Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l6Y9_0LNqNg3K1dmDzKB91QUOr8.roa
File: l6Y9_0LNqNg3K1dmDzKB91QUOr8.roa (raw, json)
Hash identifier: D3QFyTw4I2/mDVGANASgiI7AC5oO6+pJwv6qko9I4lA=
Subject key identifier: 97:A6:3D:FF:42:CD:A8:D8:37:2B:57:66:0F:32:81:F7:54:14:3A:BF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB46A5B40EF5412AB5563C1A6A52BE9B6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l6Y9_0LNqNg3K1dmDzKB91QUOr8.roa
Signing time: Fri 29 Dec 2023 07:11:58 +0000
ROA not before: Fri 29 Dec 2023 07:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:6a:5b:40:ef:54:12:ab:55:63:c1:a6:a5:2b:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 07:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a63dff42cda8d8372b57660f3281f754143abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:f7:d3:95:da:ae:66:3b:6f:18:21:b8:31:
0b:96:23:02:d9:2f:5f:86:86:e2:4f:12:f8:0a:1c:
93:6c:ca:55:39:67:f4:ff:29:e8:24:d3:8a:58:b1:
d2:cd:b7:f5:86:49:1e:ed:27:2b:05:2b:f5:c5:0c:
61:90:c1:92:14:e6:be:33:0e:6e:7b:83:65:6f:5f:
84:e7:28:bd:c8:ac:4f:8a:44:0a:5c:26:f7:88:88:
e3:e6:50:7f:5f:3f:75:6a:58:be:5d:d0:16:40:fc:
8c:33:1f:61:90:e7:35:ef:cf:08:ea:43:8c:04:e0:
47:68:31:d0:55:82:f0:1c:83:d7:5b:03:95:0a:06:
2a:c3:6a:78:25:81:0d:44:b9:81:15:1e:77:f7:03:
bb:be:eb:3a:4f:5c:8c:73:ae:77:17:51:3f:b2:82:
ed:71:76:03:00:7e:cd:0e:66:17:48:1c:cb:c7:03:
c8:ed:97:d6:73:d6:13:e7:8c:e0:2a:be:8b:73:7c:
57:c9:24:62:b3:b8:69:1f:7a:5e:a8:e4:17:6c:9f:
2f:37:01:f9:59:81:ec:fb:55:d5:6f:43:ea:df:16:
1c:d6:d8:27:37:00:82:3c:4c:d3:8c:55:2e:8c:25:
c5:65:ed:d7:6c:1f:7c:a7:32:66:44:c7:0d:1e:12:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:3D:FF:42:CD:A8:D8:37:2B:57:66:0F:32:81:F7:54:14:3A:BF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l6Y9_0LNqNg3K1dmDzKB91QUOr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:c5:16:5b:ef:de:9d:79:6b:22:31:cb:d0:65:65:a5:26:26:
2e:23:ae:63:51:5a:fe:53:1f:95:99:ef:74:83:63:6f:3a:b8:
7a:dd:02:f5:7a:7a:21:dc:82:17:ef:a6:fd:3f:02:00:99:62:
3b:3c:a0:20:98:c4:1a:c7:44:a1:6c:0e:44:2d:31:e9:db:44:
e2:df:2d:6a:e5:16:90:b5:78:d3:98:5b:6b:3a:f6:a9:26:6b:
f2:a6:67:a9:c6:d9:31:11:af:41:2f:3e:6c:75:ef:a4:c0:9b:
3f:a6:91:bf:6b:81:b8:7b:19:cf:a0:c9:50:95:49:26:e6:d9:
8c:32:0d:02:a3:c8:23:f6:da:2f:72:c5:f7:0a:da:d1:cd:e3:
f5:f6:75:a3:c0:64:62:a5:1c:b3:c3:dc:8b:65:b3:8a:7e:2c:
b2:98:91:17:fb:e3:f4:9f:19:15:fc:6b:df:6d:cd:5c:4f:76:
e3:96:39:24:62:7e:fb:ac:e2:b5:a0:99:66:e0:eb:43:ac:88:
3d:0b:4d:a5:5b:73:ef:64:b9:fb:05:1d:ee:1f:c9:b6:31:2e:
5c:59:a3:75:82:ce:ae:9b:24:c7:4b:93:8f:69:dd:56:e3:2f:
58:70:37:5c:e8:0c:c3:dd:6d:61:19:60:17:e8:7a:fa:9d:f8:
86:ec:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:46 2025 by rpki-client