Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9KqxErwW1BmJC3i9C85MWt7Zvvk.roa
File: 9KqxErwW1BmJC3i9C85MWt7Zvvk.roa (raw, json)
Hash identifier: v8bbLIDVP05JaSkJ9dWaTN0xOnzxk0sndTgeOVN2Yvo=
Subject key identifier: F4:AA:B1:12:BC:16:D4:19:89:0B:78:BD:0B:CE:4C:5A:DE:D9:BE:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2BEDA75CF90AE1A250CFCA2EFEC19547
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9KqxErwW1BmJC3i9C85MWt7Zvvk.roa
Signing time: Sun 21 Jan 2024 12:10:11 +0000
ROA not before: Sun 21 Jan 2024 12:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2b:ed:a7:5c:f9:0a:e1:a2:50:cf:ca:2e:fe:c1:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 12:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4aab112bc16d419890b78bd0bce4c5aded9bef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:10:00:89:28:78:b9:c3:7d:e2:f2:b5:56:
eb:f5:73:6d:c2:39:dd:0c:6d:23:db:74:94:0a:47:
13:c9:13:03:e2:00:aa:f7:09:1b:87:f0:fc:6d:8c:
7e:f1:f8:9c:89:14:d3:5d:f3:c6:d7:c9:5a:aa:38:
e7:9d:f0:73:b7:02:e0:6e:39:d7:a1:56:52:14:72:
bb:06:6f:89:43:7e:68:2b:38:79:ce:45:cc:08:0f:
d2:fe:11:4e:c5:54:be:57:3f:c7:30:f9:dc:42:ae:
e3:ad:ec:b0:62:08:a3:c7:5c:4d:b8:0e:87:52:67:
9b:a7:32:e5:79:85:3c:92:f9:9d:ee:2e:d0:8b:52:
43:bc:84:47:86:bb:1f:06:01:80:4d:04:43:f6:46:
11:78:b2:cf:29:5d:91:0a:20:7d:c5:b4:90:9e:12:
67:ab:45:20:60:33:fc:53:fe:ee:e9:73:aa:74:f7:
2e:9c:6c:ef:99:d2:1a:0f:53:00:cd:4d:56:7e:51:
74:dd:ae:d3:68:09:bd:c5:bf:f3:3d:d7:85:a8:25:
fe:97:dd:a0:c6:c3:46:f0:e0:e2:b5:d7:ac:c9:a1:
e4:47:be:fb:3d:20:2e:e4:ab:17:96:1b:53:1e:ef:
5d:69:28:94:f4:75:91:10:b1:dd:35:e0:78:63:57:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AA:B1:12:BC:16:D4:19:89:0B:78:BD:0B:CE:4C:5A:DE:D9:BE:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9KqxErwW1BmJC3i9C85MWt7Zvvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:80:ea:40:34:8d:57:bc:72:21:5d:89:e9:ab:a1:2d:ae:dd:
60:f9:5a:3f:3a:e8:9e:6f:f5:e5:69:af:e4:0b:09:36:26:64:
b1:32:dc:24:80:a0:63:e0:76:3d:4d:b9:aa:70:c9:1d:97:55:
7f:d1:e8:57:84:d5:b6:93:65:32:02:47:9a:02:56:6d:45:26:
ca:ac:f7:f4:e1:88:b3:e5:e9:ee:40:6a:33:66:8c:dd:35:28:
9c:03:78:90:12:bb:7d:e0:43:99:b3:75:c1:fd:f7:9b:ce:be:
1e:73:2a:fd:ef:98:7e:8a:5b:b6:db:07:73:07:e2:09:df:d5:
58:f1:49:00:32:29:e0:3d:64:ba:90:9b:a5:76:f0:29:b6:76:
17:55:44:15:b9:41:01:02:82:a2:f1:b5:26:d1:29:91:e4:d8:
99:82:22:16:fe:a9:71:2f:08:16:80:56:18:59:db:78:f3:31:
e1:fe:5e:fc:d6:18:18:31:80:15:5e:a9:2b:bc:ff:9b:f7:63:
53:d8:82:16:0d:57:ea:22:13:1e:4c:bc:a1:0c:a5:d3:36:d9:
cb:da:61:c1:8d:4d:4e:25:a4:85:ce:f6:0e:ab:86:61:9d:2f:
0c:bf:5f:3f:a9:82:10:49:ee:76:55:d6:b2:81:a9:f0:21:89:
9c:3c:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:29 2025 by rpki-client