154632F23242090DD983CF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zYZVCSK8IZESVns4_jmfLkPUS9w.roa
Signing time: Wed 20 Mar 2024 03:12:45 +0000
ROA not before: Wed 20 Mar 2024 03:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:59:d8:d0:bb:0a:15:46:32:f2:32:42:09:0d:d9:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 03:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd86550922bc219112567b38fe399f2e43d44bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:3b:d6:c7:49:ae:3d:31:68:91:50:f1:3c:
61:7f:9d:83:aa:47:e9:c3:5c:fd:24:4f:12:45:81:
f2:fd:fb:39:9c:f6:7d:46:64:4b:92:fd:c8:76:0e:
7c:e0:d2:dc:e7:63:8e:44:d5:67:07:06:dd:1d:88:
24:d2:5a:a3:eb:46:0b:6c:4b:a2:44:da:c8:1c:75:
80:e6:f2:4a:ac:35:9f:37:d4:10:16:94:13:aa:86:
9a:9e:0f:03:40:cf:40:e5:7d:0e:9a:29:76:dd:55:
1e:7d:d7:09:e3:20:53:4d:28:e9:34:45:b9:66:71:
53:9c:61:fd:16:dc:eb:62:0d:67:d3:fc:55:b3:00:
bb:12:e6:3d:0e:a0:1b:8e:54:47:b9:a0:a9:66:2f:
f2:9b:7d:67:19:a5:35:3f:d4:27:3e:81:dd:11:d1:
a2:5d:15:b6:0b:17:fd:f9:8c:0f:68:21:2d:0d:dc:
f6:38:e9:5b:a6:9f:67:66:95:a5:7f:6e:fe:ba:2d:
28:52:7b:dd:c7:94:96:1a:64:d8:00:97:53:9b:e8:
00:19:2d:b7:d2:26:26:57:95:d3:20:5c:76:34:a5:
dd:12:b1:24:b7:61:1f:22:54:db:99:71:98:00:37:
04:b5:18:30:75:1a:cb:f4:b5:54:0b:8a:9f:44:f2:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:55:09:22:BC:21:91:12:56:7B:38:FE:39:9F:2E:43:D4:4B:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zYZVCSK8IZESVns4_jmfLkPUS9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:bf:cb:68:d0:65:4e:22:43:32:83:fe:5c:5c:0a:aa:3d:43:
b2:91:ed:9e:76:89:23:4e:11:85:7b:19:72:fa:92:63:02:0e:
81:2b:1c:69:14:bb:26:6c:52:ef:04:8e:24:fc:d4:58:cf:8b:
d5:33:06:d2:2d:0f:44:87:11:b1:07:0b:4d:b2:10:91:21:78:
5d:3b:40:66:bc:08:22:8f:2a:60:07:ba:f3:67:db:83:43:14:
bd:5d:b8:1e:5f:27:5d:ec:9f:cc:c2:aa:d0:34:bc:86:6a:1b:
53:df:1f:48:cb:62:39:da:72:b3:d2:15:20:60:d2:d6:cb:a3:
7d:36:d6:20:2c:57:8e:0b:3f:65:42:a9:e4:fa:60:2d:2f:47:
35:c0:70:02:e7:9d:29:66:83:6b:c6:49:9e:46:71:65:0e:2d:
1c:9f:b4:e0:34:27:7c:a6:57:56:12:88:b4:8b:c9:62:8d:cf:
13:61:49:ff:04:66:7d:00:b2:bd:b4:e3:b2:51:f6:20:62:b1:
92:92:fb:ab:28:c1:44:16:25:27:c2:9a:3c:8d:cc:e6:36:e7:
74:1d:63:56:1c:11:75:d7:5d:8f:c4:b4:69:2a:cd:3d:0c:fa:
ec:fb:ed:65:5c:16:e4:df:b1:a3:96:c7:19:fc:72:bc:a5:4c:
12:82:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:21 2025 by rpki-client