Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CdKB2W5J4HwY5CfYj0eWz2t7QhE.roa
File: CdKB2W5J4HwY5CfYj0eWz2t7QhE.roa (raw, json)
Hash identifier: zaK6UGsNv7/NeJXj/HjwTtfwe4KEcZRrF3lsR7K16ag=
Subject key identifier: 09:D2:81:D9:6E:49:E0:7C:18:E4:27:D8:8F:47:96:CF:6B:7B:42:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D58FF8F03B28115C3B77258EF12322AD8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CdKB2W5J4HwY5CfYj0eWz2t7QhE.roa
Signing time: Tue 30 Jan 2024 06:12:39 +0000
ROA not before: Tue 30 Jan 2024 06:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:ff:8f:03:b2:81:15:c3:b7:72:58:ef:12:32:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 06:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d281d96e49e07c18e427d88f4796cf6b7b4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:31:6c:ec:bb:2c:e8:12:7b:47:7c:45:73:
63:e2:04:d7:e4:d0:f0:08:e7:a1:a1:f4:e7:7c:10:
2f:53:1f:6c:97:d4:2c:87:17:a6:9f:82:d4:b5:53:
e6:d1:1b:46:29:ce:87:68:de:f1:49:46:9b:ad:75:
ff:fb:a6:1e:29:ef:23:fb:41:fe:fd:76:a4:1c:0a:
ba:27:2f:6f:5a:6f:54:4e:99:9b:2c:f7:a4:0e:8f:
7d:73:d0:0d:65:81:2f:9f:1b:8b:85:aa:1f:84:1c:
6a:e5:08:d9:d9:44:eb:de:e7:0b:64:a0:7d:d2:7e:
d9:5c:4a:74:cb:57:be:52:31:24:fa:e1:bc:f0:4a:
29:e4:cb:c7:ab:d7:93:2b:f7:75:55:62:03:f4:42:
2e:0e:e2:d9:a3:73:72:90:a7:bc:fc:28:67:32:b5:
15:a9:90:77:a1:88:b2:e6:0b:21:ea:5b:4d:24:8a:
f1:9b:a0:44:b5:43:66:1a:b5:01:71:7f:bf:60:10:
7a:d6:79:84:6a:5c:c3:25:fb:6e:83:e2:ad:2f:09:
5b:bd:91:ee:8c:ac:25:5a:68:a1:32:6c:a7:6f:3e:
06:3b:d3:70:b6:37:97:c6:7e:4f:a1:bf:2a:d5:62:
b8:55:dc:9d:6d:6f:6a:10:b8:2f:19:32:7d:41:18:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:81:D9:6E:49:E0:7C:18:E4:27:D8:8F:47:96:CF:6B:7B:42:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CdKB2W5J4HwY5CfYj0eWz2t7QhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:71:1a:16:6f:65:b0:58:51:1a:a0:b4:75:f9:02:66:d2:f8:
cc:eb:1f:8e:dc:f0:eb:49:dc:b2:a8:4b:cc:98:f0:2d:cb:d1:
ee:ca:7d:ab:d4:09:3e:a9:44:fc:c3:2e:eb:ba:01:42:99:c6:
6e:2d:66:2d:4c:42:ea:fa:31:13:28:ea:49:d4:73:75:62:3b:
ac:5f:5c:af:16:33:9d:5c:4d:75:bf:cd:54:aa:cb:d2:ae:a8:
b4:15:4d:23:f6:03:ac:43:89:d2:5d:a7:21:9d:48:70:4d:28:
5e:06:f2:01:ff:65:08:43:6a:7e:88:de:a8:d0:1f:b6:33:c5:
f7:fb:b8:42:ef:91:a3:19:72:dd:18:c1:c3:1d:fd:6f:99:d8:
f8:43:ed:8a:89:cd:52:48:8b:b8:5f:c7:66:12:6d:db:f2:b8:
66:c4:49:ff:72:14:9b:39:d2:46:8d:0f:b2:dd:fa:40:83:80:
b3:3b:9d:8e:c6:37:75:c7:e7:8b:31:5d:44:78:94:59:f3:f5:
1f:a5:31:56:ca:6d:92:ff:bd:69:8b:59:89:ff:cd:80:07:87:
5e:90:73:1e:97:dd:9b:eb:00:c6:e1:cb:72:38:31:4e:85:a7:
46:98:21:8a:20:0a:f5:9e:02:64:30:be:24:62:31:94:fc:19:
ba:a3:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:15 2025 by rpki-client