Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sk8uCFeTkymX-Hew-3_T8Y_b-aQ.roa
File: Sk8uCFeTkymX-Hew-3_T8Y_b-aQ.roa (raw, json)
Hash identifier: +0otj3n/TTawpaDd29/61yjZ2tv3fDvMI9NFl9oEfco=
Subject key identifier: 4A:4F:2E:08:57:93:93:29:97:F8:77:B0:FB:7F:D3:F1:8F:DB:F9:A4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D62AAC970E779FEB117AAAC72F82141E1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sk8uCFeTkymX-Hew-3_T8Y_b-aQ.roa
Signing time: Thu 01 Feb 2024 03:16:16 +0000
ROA not before: Thu 01 Feb 2024 03:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:aa:c9:70:e7:79:fe:b1:17:aa:ac:72:f8:21:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 03:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a4f2e085793932997f877b0fb7fd3f18fdbf9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:94:f0:aa:1c:d0:a4:87:7b:1c:e9:fd:6f:
a7:1f:91:fc:8a:7d:ea:74:31:a1:9e:d5:4e:fc:f0:
60:57:9e:77:3f:57:a7:bd:b9:06:1c:a4:22:a6:1a:
49:23:1d:12:ca:94:20:5c:50:4b:4c:50:e6:f0:b2:
c3:56:ff:19:91:bd:e1:17:6f:6a:a8:c3:77:da:65:
b3:27:74:91:73:fa:a5:56:0c:e7:53:4d:34:68:6c:
cf:43:34:55:3e:50:13:ee:23:63:db:0c:c0:4c:f4:
5e:88:25:61:2e:08:9a:bb:f0:62:4f:49:6d:17:e5:
47:e8:a9:d8:66:cf:99:65:37:be:1f:2f:73:24:e8:
eb:d8:62:b3:0f:52:77:23:38:d3:e6:16:57:b3:f6:
3e:4d:6d:63:e4:f1:77:f6:2f:a8:87:1e:fa:76:9d:
78:a1:45:74:17:cc:8c:26:dc:a3:4d:e0:7e:23:8f:
2f:b0:0d:b4:57:d0:70:97:70:e0:bf:75:43:59:98:
06:b4:16:86:f5:19:df:c1:e0:9c:55:e7:62:a1:7e:
e0:9b:50:7c:70:d1:0d:b1:39:36:36:a0:bb:f7:61:
94:0d:e6:55:5a:b9:ec:93:7e:96:bf:b9:c2:ed:cf:
39:3e:c6:76:fc:fc:11:5d:59:2d:c4:3f:a6:1e:d6:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:2E:08:57:93:93:29:97:F8:77:B0:FB:7F:D3:F1:8F:DB:F9:A4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sk8uCFeTkymX-Hew-3_T8Y_b-aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:67:7e:36:14:6b:3e:9f:eb:e8:98:97:d5:b7:8f:de:b3:8f:
f5:47:79:00:15:37:b3:ff:14:67:48:5e:96:c8:e3:f5:7c:a7:
e2:d5:d9:31:bc:d6:f9:66:d8:3a:05:ed:1e:ec:9d:54:f5:eb:
83:74:c7:e6:04:09:b1:52:60:bf:5d:43:57:0d:97:07:95:92:
2a:f4:b2:2b:9a:f4:75:da:5f:d1:24:44:c3:9e:4f:0f:0b:1f:
cd:3e:ee:02:a5:8a:e3:50:b2:8a:ec:f2:98:8c:5d:f1:b2:5b:
52:72:3e:bb:70:cb:6e:ab:29:d2:16:5a:bd:b6:c9:81:5a:5c:
97:39:06:75:02:c9:ea:a8:97:c0:1a:19:f6:ea:43:03:c1:46:
b5:c9:e0:7d:80:33:03:e3:0f:4f:73:37:07:e3:39:19:8e:03:
25:c2:be:43:a1:38:12:6d:49:ac:1e:43:2e:af:6f:69:71:ee:
5e:af:63:26:1c:24:1b:5e:4d:a8:b9:4d:51:85:d6:3c:05:26:
f3:17:65:82:4f:a1:b5:19:45:7d:7c:3c:83:f2:a7:e1:98:7d:
4b:77:c9:67:90:90:de:ee:82:db:be:f0:08:36:99:2d:c2:4c:
f5:35:0d:fc:81:02:12:a5:71:20:49:8f:a6:b2:fe:af:d3:44:
35:61:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:07 2025 by rpki-client