Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zZ3aWwJUvEZu99qxM2KzTDoW1ug.roa
File: zZ3aWwJUvEZu99qxM2KzTDoW1ug.roa (raw, json)
Hash identifier: quZ0wXWAJVV+hPmcbcm6zCzURd2KzkcwtchPf9d4MJ0=
Subject key identifier: CD:9D:DA:5B:02:54:BC:46:6E:F7:DA:B1:33:62:B3:4C:3A:16:D6:E8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF1919BBFA005F5CB77378BEC59C2C517
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zZ3aWwJUvEZu99qxM2KzTDoW1ug.roa
Signing time: Wed 10 Jan 2024 04:11:40 +0000
ROA not before: Wed 10 Jan 2024 04:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f1:91:9b:bf:a0:05:f5:cb:77:37:8b:ec:59:c2:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 04:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd9dda5b0254bc466ef7dab13362b34c3a16d6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:3d:48:d8:02:fe:38:cf:4f:95:c5:e3:76:
45:d6:88:4f:0c:a7:78:69:c1:01:70:df:ba:16:35:
a4:5a:7c:17:d1:e6:89:84:f6:47:2e:fe:0b:4b:bf:
87:78:03:43:bf:1c:20:3e:fe:f9:43:1d:e1:42:93:
d9:c4:d2:0a:95:bf:50:b4:99:ce:29:95:09:dd:18:
50:c7:39:c4:71:56:df:a0:56:f0:07:03:b3:6a:f2:
28:00:3e:86:cd:e4:3b:ad:85:b2:5c:e7:43:bf:74:
a8:8d:c1:05:82:0d:bd:64:26:09:13:37:f3:ad:ce:
ff:28:b9:43:5e:6f:07:6a:d5:82:11:f3:b2:eb:87:
f2:50:60:d9:f9:3b:b3:e5:5a:a9:b2:fc:aa:45:2e:
a0:34:35:60:e6:2b:e0:39:f7:6b:37:f0:ae:23:d5:
ea:a1:8f:b4:fc:f2:b3:19:a7:16:f8:e2:cc:62:3b:
9d:70:4b:77:52:0b:aa:7e:f5:9b:5c:94:61:e4:02:
7c:e1:9b:46:ca:91:68:e3:cf:d0:d4:ca:0f:2b:f6:
27:f4:8e:aa:08:1f:9b:ff:45:4a:65:d4:8b:54:12:
51:29:9c:20:8b:48:a5:97:bb:8a:29:32:af:26:7e:
2c:ea:9e:10:f0:22:bc:d2:4e:1c:ed:7b:f8:d1:d6:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:DA:5B:02:54:BC:46:6E:F7:DA:B1:33:62:B3:4C:3A:16:D6:E8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zZ3aWwJUvEZu99qxM2KzTDoW1ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:f5:11:6e:b0:c6:89:94:4e:59:27:38:42:27:05:0c:51:e8:
49:01:af:f0:f6:85:58:18:50:ec:a5:7f:d6:0e:be:2a:24:8a:
6f:ac:43:80:3c:87:26:85:79:e7:05:ed:fc:97:61:48:fb:d9:
c9:c9:fc:8b:d4:d0:d6:7a:95:f3:dc:06:64:4d:1c:83:4d:26:
61:cf:fb:a6:11:0b:b1:43:b0:50:96:49:1d:0f:29:83:89:6e:
ae:d9:15:01:9c:c4:55:71:9d:ba:e7:94:7b:fd:14:cf:a0:64:
f1:a8:19:00:3d:42:57:ed:30:73:b0:79:f8:2b:9f:4d:63:7e:
3b:22:9f:13:19:83:31:7e:6f:ac:a8:34:f7:fc:7e:98:e8:fa:
97:23:02:7c:0c:96:7b:ad:75:32:e8:ed:f5:06:26:07:be:90:
a0:f0:1e:a5:28:0b:97:64:b1:50:49:97:3c:0a:ee:23:52:7b:
dd:0b:5b:85:6d:4b:c5:63:3b:fb:86:f6:fc:57:51:9e:a8:f2:
d9:cf:d0:48:a1:76:2e:49:c3:13:6b:46:3b:3f:57:49:0c:0a:
35:85:db:7c:c1:00:b2:46:d0:6b:7d:87:16:6c:e1:25:58:5e:
3d:87:13:5d:ae:46:bd:95:be:07:e9:3a:45:88:da:76:1b:f5:
75:a3:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:03 2025 by rpki-client