Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ET2-Kxz7VaZqPUKwqtSyeGmDdIo.roa
File: ET2-Kxz7VaZqPUKwqtSyeGmDdIo.roa (raw, json)
Hash identifier: EbJ1Bo5/Jj7GX6UxTyEYi5odZvRm15yhFC5G79HbHow=
Subject key identifier: 11:3D:BE:2B:1C:FB:55:A6:6A:3D:42:B0:AA:D4:B2:78:69:83:74:8A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC931CADCCCD9759FF7531C4C096B1BAC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ET2-Kxz7VaZqPUKwqtSyeGmDdIo.roa
Signing time: Wed 21 Feb 2024 01:05:00 +0000
ROA not before: Wed 21 Feb 2024 01:05:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:c931:346/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:31:ca:dc:cc:d9:75:9f:f7:53:1c:4c:09:6b:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 01:05:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=113dbe2b1cfb55a66a3d42b0aad4b2786983748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:c7:db:2b:13:f9:4c:e2:75:33:b6:45:d5:
25:0b:e1:2c:03:a8:74:a6:54:84:f4:0c:3c:4f:c9:
49:28:1f:6f:04:af:78:a3:fa:d9:6e:eb:19:9a:75:
81:7a:ba:11:26:98:b9:92:63:ef:8c:e4:e1:bc:6d:
3e:55:15:4e:a1:e0:d6:c2:42:8f:cb:d7:67:94:39:
ac:6a:34:0b:56:31:1f:83:df:a9:e7:06:b4:b0:92:
38:cd:ab:91:7a:0f:86:4d:33:2e:74:75:85:d9:42:
c1:73:6c:20:c2:00:ad:64:90:f4:75:2e:c1:0d:41:
56:d0:3f:c7:32:b3:c4:de:35:c9:82:45:18:1b:76:
f6:ac:b9:0f:10:ce:c8:dd:09:b8:86:82:af:cd:6f:
3c:f3:c2:49:8e:c1:f0:25:8d:ca:ff:dd:fd:b4:d9:
00:a9:cc:68:d0:5a:3f:e4:c8:46:f5:62:91:18:88:
40:33:76:ac:90:af:29:4c:44:c7:eb:31:5f:78:03:
d9:b3:9f:3a:c2:e2:3a:fc:9d:ca:4f:8d:ae:36:91:
52:66:8c:c9:b2:44:0d:ec:e4:57:6a:e3:cb:36:6f:
e8:cc:5f:13:c4:41:6a:1b:92:49:6f:69:bb:60:46:
c3:1a:63:ed:27:80:65:7b:67:9c:29:98:dd:32:11:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:BE:2B:1C:FB:55:A6:6A:3D:42:B0:AA:D4:B2:78:69:83:74:8A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ET2-Kxz7VaZqPUKwqtSyeGmDdIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:22:69:99:66:9f:e6:10:52:80:3d:9c:cf:22:ef:f4:a5:c7:
91:72:58:05:c6:d0:cf:e4:f8:56:7f:3f:f3:ad:3f:b1:d7:e2:
b8:ed:be:33:a2:65:55:ed:e3:72:92:48:3f:e2:ac:25:be:d4:
66:b7:ce:7f:37:78:b3:9f:44:b0:28:7b:ce:cf:28:ad:93:42:
fd:6c:1a:d9:8f:96:b5:75:e0:25:44:90:e9:33:33:42:58:77:
46:39:a4:b6:d9:64:20:41:3b:3d:59:5e:ab:28:09:e0:a3:41:
c2:af:b3:04:5e:83:3c:bf:00:31:86:be:fa:5d:8e:b5:aa:30:
bb:4a:5e:98:a0:97:8e:a2:5b:0e:0c:85:d5:5b:f7:0a:1f:7d:
00:68:b1:e6:52:0b:8f:ba:ed:a6:cc:7e:cd:71:ab:1a:a2:e9:
49:a0:f8:b2:e3:ee:8e:40:95:95:4e:f9:0d:16:e3:1e:5c:c7:
0c:02:84:49:cc:2b:e5:c7:c1:e8:a6:bd:e0:e1:96:a8:33:13:
e8:f8:80:9d:af:e0:73:05:29:b3:fa:e3:99:5a:2c:c6:3b:a1:
c9:33:29:2d:5a:fe:bd:fb:ad:b4:96:d5:69:9c:a8:9e:f7:3f:
52:56:50:6c:fa:05:2e:b6:ac:2a:50:8c:da:6c:1c:82:39:b5:
44:2d:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:28 2025 by rpki-client