Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g0jxhsLTb-P2Kg-noAdMsJm2z5g.roa
File: g0jxhsLTb-P2Kg-noAdMsJm2z5g.roa (raw, json)
Hash identifier: s6X7KLPiTymvu933ZQbMFVHh4MJXoZddRr/BNjL5sqg=
Subject key identifier: 83:48:F1:86:C2:D3:6F:E3:F6:2A:0F:A7:A0:07:4C:B0:99:B6:CF:98
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E58FA57B371209816CFEE6603B090FFDA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g0jxhsLTb-P2Kg-noAdMsJm2z5g.roa
Signing time: Tue 19 Mar 2024 23:09:44 +0000
ROA not before: Tue 19 Mar 2024 23:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:fa:57:b3:71:20:98:16:cf:ee:66:03:b0:90:ff:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 23:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8348f186c2d36fe3f62a0fa7a0074cb099b6cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:7f:f8:e3:26:e6:5c:39:8a:8a:b1:a8:82:
ab:24:7c:f1:a3:26:96:6b:af:26:e3:13:b9:25:8b:
04:c4:76:66:3e:ff:66:61:9f:4a:fb:0d:17:74:fe:
86:f6:a3:9d:dd:e1:20:59:7d:5c:60:21:1b:fb:ef:
66:b0:68:34:c1:f7:e8:8c:1e:81:ac:f8:6f:7f:af:
f4:27:aa:a9:76:41:05:67:75:ee:3d:36:a8:d1:7f:
27:ec:61:d9:79:84:98:2a:d9:f8:eb:5c:f8:bd:d6:
77:ef:84:2b:48:35:14:cf:c4:21:89:f8:4f:b2:ff:
53:e2:a5:09:40:43:4c:d0:49:e4:39:3a:6e:4d:94:
9a:92:85:52:94:2e:21:66:49:46:f7:b7:e1:87:12:
47:a2:76:cf:82:64:e9:ff:e6:5d:06:ce:c3:e8:d9:
77:6e:44:f4:fb:42:ef:50:c6:59:2c:6a:35:a5:b2:
a4:a2:54:85:f5:a5:47:03:71:01:2a:24:d9:7b:7e:
6a:91:c3:60:97:49:05:74:1f:56:17:49:99:c7:e6:
3b:1a:76:2e:52:1a:a8:75:10:2c:c0:62:3f:e5:f4:
3a:fa:20:eb:9f:93:0f:74:df:78:d9:47:4d:de:3c:
21:17:6a:33:28:86:64:15:f5:3c:6b:89:d3:98:ad:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:F1:86:C2:D3:6F:E3:F6:2A:0F:A7:A0:07:4C:B0:99:B6:CF:98
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g0jxhsLTb-P2Kg-noAdMsJm2z5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4c:86:a1:d1:cc:ed:c8:7b:02:1b:b5:b3:20:c5:b1:41:89:
a3:9b:e3:0b:8c:d5:0e:1c:a7:8c:47:4f:08:35:30:24:b4:26:
d9:58:b8:a1:70:a6:ab:e5:e5:96:14:a0:ae:7d:ce:ab:f4:51:
3f:bf:23:5a:a3:c4:3c:d4:7f:63:59:19:d7:12:94:c8:84:81:
55:4a:4e:74:65:bf:f6:50:b0:a1:1e:d8:f8:01:8b:fd:0b:1f:
f9:f7:19:9b:ff:55:70:b1:3c:1d:10:9e:95:62:32:dd:10:31:
6e:b4:b6:e0:40:c6:eb:7f:b4:87:65:b5:1c:24:05:16:7f:25:
b5:83:f8:f5:f7:29:74:10:39:3f:0c:b1:ce:9d:8d:de:c4:a3:
fe:ab:7f:b9:a4:7a:f7:2b:3f:0b:24:7b:ba:86:8f:d9:5c:46:
a4:39:b9:b2:3d:28:2e:c8:3f:c4:f3:18:b1:b0:4b:84:08:d6:
61:01:70:ba:ab:c5:95:ec:cf:17:0b:e0:5d:a6:bb:28:f0:88:
46:0c:8b:48:09:87:1a:32:3c:50:4e:f6:04:a5:b1:f9:82:3b:
1e:d8:b1:e6:45:e1:d1:4d:a3:15:9f:a0:cd:bc:21:98:bd:a7:
30:7b:25:02:dd:12:b3:5d:a3:d3:1a:0c:66:de:ac:cd:15:9f:
c4:dd:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:27 2025 by rpki-client