Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eU6y7FGHyKIBUp88gzIgE9AbqNs.roa
File: eU6y7FGHyKIBUp88gzIgE9AbqNs.roa (raw, json)
Hash identifier: 5jvecC4UCbzdXGqBe1WQuBVAucjVFqV1ebTeZMaVnoo=
Subject key identifier: 79:4E:B2:EC:51:87:C8:A2:01:52:9F:3C:83:32:20:13:D0:1B:A8:DB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E039657BD1CE0EA84FA46BBF80F1D0EC9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eU6y7FGHyKIBUp88gzIgE9AbqNs.roa
Signing time: Sun 03 Mar 2024 09:12:48 +0000
ROA not before: Sun 03 Mar 2024 09:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:96:57:bd:1c:e0:ea:84:fa:46:bb:f8:0f:1d:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 09:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=794eb2ec5187c8a201529f3c83322013d01ba8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:7c:c5:81:c5:3b:bb:39:42:63:51:d3:21:
53:0b:73:c4:b3:e9:75:e1:02:a9:15:89:3d:a5:b0:
fc:d8:9d:5a:64:bf:65:01:c6:2b:20:a0:47:3e:c1:
36:67:d7:70:26:ff:fc:79:4d:b4:56:36:c8:96:b5:
1c:11:51:c4:c3:72:42:fa:8f:ac:c9:cb:05:65:bd:
25:62:f8:bb:87:0f:3f:6b:fb:2d:e2:f7:46:e6:b7:
bc:4f:c2:02:89:1b:03:9b:0e:dd:3f:8d:af:3c:5b:
7d:fb:41:db:f8:66:7e:26:aa:a6:6d:1b:72:ce:5f:
df:f0:f7:fc:ca:06:f9:79:5c:04:98:b2:6b:f6:4f:
84:20:e4:25:b3:9c:c1:6f:25:d0:43:9c:2e:ab:3a:
56:f0:e7:1b:22:88:8f:07:06:72:dd:0d:35:f3:fb:
1b:c6:3b:67:50:31:c7:c6:2e:78:90:03:e0:ab:f3:
76:d0:67:c9:c1:de:12:1f:62:79:e1:7f:21:52:a6:
fe:39:3a:9a:9a:86:cc:34:63:db:73:99:40:d3:93:
f7:20:ee:89:b3:f9:94:7c:eb:21:c1:3f:2b:c1:9d:
f1:7b:f8:43:59:54:b9:1d:d2:12:07:e8:30:5b:65:
ac:a7:28:1c:ce:e7:35:42:f1:44:0e:68:42:65:12:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:B2:EC:51:87:C8:A2:01:52:9F:3C:83:32:20:13:D0:1B:A8:DB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eU6y7FGHyKIBUp88gzIgE9AbqNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:ed:a7:f0:17:8c:e5:17:7a:17:0a:40:ad:d0:32:bc:29:f4:
24:f2:60:b9:fb:28:35:33:ef:cb:17:11:a3:03:9f:b1:69:31:
ed:95:2c:19:7d:1b:eb:45:37:d6:92:f5:8d:ff:7a:69:9f:82:
df:1c:57:ef:a0:aa:83:e9:df:c8:ca:77:32:80:4f:76:dd:8a:
ac:6a:9f:6f:a8:7a:4b:70:b4:36:d9:4b:e9:13:88:30:15:dd:
d6:19:95:a7:f2:12:3b:0e:5f:1a:ad:56:8f:c0:8a:cd:d3:15:
e7:68:9d:d0:62:b5:68:b2:b0:05:1b:19:6a:52:86:71:ba:86:
9e:1c:03:42:bd:02:85:79:86:5b:c7:6d:d1:66:03:3f:d6:ee:
98:1c:4b:9c:fa:64:17:d7:7d:82:99:61:dc:59:59:1b:fc:53:
89:03:fa:cc:2e:3f:d8:e5:00:f5:cd:2e:3e:75:ff:aa:b2:bb:
10:d4:c0:34:1e:cf:56:43:9b:68:23:1e:1c:c5:e5:9d:77:0f:
c5:f7:e0:4b:ef:71:86:a8:7b:d4:d5:53:8e:2b:f1:97:8c:e7:
05:65:a3:99:29:94:a8:ed:52:9c:98:46:41:e9:e7:2f:4a:4f:
fc:95:dc:c8:61:ee:95:41:2e:c6:01:2c:b8:85:bf:d6:2e:8e:
b5:c1:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:52 2025 by rpki-client