Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XMTtLpe52YuJHeX_ypZDADbR7IA.roa
File: XMTtLpe52YuJHeX_ypZDADbR7IA.roa (raw, json)
Hash identifier: Ec5Mlk3ImuVbKlM6Pw3VXDZlYFqXSTGN12k4QRTQ2x0=
Subject key identifier: 5C:C4:ED:2E:97:B9:D9:8B:89:1D:E5:FF:CA:96:43:00:36:D1:EC:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D92429CBE36DD1BFF75D36DE3076B778D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XMTtLpe52YuJHeX_ypZDADbR7IA.roa
Signing time: Sat 10 Feb 2024 09:04:15 +0000
ROA not before: Sat 10 Feb 2024 09:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:9242:91a6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:42:9c:be:36:dd:1b:ff:75:d3:6d:e3:07:6b:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 09:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cc4ed2e97b9d98b891de5ffca96430036d1ec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:45:a9:9a:49:74:4d:ab:6d:a4:d2:30:8d:
bf:c6:0f:8e:1d:46:73:fc:2f:6b:be:9c:e1:f8:48:
43:ed:50:01:82:c4:a0:5c:b7:a4:34:e1:96:c9:43:
0d:e8:7f:15:21:aa:7a:ef:44:10:84:09:06:ce:df:
a3:d9:54:cf:41:3d:ab:be:f9:d4:32:f2:40:58:c1:
aa:12:46:e6:78:cb:ff:83:f7:70:e3:6a:2c:b2:59:
ef:7d:16:54:ed:a8:c4:32:72:34:1d:8b:18:0d:62:
4d:8e:4e:b8:1c:a2:5d:c2:0b:29:79:56:e6:8c:ea:
aa:f0:f7:9d:c8:61:9e:38:8e:4a:fd:67:ea:d0:7c:
7b:4f:ca:c7:85:de:cc:b3:4b:a4:3e:0e:46:5e:99:
ae:6a:cb:b8:ba:b3:51:e5:fb:2c:85:43:59:15:1e:
95:4d:12:06:3e:9c:c7:07:5e:8d:e3:dc:51:2d:cb:
cf:b4:b1:71:ff:a1:eb:05:7d:1f:4b:68:09:58:3f:
fc:39:4e:08:48:79:0a:12:f1:b7:a1:f2:0d:bf:ce:
0a:d1:d3:31:42:6e:28:1c:89:84:8b:93:c3:e7:2d:
9e:e1:dd:da:c9:f3:68:04:f6:3f:b1:a6:b3:fc:6b:
d6:1a:a7:13:17:8e:48:cb:7c:0a:f1:bd:b1:d9:be:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:ED:2E:97:B9:D9:8B:89:1D:E5:FF:CA:96:43:00:36:D1:EC:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XMTtLpe52YuJHeX_ypZDADbR7IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:c7:4f:b1:b2:2b:c3:8b:15:f6:00:d9:02:08:b7:44:87:3d:
47:b5:9a:83:25:7a:fa:13:f9:59:5f:ac:13:da:ec:8c:f2:b1:
4b:56:f3:12:2b:6c:64:8d:d0:ee:d2:f9:cd:8a:bd:3a:ae:5e:
b8:83:f4:3e:86:4f:57:76:c0:db:47:41:08:21:a9:5b:c9:94:
cd:db:ca:55:de:39:16:23:1a:f5:ff:28:3b:80:ed:09:e5:8c:
47:68:a2:59:ab:0c:ba:11:3a:5d:84:aa:aa:cc:0b:cf:56:75:
bc:3f:70:29:57:59:6a:77:04:a0:09:b2:27:9e:c2:b8:a7:ff:
b4:96:49:3e:35:7d:66:b1:49:8f:96:e1:de:07:2c:fe:c0:04:
64:f8:00:dd:67:46:f2:2f:b7:dd:3f:61:f7:c6:fa:e2:79:99:
64:b0:19:af:b3:46:0f:64:b2:be:b4:d2:a6:d8:2a:ca:5b:df:
25:2c:36:bd:82:6e:d6:57:a1:76:0c:5b:17:b1:3e:a5:8f:c5:
e3:ae:31:7b:a2:95:24:47:2a:7f:e2:51:91:39:58:2c:0f:4f:
f4:31:29:bd:83:f4:47:4b:d1:a7:d7:b0:9a:ee:68:35:40:10:
f6:b8:66:59:26:54:0e:a7:1b:d5:d4:9d:c0:20:ba:c1:1e:18:
e7:03:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:20:23 2025 by rpki-client