Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7C178QQwftfD5msKxDJ-1RUU6zA.roa
File: 7C178QQwftfD5msKxDJ-1RUU6zA.roa (raw, json)
Hash identifier: djLb73NG10C4qx5es0SDCzOXsnXccFKMg9ldk6lpK64=
Subject key identifier: EC:2D:7B:F1:04:30:7E:D7:C3:E6:6B:0A:C4:32:7E:D5:15:14:EB:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6619B11F3D7D9A72E0D1DEE41C16E59D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7C178QQwftfD5msKxDJ-1RUU6zA.roa
Signing time: Thu 01 Feb 2024 19:16:16 +0000
ROA not before: Thu 01 Feb 2024 19:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:19:b1:1f:3d:7d:9a:72:e0:d1:de:e4:1c:16:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 19:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec2d7bf104307ed7c3e66b0ac4327ed51514eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:cd:20:04:63:60:5b:75:8b:0f:a9:ac:7c:
37:12:6a:f9:95:ad:77:b3:68:05:56:b2:41:ab:fa:
dc:8f:4d:6d:7b:63:a7:56:7c:d7:5d:32:c6:93:18:
95:8f:ae:04:3e:11:ee:2a:58:d4:20:99:71:ef:f0:
a6:75:02:56:b1:de:f0:87:47:93:82:c5:64:c2:dd:
c4:74:72:34:16:2b:86:dc:4e:c7:99:46:95:8a:a3:
9c:b2:5f:2e:fb:20:20:d8:82:4a:b6:89:f1:dd:cb:
ed:8f:51:7d:5b:cc:31:72:04:cc:4c:05:f3:3f:87:
1b:a3:06:c1:63:3d:7e:72:9f:ab:f1:b4:09:66:2e:
da:22:44:76:3f:f8:0c:33:bf:60:1c:a8:79:16:95:
ce:d2:59:61:c3:f8:07:ba:8b:a3:50:fc:c4:02:2a:
3c:46:86:49:60:74:27:ec:43:8a:16:84:17:89:41:
04:4d:60:88:2b:07:af:8e:77:66:46:38:2f:be:b2:
5d:13:69:f3:29:17:4e:35:99:26:5b:d0:9a:3f:d4:
7c:18:8e:ea:90:79:97:3c:68:77:1b:ae:49:ec:9c:
6b:de:09:d6:52:79:0a:1e:fb:0e:be:1e:32:c7:63:
b8:07:5e:02:9b:fb:7b:1c:5b:64:8f:fd:29:c0:70:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:7B:F1:04:30:7E:D7:C3:E6:6B:0A:C4:32:7E:D5:15:14:EB:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7C178QQwftfD5msKxDJ-1RUU6zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:c9:d8:10:60:12:70:2f:60:d0:e6:db:37:30:db:a9:00:dc:
2c:49:d3:d9:22:31:06:89:09:98:ca:69:84:b8:56:20:c4:f9:
cb:fd:61:90:a3:e6:a9:88:a0:e8:e7:c3:3f:ea:26:96:2d:11:
48:bb:86:b5:ea:9c:f2:26:1b:17:cf:79:b7:43:02:02:87:04:
70:ee:f4:17:a4:14:2b:52:50:12:db:81:b6:22:c8:7b:b8:fb:
05:13:de:bb:4d:53:fa:7e:17:d9:0b:ed:56:9b:5d:8e:a8:75:
6f:09:79:4b:2c:e6:a6:91:52:ed:2a:b1:bc:22:e9:24:2a:c6:
87:c8:8e:15:78:b3:9a:65:74:76:ff:78:71:7f:08:aa:52:bb:
22:27:e7:09:10:2f:6f:6e:59:a8:57:02:ea:c0:44:9c:25:00:
ca:eb:d6:1d:b3:e2:e3:59:1b:a5:b2:ac:43:dc:e7:c9:ea:e5:
68:78:d4:2c:80:6d:37:25:a0:3a:12:8e:5e:d9:d2:52:52:3e:
58:7c:07:d6:fe:bf:8e:28:2e:14:b8:34:b1:89:4f:83:38:99:
29:8d:36:24:d9:05:76:ce:1a:b7:d2:02:7c:1c:fc:bf:f3:32:
b9:95:8f:49:10:09:cd:13:a7:ec:31:ec:bc:80:15:c0:04:f7:
49:48:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:30 2025 by rpki-client