Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eM9Q4lI1JRrOfk6t08Aw-pFIJTE.roa
File: eM9Q4lI1JRrOfk6t08Aw-pFIJTE.roa (raw, json)
Hash identifier: 5fVB3eyTiIkU3Q8YIFXBDLRYPqS2K+j3TJNpjN93QVk=
Subject key identifier: 78:CF:50:E2:52:35:25:1A:CE:7E:4E:AD:D3:C0:30:FA:91:48:25:31
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D18A261EC8674A3BAE1927691F7905C71
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eM9Q4lI1JRrOfk6t08Aw-pFIJTE.roa
Signing time: Wed 17 Jan 2024 18:15:11 +0000
ROA not before: Wed 17 Jan 2024 18:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:a2:61:ec:86:74:a3:ba:e1:92:76:91:f7:90:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 17 18:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78cf50e25235251ace7e4eadd3c030fa91482531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:8e:7a:5b:fa:01:f1:35:4b:17:8c:38:fe:
32:f9:86:9c:10:cb:15:b0:eb:d4:ad:3a:97:9b:4c:
54:dc:57:b4:44:40:14:70:af:4a:91:bb:c2:03:d6:
82:9e:06:28:ed:09:5d:24:b7:8f:31:9e:c6:2f:8c:
19:e6:92:e7:c0:8f:2d:75:cd:52:4f:7d:25:07:b1:
f2:b1:47:2b:39:6c:0b:ef:2c:29:b9:ae:11:4e:77:
a0:90:e1:d6:be:d1:ce:57:bc:18:e4:a6:e2:bc:3b:
90:fd:4c:b4:4f:ff:d3:a1:42:37:09:8d:91:ba:d8:
3f:14:7b:5c:fb:91:11:ee:00:e8:a2:8d:1a:cb:ae:
de:65:3c:bf:85:89:f0:9f:84:5f:a5:fb:2b:13:1f:
09:e8:24:41:23:9c:d5:23:e8:33:4a:a9:74:98:4b:
e4:96:71:93:7f:12:20:de:d9:84:f7:43:65:19:58:
45:18:80:67:3b:c5:3d:2f:e9:3f:c3:4b:db:e1:4c:
df:e5:be:51:86:6d:56:95:ea:9b:23:67:dd:6d:e3:
83:9f:6c:76:a9:cd:6f:b2:f8:29:d8:1f:3b:71:34:
13:12:6e:92:1b:75:fb:f9:97:94:e8:5a:b5:02:c7:
58:30:d1:65:c0:0a:53:d9:c0:62:7a:4f:d0:64:66:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:50:E2:52:35:25:1A:CE:7E:4E:AD:D3:C0:30:FA:91:48:25:31
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eM9Q4lI1JRrOfk6t08Aw-pFIJTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:92:56:d6:04:78:6e:74:b2:47:37:a5:4a:0e:f3:1a:0b:57:
cd:3c:81:bf:3d:5e:2b:37:b1:9c:b3:a8:39:a7:78:55:df:a3:
3b:15:b9:d2:8f:d9:4e:f0:35:16:ae:2c:3f:a7:26:db:5c:3c:
11:5e:03:1f:4b:bf:3c:31:3b:3c:34:d9:d4:fd:05:ab:e3:40:
58:c4:e7:62:67:3b:2d:75:67:17:94:47:e4:18:c9:63:46:2e:
c5:55:84:03:ed:16:60:ed:a8:43:3a:ca:8b:0c:26:18:53:cb:
94:16:bf:af:3a:59:25:94:fd:50:2a:41:52:95:c8:a7:99:3b:
7d:0f:d0:3a:3a:96:aa:1b:57:87:bf:f6:11:7c:42:68:da:d2:
47:88:80:e5:67:49:1d:bd:b9:c1:3f:58:e3:b5:69:4e:83:d3:
cf:c8:d2:52:a8:a4:71:9f:0a:58:e2:90:28:51:97:60:81:6d:
1a:a8:6a:9a:7e:6d:1a:fc:5f:33:f9:1e:99:5b:91:a5:99:44:
e5:b8:1d:bb:37:17:e3:4f:ec:52:7f:c3:63:62:f1:d5:0a:5e:
b1:b9:57:57:03:7b:99:45:5a:98:55:ea:a0:f7:7a:cc:82:26:
2b:44:1b:ec:d0:0c:8d:d3:34:5a:86:57:09:37:5b:34:cc:e5:
2a:29:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:24:11 2025 by rpki-client