Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_CgWAn2zW7LMORodW0d_sSbaKT4.roa
File: _CgWAn2zW7LMORodW0d_sSbaKT4.roa (raw, json)
Hash identifier: m/Cd7ZQLh1uVIXsAuCITPJgXn7O0yyneWK7HkWZu4xc=
Subject key identifier: FC:28:16:02:7D:B3:5B:B2:CC:39:1A:1D:5B:47:7F:B1:26:DA:29:3E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB61B67235F82E2DCCA6FD854ECDBEAD2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_CgWAn2zW7LMORodW0d_sSbaKT4.roa
Signing time: Fri 29 Dec 2023 15:04:58 +0000
ROA not before: Fri 29 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:b61a:ab4b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:1b:67:23:5f:82:e2:dc:ca:6f:d8:54:ec:db:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2816027db35bb2cc391a1d5b477fb126da293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:0a:15:72:70:f8:ee:84:87:8c:e2:f0:bf:
5f:75:7b:11:7c:77:7f:72:a1:5b:a8:eb:3c:44:b2:
c8:88:c6:de:cb:06:61:14:04:18:61:88:55:73:fd:
c2:1e:25:91:b5:2e:9b:c2:f0:ca:d2:ec:d0:4a:ef:
8c:cc:83:08:77:f2:e7:24:b3:af:53:ae:59:70:b9:
8b:8d:2a:9c:d8:d2:d9:5f:37:75:9c:1d:45:74:96:
17:bf:3e:37:ea:f2:2f:b5:5d:db:07:7b:55:af:e5:
9b:24:d2:fc:26:1d:9c:fa:45:0f:dc:20:78:4b:da:
80:58:43:af:a6:f4:7d:7d:40:5c:42:10:54:d2:ae:
db:d9:6f:a0:46:06:58:3a:c8:a9:f9:78:27:1a:e5:
05:6b:c1:e2:c4:72:b8:7e:23:e3:d3:c4:bc:98:9a:
4c:66:36:7c:74:b7:71:84:70:06:b3:1a:82:2f:8a:
f9:62:c4:80:4e:3b:4d:7d:af:07:8c:26:a4:08:99:
9b:ff:ac:59:62:f0:c3:01:4f:64:96:5c:95:c0:f6:
61:3d:a1:9b:c4:cc:4c:71:21:cd:71:6b:dc:c9:25:
28:1c:f6:95:d0:e8:6a:35:a0:3f:8e:46:fd:98:89:
80:33:ff:dd:fb:1e:8a:0b:a7:c8:83:7d:ce:03:bf:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:16:02:7D:B3:5B:B2:CC:39:1A:1D:5B:47:7F:B1:26:DA:29:3E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_CgWAn2zW7LMORodW0d_sSbaKT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:4c:43:a3:58:be:64:a9:ef:ff:3f:d4:84:83:94:9a:e0:e6:
2f:ad:de:f3:40:be:36:51:52:9d:09:e5:f2:88:b4:20:44:e5:
65:61:0a:ed:e0:ff:5e:e6:4e:53:35:30:07:3d:0f:a1:4e:34:
1a:00:36:88:2b:c0:1b:60:94:49:d5:16:69:f2:18:02:d3:5a:
43:33:b6:76:0f:ed:59:d4:69:69:71:74:94:01:56:07:ec:83:
99:67:c8:69:04:70:6d:0e:e7:23:e6:e8:40:74:d6:0b:d5:0d:
94:2e:ad:db:09:17:32:e9:81:55:4f:cc:a5:88:a2:d2:62:26:
35:27:82:8a:ce:ae:b1:8c:93:d7:ab:02:bd:6a:e8:4d:1c:0b:
80:38:35:fb:9f:d4:1c:5c:17:fb:4f:8f:74:fb:28:20:c0:d9:
32:9d:bd:3b:18:41:46:bd:cf:91:3a:ef:80:64:c2:0a:ed:4b:
af:1e:a7:63:c7:55:09:2c:93:70:18:e9:53:96:2e:b2:e1:6e:
f0:b3:c7:17:92:b2:58:b3:35:ea:25:87:3b:fc:92:4b:80:78:
63:25:2d:bf:3a:cb:98:3e:d8:6f:f1:5f:0e:29:2e:e8:37:e4:
04:7d:c9:e5:d3:d6:11:10:e2:17:42:b0:97:0b:2c:ad:4c:45:
be:4f:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:24 2025 by rpki-client