Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GaW5SQYmGytKUBgWTeIOb5vPlmg.roa
File: GaW5SQYmGytKUBgWTeIOb5vPlmg.roa (raw, json)
Hash identifier: VfFaTpEnA93KtCFqiv3SdizAgQQvuQ6kab0vLtZcgcE=
Subject key identifier: 19:A5:B9:49:06:26:1B:2B:4A:50:18:16:4D:E2:0E:6F:9B:CF:96:68
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E80E574CB9BD923444DBDC2C389F876F6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GaW5SQYmGytKUBgWTeIOb5vPlmg.roa
Signing time: Wed 27 Mar 2024 17:11:45 +0000
ROA not before: Wed 27 Mar 2024 17:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:e5:74:cb:9b:d9:23:44:4d:bd:c2:c3:89:f8:76:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 27 17:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19a5b94906261b2b4a5018164de20e6f9bcf9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:af:a8:66:c8:8d:36:30:c4:36:eb:cb:ed:
6d:b0:90:9f:4f:c0:6c:32:00:77:28:f0:64:37:7c:
2d:68:9f:d3:46:a6:05:19:81:d3:f9:98:ed:16:de:
b4:ad:db:da:86:88:1e:8e:33:03:10:6b:19:f1:c4:
ec:cc:07:35:9d:5d:ac:5a:fb:2f:97:41:4a:54:b7:
55:39:62:a8:3c:2e:e8:38:3f:cf:5e:9a:a6:38:0e:
d9:95:54:db:ec:1a:c5:d1:42:b0:b4:13:df:59:01:
19:09:9b:ce:2d:b9:dc:8e:22:b2:82:53:b9:64:76:
a1:03:97:fc:60:90:83:52:14:43:3b:ff:9f:54:94:
37:6a:8b:73:34:9f:41:8d:44:02:4e:52:9f:01:28:
19:c7:f8:5d:52:ac:86:6a:5a:69:33:b6:78:6b:eb:
33:36:a4:55:52:cf:51:62:f7:bc:4d:16:a2:15:41:
39:01:b7:72:1c:f3:0d:45:78:90:b7:b5:58:d0:fb:
e1:a2:ba:8d:0f:4a:5f:99:1d:6b:e3:29:4c:dc:4a:
4c:44:62:bb:84:d0:b5:54:c9:1b:ec:3c:21:9a:d9:
5a:46:06:8c:89:a8:58:f5:51:22:d5:0d:ab:cf:4e:
c6:58:7a:29:6d:a8:f5:4e:8b:54:4e:dd:89:00:be:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:B9:49:06:26:1B:2B:4A:50:18:16:4D:E2:0E:6F:9B:CF:96:68
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GaW5SQYmGytKUBgWTeIOb5vPlmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c7:ea:c4:9d:f3:ca:fe:e7:42:3d:da:ca:b5:6e:85:b2:47:
4a:29:54:cd:70:76:60:f3:c4:1b:8f:6a:ec:2b:57:48:99:36:
00:79:9d:1f:23:25:9c:82:a6:81:05:8f:19:6c:ff:f5:5f:a3:
00:58:ba:6a:72:6e:67:33:54:11:8e:bf:fe:c2:73:c4:90:88:
ae:b3:23:9c:8b:2b:e2:ab:43:36:d5:84:9e:1f:9c:e4:c0:5b:
45:c9:65:b7:e4:b0:2c:52:d0:b3:08:2e:70:5c:82:23:4e:d6:
f9:3e:78:1e:58:7c:b2:76:ac:aa:c8:32:62:c3:19:b0:8c:58:
65:44:86:32:20:a7:6e:fb:1f:cd:44:6a:a8:d2:a0:f3:0b:ba:
37:4f:7f:4f:ec:b4:65:d6:ce:dd:af:04:84:c8:d0:54:38:81:
b6:3f:5a:a6:b4:6e:67:d7:96:0a:3f:d5:f9:49:37:16:11:03:
b4:50:e4:74:78:70:6f:0e:ed:28:10:9d:27:aa:80:18:76:1d:
0e:3c:13:d2:7b:9a:77:2b:60:a8:13:cb:60:fa:92:6b:b9:3e:
23:9c:29:89:10:1e:d2:fe:26:f5:a8:5e:9d:d9:22:af:0c:36:
b7:b0:ba:db:c1:e0:82:3c:ec:96:e1:c8:35:37:00:c4:55:96:
78:a4:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:01:07 2025 by rpki-client