Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UEmTJjiKxJZ9tudpOaUvP-raw_Y.roa
File: UEmTJjiKxJZ9tudpOaUvP-raw_Y.roa (raw, json)
Hash identifier: npf7De85h6SP+ygFA3JBURL3ulsqNv0cRq1Fwy6G4sc=
Subject key identifier: 50:49:93:26:38:8A:C4:96:7D:B6:E7:69:39:A5:2F:3F:EA:DA:C3:F6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA221745FF5D4E0F11D5BC4465FDB7A56
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UEmTJjiKxJZ9tudpOaUvP-raw_Y.roa
Signing time: Wed 03 Apr 2024 04:04:45 +0000
ROA not before: Wed 03 Apr 2024 04:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:a221:16d7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:21:74:5f:f5:d4:e0:f1:1d:5b:c4:46:5f:db:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 04:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50499326388ac4967db6e76939a52f3feadac3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:c8:09:b3:e2:14:e2:b6:48:b8:e6:0b:ff:
b3:f3:39:07:50:5b:f7:b5:bc:92:f9:41:0e:a8:22:
e6:bd:6a:d0:63:66:6a:43:0f:44:29:c3:d6:69:20:
26:63:58:db:8e:6c:e1:c0:c0:ee:7c:73:46:63:48:
41:e0:83:c7:c2:30:da:bf:41:2b:50:bc:d6:cd:f7:
72:cf:95:60:63:05:73:a8:09:68:b0:be:48:be:04:
07:eb:e7:b9:21:20:cd:b9:c6:a1:4c:6a:45:a4:df:
d4:ac:c0:71:8b:14:3d:c0:1d:d0:d7:49:cd:e8:e1:
ef:b5:9e:40:9a:46:4a:70:88:aa:37:f5:48:ae:4d:
90:65:dc:99:28:25:09:d5:4b:b1:71:86:72:cb:87:
8e:54:4c:b7:d1:24:08:56:c2:bf:ef:51:dc:9d:9f:
69:e6:13:62:d6:43:88:19:6a:b4:28:47:70:06:6b:
2b:b8:d2:e1:0b:fd:40:7d:e6:a0:93:d7:7b:e0:56:
ef:47:84:10:dd:6c:f1:09:88:21:cf:5b:7c:63:52:
e1:35:31:64:4a:80:c2:84:5d:b9:15:02:5c:84:50:
4c:2e:35:79:72:d1:93:4f:bb:a3:3f:b5:e0:90:5e:
4a:c8:70:3d:b5:bb:fd:63:a4:05:46:71:48:5e:aa:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:93:26:38:8A:C4:96:7D:B6:E7:69:39:A5:2F:3F:EA:DA:C3:F6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UEmTJjiKxJZ9tudpOaUvP-raw_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:9d:9f:ae:bd:88:a3:fd:ee:aa:41:c8:df:ef:e5:11:d8:ad:
0f:99:2c:ae:f5:65:cb:1a:fa:07:b9:5b:9a:a4:3f:10:c8:aa:
64:91:84:b3:5e:04:95:61:19:a1:fd:48:41:d2:35:15:02:2a:
54:a0:b5:ce:9f:72:69:a3:86:1c:d3:36:0e:3a:fa:28:d6:b2:
77:75:f7:99:f6:27:04:c2:00:37:f8:f4:1e:13:10:12:c1:73:
93:02:c6:c7:0a:30:ca:24:54:8b:ed:9c:97:e3:35:47:e9:30:
f1:e2:73:c3:09:98:64:be:6e:63:bd:72:68:25:38:1c:cb:2c:
ff:12:e8:b3:dc:5f:12:49:67:4b:2a:03:01:8a:89:7b:95:1c:
45:8f:33:b8:34:0f:eb:c0:e4:50:30:08:1b:6f:95:37:0c:93:
8b:86:30:62:2b:0b:77:83:cf:f8:bc:25:8c:bc:5f:6d:f1:8d:
c4:c7:c3:c8:34:19:2a:a2:50:4d:f8:a1:33:85:35:bc:31:c5:
79:85:55:1b:a9:99:b4:a5:3f:c4:5b:92:93:cf:7c:4b:2b:f3:
99:8f:9b:45:f3:2a:eb:f9:eb:6f:86:53:3b:f2:84:2b:cc:40:
6b:d2:16:cd:86:c5:2c:37:a7:95:83:1b:f0:c3:fb:b7:ac:1c:
63:7d:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:04:28 2025 by rpki-client