Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CR3B8NOpRFI3M2xbU2rsBqcO79E.roa
File: CR3B8NOpRFI3M2xbU2rsBqcO79E.roa (raw, json)
Hash identifier: hbZJXfMBGM8D+J07apwa2qqFDpKXWYacrWG3KilXZi0=
Subject key identifier: 09:1D:C1:F0:D3:A9:44:52:37:33:6C:5B:53:6A:EC:06:A7:0E:EF:D1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E34B250B7B07D1CD8809EFA506CB904A7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CR3B8NOpRFI3M2xbU2rsBqcO79E.roa
Signing time: Tue 12 Mar 2024 22:04:45 +0000
ROA not before: Tue 12 Mar 2024 22:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:34b1:decb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:b2:50:b7:b0:7d:1c:d8:80:9e:fa:50:6c:b9:04:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 22:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=091dc1f0d3a9445237336c5b536aec06a70eefd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:21:51:de:66:38:17:ed:e7:56:e5:cb:c3:
eb:41:2f:53:12:3a:c9:3e:79:bc:ef:fe:95:20:d3:
39:0c:3b:8b:41:42:0f:15:ad:8f:1a:ad:1a:4d:61:
97:f1:4d:7b:9a:6d:13:c1:21:cb:4a:5b:44:d4:b0:
1e:e5:2b:63:fb:6d:28:0a:5c:8e:b9:bd:c0:14:6b:
5f:9d:28:cd:16:d2:0a:b4:cd:47:58:6d:b0:21:1b:
a7:fb:71:3d:2d:5f:0e:ca:c1:0f:78:db:24:59:18:
b8:a3:ca:c7:e7:85:2c:47:1a:60:db:78:cf:07:f7:
83:12:3e:d2:bb:5b:26:8c:df:40:7d:22:62:ca:ff:
9f:87:28:68:ff:c9:d6:29:44:10:1d:2d:e5:90:12:
5d:28:67:d6:20:86:e7:7c:00:34:aa:f3:4e:d9:07:
5e:64:d6:bb:23:bc:31:fa:78:ea:4d:4e:4f:16:2b:
12:2b:cf:de:7f:9a:f4:55:04:a2:17:1b:5d:42:8a:
5c:01:52:89:ef:ab:1d:1b:70:4f:31:ae:c6:5c:da:
7d:1a:73:03:e1:6b:69:a5:e4:27:54:7e:52:c6:3a:
18:a5:f9:c4:0e:4c:9f:bb:27:6d:e0:4b:4a:2a:0b:
70:de:10:a2:27:6a:63:9c:b9:34:f7:4b:2f:1d:fd:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1D:C1:F0:D3:A9:44:52:37:33:6C:5B:53:6A:EC:06:A7:0E:EF:D1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CR3B8NOpRFI3M2xbU2rsBqcO79E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:d0:c8:b9:86:41:4c:4d:c8:7b:e6:eb:4c:c9:fa:92:f4:2b:
8e:11:b9:36:52:f8:1f:f3:21:84:30:83:a8:64:49:9e:ed:8a:
b3:f8:56:6b:09:a4:b3:97:08:14:cd:18:6b:34:85:18:10:93:
69:09:18:32:31:c9:f2:dd:01:06:5a:b6:bc:fb:e8:b6:f8:86:
12:33:e7:4a:e4:4d:da:83:ff:de:7f:db:9a:87:fe:ba:62:16:
4a:47:db:38:b6:03:8c:03:c6:a6:97:7d:59:1d:87:05:15:89:
a5:c4:e5:d1:d0:9e:1a:3e:19:55:1a:45:62:ae:0c:73:d4:14:
13:30:70:22:56:6c:ea:37:6e:42:7a:8e:dd:b1:9c:a1:ac:3b:
bb:23:f8:a4:51:b2:0a:6d:da:1f:ae:5c:7a:4f:60:a9:35:17:
1c:ba:f0:ba:46:7c:b8:8a:42:92:08:74:e5:8b:ff:2a:a8:92:
e4:c9:d3:25:6e:40:da:30:e7:0e:c0:82:74:76:5c:4a:34:7a:
ab:68:26:0d:bd:de:57:64:c4:e3:58:e2:19:fc:df:82:12:1e:
58:ba:89:d3:fe:7b:71:6d:a9:07:19:7b:fd:37:e9:98:81:f6:
62:fd:70:0b:cd:c6:26:e8:b3:70:13:b6:00:3d:5a:0d:c7:d9:
18:e5:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:16 2025 by rpki-client