Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L0XX7NqzedFFoOgE1V6cZ_maAM8.roa
File: L0XX7NqzedFFoOgE1V6cZ_maAM8.roa (raw, json)
Hash identifier: R1fWnhLZkRbgq0OZwbkcOCdH0K4D/5uZ+BgWdX1SPJI=
Subject key identifier: 2F:45:D7:EC:DA:B3:79:D1:45:A0:E8:04:D5:5E:9C:67:F9:9A:00:CF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA63EADA7555188A964944902254A1746
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L0XX7NqzedFFoOgE1V6cZ_maAM8.roa
Signing time: Wed 14 Feb 2024 06:12:21 +0000
ROA not before: Wed 14 Feb 2024 06:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:3e:ad:a7:55:51:88:a9:64:94:49:02:25:4a:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 06:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f45d7ecdab379d145a0e804d55e9c67f99a00cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:9e:da:eb:b9:75:9c:74:1a:09:ea:ed:ee:
d2:92:80:96:d0:d3:c2:a9:21:38:94:48:4a:1a:66:
c0:40:4a:19:f8:9e:da:be:2f:ed:be:25:4e:05:b3:
e1:04:84:b5:b8:c9:87:74:c1:38:38:b3:b3:61:6a:
81:63:fa:77:12:7f:bb:ac:6c:44:f7:5b:8b:0e:03:
b9:52:42:04:9c:cd:a8:95:e1:c9:9f:d4:a0:6b:b7:
d1:be:4d:8e:44:ba:13:da:05:1d:e4:e9:bb:b4:e5:
e9:cf:35:30:a0:03:4c:88:6c:1f:64:19:dc:08:71:
b1:4c:db:58:12:d4:12:46:70:7c:54:28:21:ac:ff:
30:bd:f1:ee:ce:c8:68:4a:1a:6d:63:fc:9e:7c:45:
f1:9e:8c:c9:5e:bd:61:46:3f:37:fd:5c:db:3b:43:
39:9c:68:71:0a:9c:b6:2c:b3:6e:d7:fd:c6:5e:e5:
58:04:56:d5:8d:0e:a9:ae:2f:de:27:33:73:4b:07:
04:22:6b:de:36:23:8d:66:a9:18:33:4d:68:00:e1:
2e:58:ff:ef:d1:34:0c:34:ad:77:a0:3d:28:24:53:
91:db:38:e9:c6:cf:0d:ba:e1:5a:32:f2:1b:d9:eb:
ce:7f:72:f7:82:99:8d:4b:00:04:d0:bc:37:cc:31:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:D7:EC:DA:B3:79:D1:45:A0:E8:04:D5:5E:9C:67:F9:9A:00:CF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L0XX7NqzedFFoOgE1V6cZ_maAM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:f8:1c:29:ac:df:72:95:da:5b:be:f7:59:67:ec:84:bb:e9:
a1:7a:c6:f8:81:f3:dd:12:ef:b5:39:21:de:d6:22:23:fc:f6:
69:9e:f2:33:fc:58:2f:97:e7:82:ad:e2:b7:9b:95:a8:f8:59:
35:19:d0:75:6a:b6:a4:b5:5d:aa:e8:19:19:69:41:28:96:74:
f4:9d:b4:7a:c6:15:2a:02:56:ed:ba:f1:90:dd:51:c9:34:9e:
c5:87:3b:c0:05:04:ee:df:cc:a6:80:33:f9:8c:0e:b7:88:24:
79:be:d2:40:d4:4e:1d:48:95:23:3e:ea:c2:99:1f:48:fa:31:
49:be:09:7e:ee:39:00:1f:3c:45:94:e4:5f:b9:65:69:d5:58:
57:4b:0a:7f:69:cd:e6:78:1e:fe:ed:ac:70:62:fa:41:94:fe:
5f:ed:97:b0:ba:52:99:11:8d:d5:3a:f9:8d:0a:e6:51:c2:23:
8f:d6:e0:14:da:57:6a:dc:f6:ef:50:4b:e4:43:55:af:c7:7d:
fe:4b:5f:14:75:bd:f0:08:5c:b5:ec:a5:de:ea:71:f9:e6:f7:
c8:80:3e:57:5a:7f:2c:df:93:ac:33:22:83:fe:60:80:21:de:
fd:cf:56:05:bc:c1:6e:d1:e4:f5:2f:7b:68:dc:e7:aa:3b:39:
7d:e6:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:05 2025 by rpki-client