Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ji_5fFa9AGg8oeDV1O-WXBUYxgU.roa
File: Ji_5fFa9AGg8oeDV1O-WXBUYxgU.roa (raw, json)
Hash identifier: 3Xl2SMJCZFcbpp9eztM4J1wx4fxSn8DH/SvVCV0HmW4=
Subject key identifier: 26:2F:F9:7C:56:BD:00:68:3C:A1:E0:D5:D4:EF:96:5C:15:18:C6:05
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED34C741AEDA449AF8EFE114A64046AE8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ji_5fFa9AGg8oeDV1O-WXBUYxgU.roa
Signing time: Fri 12 Apr 2024 17:13:06 +0000
ROA not before: Fri 12 Apr 2024 17:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:4c:74:1a:ed:a4:49:af:8e:fe:11:4a:64:04:6a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 12 17:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=262ff97c56bd00683ca1e0d5d4ef965c1518c605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:ac:47:e8:40:22:b9:4d:b2:3a:88:56:6d:
f0:9b:48:c6:85:37:71:c4:c1:94:31:f8:c2:6d:8d:
f9:6c:7f:ae:06:08:24:f7:1a:57:91:89:b2:bc:68:
03:9b:ea:f3:24:0e:1b:58:b6:30:e8:30:b4:1f:a9:
1f:6b:cc:e3:95:e3:66:38:ba:00:39:9d:05:17:61:
4b:be:ba:44:9a:16:ad:79:06:f0:4e:04:4c:73:4a:
c9:68:22:60:e3:b9:6b:40:f0:cb:e8:0f:29:8d:b7:
de:f4:e3:90:4b:63:2a:a1:4b:3a:ea:e3:db:06:d7:
b2:cc:0e:55:c1:ac:72:f5:d0:f6:16:5d:78:48:3e:
cc:f7:a3:b9:ea:1d:d3:f8:e4:0d:90:e2:6d:f0:48:
40:91:ed:a0:0b:b7:27:99:fd:2e:a3:0b:cb:18:8c:
aa:20:ca:62:0a:4b:68:70:7f:d7:3d:dd:3e:34:cb:
95:aa:8f:b7:eb:ce:4a:d6:89:30:b9:7e:9c:c3:9c:
4f:85:6b:52:33:95:c0:8d:e7:4a:45:a6:95:c1:e7:
86:97:dc:b2:aa:23:b1:ed:5e:83:cd:a1:7a:9e:6e:
21:9c:48:a7:e4:88:92:6b:fc:fb:cb:ec:ff:1f:0c:
68:ac:66:61:99:fd:0c:62:9b:d0:74:e8:27:e0:5c:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:F9:7C:56:BD:00:68:3C:A1:E0:D5:D4:EF:96:5C:15:18:C6:05
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ji_5fFa9AGg8oeDV1O-WXBUYxgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:4d:d7:53:8c:f2:fb:8f:e7:a2:29:19:91:2f:df:5a:54:82:
29:a0:dc:bb:c8:42:d3:ed:2a:c0:a5:13:20:bb:c2:98:f9:0d:
f4:ea:ee:97:a5:0f:8e:37:fb:60:34:2d:ae:a5:0b:a6:7e:1f:
03:9e:69:79:23:c7:2e:cb:37:2c:62:2c:6f:19:ed:2c:9e:f0:
8d:ce:ef:3b:9d:cc:16:09:34:52:68:75:8c:c0:df:86:61:0c:
a5:3d:07:98:cb:32:7b:80:f5:1d:39:a3:88:0c:23:10:36:2a:
98:63:14:20:8d:70:d8:3a:ce:b1:6c:67:3d:d4:2d:d7:32:8e:
8a:96:34:c7:f3:f3:6c:3b:f5:ab:8d:33:18:b5:47:f6:87:d6:
ae:69:6c:7f:b3:30:6d:4c:7f:3d:08:1d:46:cf:15:93:60:be:
eb:19:58:8d:c9:69:9e:bb:74:8b:b0:58:b4:53:2d:8e:8a:81:
d9:0c:be:3c:19:fb:2a:3e:5d:a5:50:b9:37:e4:e6:aa:58:39:
da:da:47:30:6f:d2:98:0f:57:2d:6f:65:8d:d6:66:7c:01:1d:
e6:2c:3b:22:11:28:89:fe:50:de:e4:c1:ee:3e:0e:c2:15:d6:
0d:b6:16:bb:f7:9a:7e:92:df:e5:ae:be:87:30:dc:44:ae:08:
1c:71:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:54:52 2025 by rpki-client