Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FcCs8N9rJmezj7BnT4TfUlaaV1Y.roa
File: FcCs8N9rJmezj7BnT4TfUlaaV1Y.roa (raw, json)
Hash identifier: 9eaxXS+IJJX1ewzGMGzBHuUuCbbrSWyNy465ojUsWss=
Subject key identifier: 15:C0:AC:F0:DF:6B:26:67:B3:8F:B0:67:4F:84:DF:52:56:9A:57:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D69BDB3013501CE3673ADC9CC4E2EE3A5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FcCs8N9rJmezj7BnT4TfUlaaV1Y.roa
Signing time: Fri 02 Feb 2024 12:14:16 +0000
ROA not before: Fri 02 Feb 2024 12:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:bd:b3:01:35:01:ce:36:73:ad:c9:cc:4e:2e:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 12:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15c0acf0df6b2667b38fb0674f84df52569a5756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:25:ab:b9:ef:f4:ad:57:8d:4f:3b:32:7e:
46:e0:a3:ef:c6:b1:02:3a:37:d8:ea:e8:f4:6b:4a:
4b:d2:3d:71:cc:91:9e:6a:6a:27:f3:29:34:9d:71:
65:81:97:8d:4e:37:31:f0:ef:d1:16:80:da:cc:de:
e7:38:b5:6a:4f:82:ea:9d:80:77:01:bc:7f:1b:17:
aa:61:9e:5e:57:6c:68:04:f3:a4:54:69:b8:4f:4b:
30:3f:84:fe:6f:c0:0d:0e:a5:25:19:b8:21:5b:4d:
0a:91:5c:df:64:b6:65:fe:f7:b0:fc:ae:09:2b:fb:
01:29:19:5f:6a:55:a7:06:fa:12:a5:99:06:67:7c:
49:0b:08:1c:c0:ed:81:63:21:67:24:f9:65:be:75:
c5:5d:15:a9:9e:4f:80:35:e6:21:3c:6b:b5:0b:5d:
bb:3b:a7:95:f4:2f:1b:2e:01:b9:12:75:14:df:77:
ac:86:3d:9d:82:c3:81:ed:24:9b:2d:21:a3:33:d8:
e1:d5:4d:b4:1b:b3:95:9d:0f:7a:75:24:6f:f1:31:
cd:bc:77:b6:7c:ef:bc:73:65:ba:61:15:ac:d3:9a:
80:0a:8d:0d:97:64:cc:87:ea:77:68:76:46:4e:f2:
e5:22:95:77:31:18:d4:92:54:48:5c:7c:5f:cb:67:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:AC:F0:DF:6B:26:67:B3:8F:B0:67:4F:84:DF:52:56:9A:57:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FcCs8N9rJmezj7BnT4TfUlaaV1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:38:bf:13:5f:19:af:46:5e:7c:76:fd:93:0d:08:89:68:09:
2d:2d:03:1c:f4:2e:b2:1f:fb:96:92:ba:fd:cb:c0:ff:f4:90:
33:1f:4d:04:f1:ed:04:b7:d0:ed:39:44:1b:b3:4b:cd:ce:9d:
7e:f9:d3:b1:f6:67:38:78:96:91:04:8a:8f:72:21:e7:0d:7e:
54:77:af:79:52:ab:aa:9d:c4:4a:80:82:21:7e:41:f5:01:a9:
bb:ab:fd:20:1d:7b:1e:83:10:92:bb:72:6a:38:48:85:1e:1e:
1f:40:4f:75:c9:c8:03:c9:7e:59:f3:ad:e6:f3:2f:3f:61:3e:
6e:02:5b:f5:52:66:2a:88:bd:07:20:3c:65:00:b3:5e:64:17:
03:ff:e8:ff:15:71:b7:cf:51:17:4f:16:60:73:22:60:b3:a7:
ed:4c:1e:78:e5:43:9f:15:fd:35:b4:11:c7:75:25:8a:28:37:
05:5d:72:6d:0c:3e:ba:46:55:72:c5:77:fa:25:67:48:1e:6c:
f2:c6:d4:e2:4a:fc:57:9e:07:ea:2b:38:58:47:d4:74:73:aa:
d0:51:ba:5f:bf:73:16:f1:be:e2:07:0f:f1:cc:b6:3d:61:b9:
53:7b:52:29:51:2e:46:0e:c8:53:f1:6a:e6:45:c1:12:a5:1d:
1a:e8:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:55 2025 by rpki-client