Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V6SYyJRjrkL3iIJINbCijytHzig.roa
File: V6SYyJRjrkL3iIJINbCijytHzig.roa (raw, json)
Hash identifier: WSZM7gPHXy8dbWnzDXSn7bKP0hjnpnYDAl6V+AAWsKg=
Subject key identifier: 57:A4:98:C8:94:63:AE:42:F7:88:82:48:35:B0:A2:8F:2B:47:CE:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9FD179C7C1FF460CAF83E9D124DF27F0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V6SYyJRjrkL3iIJINbCijytHzig.roa
Signing time: Tue 13 Feb 2024 00:15:22 +0000
ROA not before: Tue 13 Feb 2024 00:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9f:d1:79:c7:c1:ff:46:0c:af:83:e9:d1:24:df:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 00:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a498c89463ae42f788824835b0a28f2b47ce28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:31:74:d3:a0:0f:41:07:95:13:29:77:09:
46:af:dd:6b:15:25:46:6d:a5:14:59:af:e7:71:a9:
8d:0c:34:2b:12:3c:2c:38:4f:5b:49:86:05:4b:63:
9c:c3:b7:9f:d5:0e:f3:54:d6:62:33:78:7f:72:39:
34:19:bf:21:81:64:29:89:2f:6f:9d:b1:9e:3f:35:
b8:43:67:c2:0d:9b:ba:0d:27:40:21:f7:4e:2a:25:
2c:e6:d9:aa:44:1a:78:32:ed:61:34:db:9a:b0:de:
3b:4c:e9:7a:7d:f0:c3:8d:bb:20:86:33:d9:37:b0:
61:7c:4c:2f:80:8e:b4:23:6a:ac:e0:2f:ce:0a:d0:
f2:82:a4:f1:d3:2d:3f:dc:aa:3f:14:a2:86:eb:60:
23:fa:14:4d:6b:ff:cc:4e:b2:5c:b9:03:c2:a1:89:
d8:07:4e:5c:02:55:dc:af:fc:37:e3:b5:35:5b:47:
2e:2b:98:47:fc:33:f9:04:e4:a5:21:1d:25:2c:0e:
b4:58:15:7b:e0:8d:20:25:22:b3:b1:fb:63:e0:39:
e1:03:02:d1:6e:f1:0d:93:42:ce:74:8c:50:cd:66:
9a:6c:09:35:fd:41:e8:62:9b:45:36:0d:4e:5e:d7:
de:58:6a:56:f1:03:cd:8d:55:b2:44:45:7c:36:8e:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:98:C8:94:63:AE:42:F7:88:82:48:35:B0:A2:8F:2B:47:CE:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V6SYyJRjrkL3iIJINbCijytHzig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:2c:38:86:41:55:c0:68:da:7e:7e:08:a3:04:d8:79:6c:46:
33:69:0b:24:52:a6:dc:1b:89:65:ca:9a:ea:c0:3b:fd:29:6a:
ff:d2:9b:c1:e3:ef:cc:4d:86:84:0a:57:14:41:80:6a:28:66:
b3:8d:f9:cc:37:a8:00:b1:2d:6a:13:ae:8a:63:00:df:b5:0e:
4e:18:be:86:c5:9f:a1:db:83:01:87:2b:e0:72:c8:1a:06:21:
3d:f4:b3:92:10:23:a8:39:8c:bc:96:5f:64:c6:1e:7f:89:ab:
9e:94:15:65:19:72:8b:5b:f2:a0:c6:27:49:2a:2a:65:6f:fb:
0d:67:1b:67:72:1d:49:60:fd:5a:44:a1:0f:ac:cf:f1:d4:0f:
a0:97:a8:2b:55:e2:85:c0:1d:d4:81:5e:25:7d:ce:b3:b9:32:
38:4f:68:5b:ab:ed:49:f1:9f:60:31:86:57:7a:b1:88:52:15:
0c:71:41:50:c6:5e:c6:bf:21:58:d3:4d:ef:11:89:50:92:f0:
5d:42:da:e6:28:f3:e1:fc:63:29:c8:83:95:7f:71:e2:40:4a:
a7:01:85:6b:c7:07:44:a0:08:0e:30:41:6a:8f:f4:cf:02:8f:
c6:d2:f6:74:98:e2:15:02:ed:27:39:5e:c8:71:d5:d7:be:7b:
b6:7f:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:13:31 2025 by rpki-client