Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fGJ_DqosJAzXrXIzkeB7PDX6y24.roa
File: fGJ_DqosJAzXrXIzkeB7PDX6y24.roa (raw, json)
Hash identifier: ZPPgfwT+krVtESMvdvMUnamqF+MGFCuZcj4IaGbC2Y4=
Subject key identifier: 7C:62:7F:0E:AA:2C:24:0C:D7:AD:72:33:91:E0:7B:3C:35:FA:CB:6E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E09629BBCE11BD928423FC966A979C89E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fGJ_DqosJAzXrXIzkeB7PDX6y24.roa
Signing time: Mon 04 Mar 2024 12:14:01 +0000
ROA not before: Mon 04 Mar 2024 12:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:62:9b:bc:e1:1b:d9:28:42:3f:c9:66:a9:79:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 12:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c627f0eaa2c240cd7ad723391e07b3c35facb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:27:6d:d3:75:d2:c6:6c:e3:6a:e3:d2:af:
d4:97:8a:0b:d1:e1:ff:4e:0c:e4:1a:32:08:b8:30:
46:c9:be:50:b0:b5:8a:97:26:65:40:7f:02:2e:17:
88:b2:0c:cb:8a:24:01:87:48:78:ba:6a:97:2a:7d:
47:fb:0c:29:47:c4:fe:da:ba:83:79:0a:47:50:8c:
30:3a:16:7c:9f:b5:f6:88:73:c4:0d:e3:ef:68:d6:
b8:2d:88:db:31:72:af:2f:88:3f:0f:0d:fe:04:41:
33:46:ac:9a:4e:f8:b1:11:12:74:bb:47:54:d0:d0:
12:96:d8:f1:8b:47:c7:27:f3:15:29:61:1e:ad:d8:
ab:d8:48:7e:c0:ba:cd:76:5c:c2:2b:5c:fd:44:25:
53:e0:87:91:26:27:a7:dc:a3:b5:d2:cb:a2:65:b5:
b2:32:54:f0:51:ec:a1:13:f4:ef:ba:a0:19:6c:93:
38:ad:04:3c:d9:47:93:91:ca:56:bf:cd:fb:82:5e:
b2:8a:24:c0:44:2f:41:96:d8:15:e2:a2:cb:8a:49:
4b:8f:ad:bf:0a:2c:bb:3b:9b:1a:3a:2b:72:69:a4:
ef:ce:e6:70:74:8d:b8:5a:36:fe:e1:fc:88:f8:99:
34:57:d4:20:60:20:cd:9c:86:4a:4b:ed:ed:26:d6:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:7F:0E:AA:2C:24:0C:D7:AD:72:33:91:E0:7B:3C:35:FA:CB:6E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fGJ_DqosJAzXrXIzkeB7PDX6y24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:f2:85:f6:d9:c0:08:c2:94:e2:e0:56:4f:c9:9a:35:fc:cf:
cc:b4:60:ad:27:a6:e5:3e:41:98:26:6c:5c:8a:20:69:f0:77:
a9:b4:ed:a1:e7:ab:af:35:1c:7f:78:64:80:7d:a8:7c:e6:9a:
5d:e7:66:f6:45:70:f3:78:f8:0e:98:39:80:d7:fe:92:80:d1:
f6:5e:1a:c5:7c:65:59:bf:63:ca:12:0a:47:f4:d6:ca:4c:55:
66:42:db:7a:91:d9:b3:fd:4a:d2:13:87:0c:c2:39:7c:25:75:
6b:7e:6e:7e:82:7d:7b:c1:a2:37:13:7b:6a:00:ca:fb:fa:c2:
74:25:dd:ec:03:62:39:e1:51:bc:77:dd:bb:5c:91:b4:4d:7d:
df:e3:13:83:c1:30:7e:ad:dd:84:3f:58:fd:42:a6:cc:ec:86:
e8:9a:14:5e:e5:a4:98:28:b4:47:d2:6d:fc:d9:e0:ce:d9:9e:
35:dc:27:72:16:b7:33:0a:1f:94:4b:89:bc:8a:0b:8e:24:95:
f8:ab:98:3a:fc:26:12:eb:cc:fb:6e:73:a6:77:a5:f3:57:64:
a0:10:fa:a4:32:11:d4:c2:a3:02:65:80:d2:da:a9:cc:c6:1c:
55:e8:d3:fd:57:16:ed:e6:75:94:de:e0:07:66:02:b6:00:6a:
87:ab:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:22 2025 by rpki-client