Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z8HzZ15tCx7e7kFqLsibWn5CDYw.roa
File: Z8HzZ15tCx7e7kFqLsibWn5CDYw.roa (raw, json)
Hash identifier: bS9k/ipa1g/bca3+AlFYBLfZoYlx3AhqxP33ALyFrY0=
Subject key identifier: 67:C1:F3:67:5E:6D:0B:1E:DE:EE:41:6A:2E:C8:9B:5A:7E:42:0D:8C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CECA22DF0785670ADC45BD976853824BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z8HzZ15tCx7e7kFqLsibWn5CDYw.roa
Signing time: Tue 09 Jan 2024 05:11:40 +0000
ROA not before: Tue 09 Jan 2024 05:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:a2:2d:f0:78:56:70:ad:c4:5b:d9:76:85:38:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 05:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c1f3675e6d0b1edeee416a2ec89b5a7e420d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:b1:d0:7b:f3:10:96:42:9a:4a:cb:df:26:
4f:81:04:3c:b1:c2:ee:c5:9c:b4:1e:a9:b9:45:98:
2d:6f:6c:cb:1c:09:4a:de:2b:14:10:c8:39:d3:31:
df:de:62:0b:99:29:59:92:56:18:26:a8:ba:d9:e6:
7c:66:b4:4f:16:72:db:e5:b9:ac:82:d8:37:92:8b:
eb:f9:86:ee:0d:10:60:df:10:e6:8e:0b:8c:00:b1:
ee:22:7f:0c:ab:b1:79:f0:9c:8f:9d:6f:92:55:03:
7e:8e:bb:84:a8:e3:c9:0d:8b:4a:79:55:0a:10:3b:
04:77:28:18:e3:4b:39:72:e6:ca:f3:c5:67:32:1a:
8e:2c:0f:ad:7f:f2:d5:89:c5:07:b9:07:6c:9d:b0:
7e:a1:35:47:3c:98:d4:21:7e:f5:b6:82:1c:2e:6c:
80:9b:35:71:85:21:54:87:c0:ec:28:68:b4:cc:06:
d1:0f:72:92:d5:f1:8f:31:5c:77:09:10:71:d5:f0:
f9:8c:d7:f5:6e:73:7b:4e:bc:85:03:e5:a9:83:d1:
4b:a6:ed:95:97:c5:12:9c:92:24:e0:f7:64:45:55:
d7:ee:c0:ff:58:a4:a4:8b:19:34:fd:a2:9f:97:07:
d4:29:33:d4:ed:46:f6:f1:03:b5:11:52:fd:d3:9d:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:F3:67:5E:6D:0B:1E:DE:EE:41:6A:2E:C8:9B:5A:7E:42:0D:8C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z8HzZ15tCx7e7kFqLsibWn5CDYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:71:27:ee:49:9e:70:e9:19:5c:ef:bc:a3:4f:4e:1b:a0:22:
e8:2f:dd:12:25:08:25:13:b4:55:dc:7f:ba:cd:4d:38:c4:59:
ce:03:b3:fa:13:7a:9b:d7:a5:57:22:02:3e:84:b6:cf:8d:8a:
7b:ce:b3:f8:fa:c0:d3:c5:f4:cf:54:44:e3:4a:b1:ea:5d:73:
5f:d5:ee:d6:43:fd:81:ad:14:31:ac:c8:d5:34:6a:75:c5:23:
61:f5:1d:3f:46:ef:45:e8:bf:67:3d:95:bc:d7:52:c5:8b:52:
0e:fa:be:09:74:e8:ec:bc:cf:44:54:cb:4b:d7:6a:3d:c4:af:
ad:f7:78:08:b8:35:09:88:4d:35:f8:f1:3e:f5:56:42:5f:2e:
9a:94:87:59:01:59:9c:9d:b8:49:7a:5d:bd:36:cf:72:04:bf:
19:b3:a9:76:b6:60:4b:3c:9b:06:da:08:55:24:aa:33:3e:19:
41:b8:72:49:55:03:1d:6a:81:b5:fb:1b:34:90:5b:b9:11:e5:
4b:92:f5:d5:e4:ad:e7:c8:33:b8:e3:82:20:30:ce:27:aa:69:
3a:89:0f:1e:38:57:1a:7d:6e:c8:5e:2f:75:34:5b:f1:c4:f2:
80:f6:27:7e:0c:6f:35:15:f6:05:1c:f4:a2:80:63:c9:9b:7c:
d3:bf:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:58:53 2025 by rpki-client