Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CILw-2tSBoiUG1VTaYvz5wu5fyA.roa
File: CILw-2tSBoiUG1VTaYvz5wu5fyA.roa (raw, json)
Hash identifier: tV3jghqBhyxvarK+4izeRLTp5/Vr78hYBn4lmgx77BE=
Subject key identifier: 08:82:F0:FB:6B:52:06:88:94:1B:55:53:69:8B:F3:E7:0B:B9:7F:20
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFB046DEC6679BE96E1BD79F182423BFC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CILw-2tSBoiUG1VTaYvz5wu5fyA.roa
Signing time: Fri 12 Jan 2024 00:13:40 +0000
ROA not before: Fri 12 Jan 2024 00:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fb:04:6d:ec:66:79:be:96:e1:bd:79:f1:82:42:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 00:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0882f0fb6b520688941b5553698bf3e70bb97f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:8a:20:23:4c:65:7a:2c:26:8d:83:c0:a6:
7a:2e:ed:45:20:66:95:e1:1e:94:3f:f3:93:1e:ca:
a1:8f:b5:25:bd:97:c7:6f:c6:4a:9b:18:c3:3b:1a:
72:01:4d:68:95:38:5a:f1:1f:69:cc:34:b5:c9:ee:
33:56:67:45:ea:16:5e:92:a7:cc:cf:70:a9:79:c2:
86:a8:2d:ba:5c:7c:a8:4f:52:92:5b:58:f7:0c:69:
bb:98:e1:80:09:da:ad:2f:32:54:99:a8:4d:02:d2:
82:61:b5:ab:e1:51:15:b4:5f:e6:1f:dd:19:ed:0b:
cd:82:80:27:77:fe:ed:69:10:9f:3c:41:e2:23:13:
ec:4b:c5:3f:f5:5b:0d:48:e7:b1:02:6d:89:60:c3:
22:f7:5b:75:11:52:86:8c:fe:1e:93:99:0c:d1:4e:
c7:59:49:30:d4:68:93:6d:3b:6b:00:e4:b7:b9:e9:
fb:dd:75:ea:8d:a3:ad:8a:ec:d5:06:ad:52:30:49:
b5:64:78:1c:87:f4:37:b3:45:ff:54:89:4e:3f:ef:
69:a6:85:7f:5a:c1:b7:ae:fe:4d:10:f2:b3:58:7d:
51:5a:9e:d8:f0:18:af:2a:ce:de:e2:d5:d8:a5:c9:
f8:bf:bb:43:d5:01:fa:d9:16:8f:6c:92:d1:86:71:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:F0:FB:6B:52:06:88:94:1B:55:53:69:8B:F3:E7:0B:B9:7F:20
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CILw-2tSBoiUG1VTaYvz5wu5fyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:4b:87:c6:82:cb:cd:78:c1:04:67:a5:c9:cc:87:56:92:a5:
54:92:a7:38:74:c2:89:e5:9a:c9:26:f9:68:cb:cb:db:45:0b:
68:8f:93:39:90:52:2e:28:1e:fc:e0:4c:42:bb:94:41:73:8f:
95:02:fc:1e:7b:8f:ea:ab:9b:90:06:92:3d:59:61:8a:ac:01:
8f:17:05:8f:ec:e5:d9:ff:d0:c5:15:0f:f4:2d:3f:9b:76:8f:
ae:1a:0d:e8:59:ef:15:86:40:a0:63:f2:87:92:44:fc:a6:75:
1f:50:5a:37:05:11:09:1c:28:b5:aa:98:0b:a0:c9:6c:4c:c9:
f0:d8:72:1a:36:f3:3b:a6:e0:d8:b3:a7:49:cf:78:2c:7f:c8:
36:e9:73:7a:db:16:39:d8:1d:8a:fe:92:3a:7c:69:1f:ae:f9:
8f:21:5f:76:f9:43:ba:d7:bb:d7:57:0e:6b:ad:0c:fb:da:74:
ae:ac:55:97:02:a9:5c:23:9f:b8:df:a2:04:99:ad:0a:78:a0:
bd:5f:56:81:18:0c:2e:16:5d:88:ae:68:a5:88:8d:0f:db:65:
f3:38:c4:25:3f:b8:12:b3:b2:d1:57:09:27:b1:4c:63:c2:c2:
86:7e:22:17:90:2a:f8:7c:aa:8a:05:5d:6b:06:5b:27:6f:fb:
72:32:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:00 2025 by rpki-client