Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e_EfXEGHZWBCU2KQI2ZkyaSbyjA.roa
File: e_EfXEGHZWBCU2KQI2ZkyaSbyjA.roa (raw, json)
Hash identifier: sU3A5UVqr8KLRmnhdoEWbxZhmjSuK1MtlACSiBfYYhA=
Subject key identifier: 7B:F1:1F:5C:41:87:65:60:42:53:62:90:23:66:64:C9:A4:9B:CA:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC5C0D39141EBF7E9A6B18307B7ADD52D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e_EfXEGHZWBCU2KQI2ZkyaSbyjA.roa
Signing time: Wed 10 Apr 2024 02:05:32 +0000
ROA not before: Wed 10 Apr 2024 02:05:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:c5c0:413e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c5:c0:d3:91:41:eb:f7:e9:a6:b1:83:07:b7:ad:d5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 02:05:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf11f5c4187656042536290236664c9a49bca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:3b:40:e1:db:dd:c1:c5:ad:ef:db:74:b7:
79:26:f5:37:13:4f:35:f8:02:3f:93:21:d4:35:ca:
55:ea:67:7e:b7:c2:51:dd:c7:2a:36:ef:22:67:b5:
91:90:37:57:70:6c:9d:c1:ff:7f:34:4e:9c:35:20:
01:64:08:4f:23:99:af:a1:1b:ca:13:2f:e8:69:13:
7a:34:a6:33:15:43:2d:ba:f7:60:16:6b:6c:e7:cc:
14:db:f1:b8:d8:52:3d:79:15:0c:89:e5:2f:a5:11:
0d:fd:45:fc:95:2b:fc:af:6b:cd:49:34:62:35:4f:
d5:79:c4:ff:05:25:c0:2d:9e:63:1e:7e:36:db:5b:
6c:57:cb:cb:e4:2e:39:25:2e:dc:9b:94:bd:45:a5:
09:e6:7e:c6:77:13:b8:07:a6:11:b5:d7:d7:fb:ba:
07:8b:a2:79:a1:47:62:2c:66:00:81:5e:10:5a:3c:
65:92:d7:c7:3c:c1:7c:8e:da:d3:4d:0c:fe:3b:d0:
aa:f5:57:d1:95:f4:2f:a7:e5:e7:ae:03:37:01:65:
a0:00:ce:a3:25:ae:f8:96:1e:cc:8a:c7:a1:f4:a2:
eb:d6:34:5d:5a:fe:bb:86:fa:e2:6c:68:2f:34:7a:
d3:82:fc:aa:0b:1c:8f:72:db:54:6d:f0:ef:2a:58:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:1F:5C:41:87:65:60:42:53:62:90:23:66:64:C9:A4:9B:CA:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e_EfXEGHZWBCU2KQI2ZkyaSbyjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:9b:35:ef:21:48:1d:73:aa:1b:80:64:aa:d6:bd:d0:a2:fa:
d7:9f:93:b6:da:cc:e4:e9:ca:88:99:ba:b3:1d:94:39:ad:e1:
c6:ae:56:aa:59:54:d8:c3:cd:23:f1:72:13:63:07:59:55:16:
ac:ae:bf:a7:2a:ff:b1:e8:58:86:8d:81:c3:25:f3:60:de:62:
8b:51:16:32:5f:26:7a:0f:3f:f0:b7:4a:a0:f8:0e:99:5e:9b:
78:d0:c9:56:f9:27:65:5b:20:18:6e:85:f9:26:d7:1c:cf:dc:
19:80:89:9d:ad:d3:31:1b:7b:1b:24:2c:b3:bc:85:98:2b:93:
1e:1f:d8:92:21:74:58:59:40:6a:7c:36:54:12:94:74:b0:86:
2a:1d:f8:28:88:7e:db:9c:88:ef:6c:11:d8:28:80:46:b0:27:
cd:24:81:5e:b7:f4:52:44:9a:65:03:d2:5d:93:05:41:f0:33:
96:1a:b5:e4:fb:11:d3:10:4d:c5:d6:57:b0:7c:16:e3:99:5a:
76:0f:ad:16:8b:e7:33:09:53:9a:da:62:e7:80:04:9a:13:1b:
4c:08:9e:f2:fa:db:45:c3:6a:dd:29:76:b4:aa:ef:57:91:35:
ab:ca:e3:9c:0d:26:86:d6:ce:ff:9b:31:dc:20:71:a1:cf:9b:
c7:aa:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:37 2025 by rpki-client