Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CW2T5NHCesjylJ1AI19gE30R-AM.roa
File: CW2T5NHCesjylJ1AI19gE30R-AM.roa (raw, json)
Hash identifier: /tOAJNliDL2F89fXKLJAUwuloQXufCTiUKp4w/KO8oo=
Subject key identifier: 09:6D:93:E4:D1:C2:7A:C8:F2:94:9D:40:23:5F:60:13:7D:11:F8:03
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFE31BACD615B4336E5A787D88FC769EF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CW2T5NHCesjylJ1AI19gE30R-AM.roa
Signing time: Sat 02 Mar 2024 08:04:48 +0000
ROA not before: Sat 02 Mar 2024 08:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:fe31:1703/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:31:ba:cd:61:5b:43:36:e5:a7:87:d8:8f:c7:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 08:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=096d93e4d1c27ac8f2949d40235f60137d11f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:8a:ab:5f:f8:4f:b1:0e:6e:4a:60:a0:7a:
2f:1f:76:ae:2f:d0:6f:8a:9e:50:df:bb:a9:a7:2f:
b1:8b:75:88:95:e2:6b:ed:46:6e:63:3c:4f:02:18:
11:96:d3:ed:ba:bf:94:8d:63:20:ed:ab:80:d6:97:
be:d0:a0:61:97:e3:b9:83:bd:4b:4e:a6:37:cf:10:
af:c6:e6:a1:20:13:0e:da:98:ee:39:5e:6b:d3:5c:
db:56:ee:ce:b7:23:20:01:10:a4:a3:12:b0:05:c5:
46:01:fd:99:ec:20:0b:06:2e:ab:77:d0:2f:68:e1:
6a:bc:6e:ef:ed:fc:c4:3e:ca:7f:3a:b4:66:ae:10:
46:05:29:b5:0a:3c:72:6c:10:d2:63:ac:17:9c:bc:
22:cd:e4:b9:79:21:cf:ad:28:58:f8:23:22:6d:ae:
ef:f3:ad:0c:4a:58:7a:ba:b0:c3:2b:26:e0:41:0e:
1a:69:95:80:b1:6f:bc:10:21:27:ca:f4:ee:c3:59:
c6:bb:70:64:49:53:55:00:ec:9b:1e:d4:08:fc:64:
82:1b:e9:7f:72:2c:75:4f:c9:5d:63:dc:c2:54:2d:
16:9c:b4:e5:70:44:1f:87:dc:05:2d:6d:d4:db:41:
2e:b8:d9:94:52:5e:67:01:c5:ab:9f:b7:bf:bb:00:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6D:93:E4:D1:C2:7A:C8:F2:94:9D:40:23:5F:60:13:7D:11:F8:03
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CW2T5NHCesjylJ1AI19gE30R-AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:0d:53:9b:6c:a4:77:50:e0:a2:6f:0d:ef:94:49:cd:b3:62:
0f:09:39:4d:f2:15:dd:be:55:30:a3:db:36:28:09:1b:05:7d:
c1:d5:be:ba:54:10:b0:49:1f:f8:12:4b:7f:3f:2d:1c:d8:d3:
72:0f:26:23:ed:a3:6a:22:20:c7:9f:84:34:95:0d:55:bf:c4:
c1:aa:98:d3:26:e7:13:98:3e:a4:e1:1b:9f:aa:69:e3:81:75:
e5:2a:19:6f:e9:6a:25:ca:26:36:0a:a5:af:79:9c:60:dd:6e:
bb:87:5d:bd:a5:ec:b0:5d:c5:3a:da:7d:4b:06:ac:a2:1f:88:
ce:3e:2b:66:16:95:1f:0d:7d:42:4f:e1:c0:23:f5:20:f3:7b:
d8:9e:c8:01:35:5d:06:46:ae:f4:45:5f:39:cb:82:6b:0e:3c:
b2:0f:29:de:d8:31:a8:92:40:78:8d:3f:bd:29:73:8b:ec:bb:
ee:1c:99:21:36:5c:e9:f9:5e:bc:33:c6:b4:43:f6:6a:69:c9:
4b:92:25:4a:09:24:9a:1e:48:d5:e5:ba:cb:de:f4:11:8b:09:
5c:fc:28:ea:d5:5d:00:13:35:4a:92:a6:21:bc:4b:73:0a:3d:
1a:cc:a1:03:11:ff:1c:15:19:ee:6e:85:c7:22:5d:9b:21:25:
73:10:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:36 2025 by rpki-client