Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A_r5Vry8gai-ERchrs_Y5T3JgXA.roa
File: A_r5Vry8gai-ERchrs_Y5T3JgXA.roa (raw, json)
Hash identifier: ZlPwK6jpmjGA4u1OgLwsVIzyyjnEzr/zpkK33+klbGc=
Subject key identifier: 03:FA:F9:56:BC:BC:81:A8:BE:11:17:21:AE:CF:D8:E5:3D:C9:81:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2135D1AA031C8709BF6D22AB4A6CA981
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A_r5Vry8gai-ERchrs_Y5T3JgXA.roa
Signing time: Fri 19 Jan 2024 10:13:11 +0000
ROA not before: Fri 19 Jan 2024 10:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:35:d1:aa:03:1c:87:09:bf:6d:22:ab:4a:6c:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 10:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03faf956bcbc81a8be111721aecfd8e53dc98170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:39:b0:24:40:3a:fb:04:1c:d9:2e:36:46:
f2:b3:48:20:41:2b:1e:70:aa:28:f9:8d:79:fd:ba:
fe:27:e7:92:6c:9c:6f:ac:a2:38:78:6a:a1:e0:f2:
ba:22:48:99:5d:6c:74:9b:dd:9a:17:98:af:4c:1f:
43:69:d8:7a:72:cb:97:d0:b5:c3:e4:ad:d6:43:7f:
71:6e:47:09:71:ca:fb:8f:6b:51:31:9c:5b:7e:29:
9b:62:52:62:09:e8:12:7b:3f:a2:5d:de:12:ae:cc:
f3:58:6b:8a:56:3d:5f:2c:78:2c:6c:4a:86:60:12:
4d:bd:be:e6:7b:3a:79:2a:ba:42:3d:f7:75:1d:36:
05:03:bb:41:f4:e0:26:c7:3b:2c:8b:6c:ce:b8:fe:
58:fd:14:69:be:50:35:68:8d:bb:bf:14:48:e9:c9:
de:3a:91:e9:18:13:77:7f:09:51:41:9e:22:80:bc:
3c:0e:dc:72:0e:89:1e:ce:e9:d6:45:f2:b3:75:8a:
23:01:56:27:b9:82:3a:09:23:9f:ea:e6:49:c1:c6:
4f:1f:bb:4f:53:ca:8a:44:04:66:c8:b4:6c:2b:19:
c2:dd:8d:03:74:21:c4:af:be:56:7f:c6:07:ee:9f:
ef:73:cb:e4:42:25:25:3c:fa:91:b4:a1:f1:c3:5c:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:F9:56:BC:BC:81:A8:BE:11:17:21:AE:CF:D8:E5:3D:C9:81:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A_r5Vry8gai-ERchrs_Y5T3JgXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:72:23:17:b1:11:2a:0c:77:bf:93:37:7b:80:d4:57:f1:c1:
df:42:66:db:0b:ab:78:df:23:19:81:c9:0b:03:87:4f:c2:c6:
ab:e5:b5:b8:ad:49:f1:57:c0:38:b1:07:1b:b6:da:4b:75:38:
17:f1:63:db:f5:9d:7d:0e:fd:63:5c:de:f5:06:ff:ee:65:3f:
0e:ec:d6:f7:c9:d2:4a:61:80:e8:18:c6:e9:c0:ea:8f:fa:ad:
94:45:08:6b:52:ed:ed:31:18:04:29:1a:37:88:b4:c0:e1:e7:
09:c2:17:42:33:55:bb:f3:44:bf:03:d8:06:4c:53:85:57:19:
f7:0f:53:4f:1b:8f:90:e8:18:ee:27:f3:09:6a:cf:98:19:84:
7d:7d:e0:de:20:53:74:70:f7:da:5b:da:4c:4e:be:4b:02:ea:
9a:b5:cc:a8:ab:b5:5e:ec:7a:34:de:38:b3:ab:5a:27:6f:37:
ed:54:ed:be:be:fc:07:e9:1c:62:2f:d1:3c:58:67:43:3a:09:
ac:b4:23:72:09:06:7b:a8:fb:44:7b:b3:fd:90:b6:45:1a:7a:
99:f0:bf:5d:f9:5d:07:49:52:c6:2c:88:7a:ab:f0:bc:f1:c1:
8c:1e:a0:35:f6:b1:17:d1:63:fa:26:7f:26:b7:8c:19:20:15:
0a:71:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:19:55 2025 by rpki-client