Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1x1SrylK1KdRCpM9HSW7J6SIb6s.roa
File: 1x1SrylK1KdRCpM9HSW7J6SIb6s.roa (raw, json)
Hash identifier: 9VGcO4AEYTLez71Bl8bukHX6ijz1mXLZvbmGxqZ+eik=
Subject key identifier: D7:1D:52:AF:29:4A:D4:A7:51:0A:93:3D:1D:25:BB:27:A4:88:6F:AB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC1AC365B07B69E151FC9728FC1ED67D3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1x1SrylK1KdRCpM9HSW7J6SIb6s.roa
Signing time: Tue 09 Apr 2024 07:04:32 +0000
ROA not before: Tue 09 Apr 2024 07:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:c1ab:f4af/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:ac:36:5b:07:b6:9e:15:1f:c9:72:8f:c1:ed:67:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 07:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71d52af294ad4a7510a933d1d25bb27a4886fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:ea:ee:bc:7b:85:40:a9:e8:88:c5:a5:01:
f1:25:fe:32:79:fe:fd:a3:93:ab:a8:df:24:c9:59:
a0:d7:7c:ce:8e:54:cc:79:f4:8e:36:26:a2:40:18:
66:be:73:36:e5:45:b8:ab:43:92:d3:8b:2c:c0:d5:
00:d3:89:97:00:fd:03:56:a5:d8:77:74:9d:2a:41:
18:39:73:d2:28:bf:ff:10:33:a6:82:8d:7b:de:63:
4f:ec:e2:ff:93:ce:d3:3c:bb:a3:dc:cc:4d:72:e9:
1b:12:2d:83:ff:a9:5b:4f:55:9f:2b:21:71:18:3b:
c8:ec:9e:de:13:4c:45:e5:9a:98:86:95:ed:b9:2b:
f2:d3:24:f6:79:9c:65:6d:1f:08:e5:99:c5:44:85:
e3:d5:c6:c9:ba:45:36:f6:e5:d1:13:da:ef:d5:16:
8a:87:24:83:8b:7d:de:bc:57:76:37:aa:fe:90:e0:
46:53:f6:c9:6b:a8:63:f6:28:72:01:c5:3d:a4:f9:
e7:b3:f0:46:b7:f6:54:28:bd:cd:a9:55:06:bd:db:
14:fd:88:e7:6f:5a:b0:45:d8:07:65:44:de:46:45:
ed:fd:68:43:7e:c6:b9:18:e7:c2:e7:2b:cf:b9:66:
be:f7:7d:b7:06:4f:97:fb:e8:e3:35:53:8c:8c:e2:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1D:52:AF:29:4A:D4:A7:51:0A:93:3D:1D:25:BB:27:A4:88:6F:AB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1x1SrylK1KdRCpM9HSW7J6SIb6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:aa:1b:97:48:7f:10:14:60:96:92:ee:bb:3b:9c:0f:04:36:
34:79:3e:a6:f4:a0:f2:78:8e:0d:20:72:80:5e:b0:fd:83:3a:
9f:79:56:ac:a4:8f:14:e8:16:22:c7:38:53:36:92:c1:9e:0d:
9b:bb:21:23:61:ac:9a:18:d1:f5:49:d6:e4:dc:9e:46:10:6e:
d5:12:6c:29:ae:c7:a3:13:52:d4:ab:23:63:e2:68:8e:17:8c:
53:60:de:32:91:ec:43:7f:40:20:48:57:c9:2a:6b:8c:87:7b:
73:a7:2b:8d:21:4b:4d:28:51:4b:50:3e:ff:f0:e2:ba:2a:a0:
6f:76:d9:15:5f:f4:33:01:49:21:16:12:11:40:3c:24:c3:91:
74:94:6d:ba:51:c3:5e:c5:4a:0d:17:69:40:b5:21:51:1a:f9:
d9:a9:83:63:dc:3f:45:eb:91:4d:95:42:ae:6e:e2:b9:8b:93:
d9:aa:1f:af:94:3f:e8:03:d1:d4:f3:f0:cf:19:d2:6f:3d:2c:
a1:bd:c9:9c:ad:b8:e5:57:14:45:e2:50:6d:11:71:02:65:cd:
b0:a1:25:35:4a:48:bc:e3:0e:ef:25:b4:d3:20:95:ec:ef:f3:
a5:73:30:3b:30:31:f5:d3:82:24:c4:2a:ae:66:33:08:61:d5:
cb:04:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:38 2025 by rpki-client