Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oruNHfVCB8EFSUe4UZqzTvTlZkw.roa
File: oruNHfVCB8EFSUe4UZqzTvTlZkw.roa (raw, json)
Hash identifier: olk5vVYrotI4S40jrJgMp7zgdKRzbcb3N8RBeHp3KUI=
Subject key identifier: A2:BB:8D:1D:F5:42:07:C1:05:49:47:B8:51:9A:B3:4E:F4:E5:66:4C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E71056E50E6AA03648A8B99DBACD7BC62
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oruNHfVCB8EFSUe4UZqzTvTlZkw.roa
Signing time: Sun 24 Mar 2024 15:12:45 +0000
ROA not before: Sun 24 Mar 2024 15:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:71:05:6e:50:e6:aa:03:64:8a:8b:99:db:ac:d7:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 15:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2bb8d1df54207c1054947b8519ab34ef4e5664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:63:8b:ff:d7:c7:19:40:cd:06:14:5a:fa:
57:58:e6:05:94:0d:20:bc:41:45:63:b8:e4:e6:f9:
f0:c0:94:46:6d:9c:8e:37:62:82:99:bf:7a:64:75:
17:9d:b3:9a:e0:2f:72:f9:7e:54:6a:56:68:02:7c:
9c:ce:3c:84:80:86:55:54:80:de:25:bf:3a:19:f8:
06:3d:9a:a1:47:15:47:19:56:69:69:2b:a9:89:e8:
9e:4e:68:0b:ec:15:44:67:33:32:f3:36:14:84:9f:
ed:f6:b5:4f:51:99:d0:f5:91:94:12:23:30:d8:1b:
2c:08:69:fd:c6:7d:49:28:ad:bb:b7:da:3e:37:55:
34:65:16:c0:98:f7:e7:e2:d3:e3:b9:d4:8d:3d:ca:
16:8f:a2:da:b5:f8:57:f6:f2:0d:23:97:bf:91:20:
b3:a2:3e:d8:e6:67:f6:87:65:e1:cb:d1:48:9d:da:
7f:70:cb:a7:c9:49:29:73:9a:d5:c5:fd:78:12:cd:
17:33:3b:13:78:06:a3:77:21:17:0f:05:7a:98:51:
28:2f:aa:bc:74:5e:6b:d0:7c:e7:00:24:25:b5:b3:
3f:54:ca:b0:16:2c:32:a2:10:fd:a2:f0:ac:f9:39:
0d:56:7a:3e:d8:6a:27:45:a8:1e:50:f6:33:4c:f9:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:8D:1D:F5:42:07:C1:05:49:47:B8:51:9A:B3:4E:F4:E5:66:4C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oruNHfVCB8EFSUe4UZqzTvTlZkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:46:78:10:59:8d:fc:86:e0:93:2e:47:11:ce:d2:b8:fc:67:
65:6b:a5:bb:cd:59:f8:29:20:db:f4:4a:29:4d:37:8d:a5:e4:
e4:15:a6:56:69:d5:a0:ca:0c:33:86:a6:d3:4f:93:6d:bb:ea:
fa:28:a7:98:5b:40:22:f5:87:19:e8:5a:cb:4a:e1:01:cc:fc:
39:27:48:79:57:1a:fc:fc:c0:41:c9:2b:e7:c7:79:60:c4:93:
8b:7d:44:b2:e6:ba:98:d6:40:12:c8:75:e3:25:95:61:a4:52:
71:3b:0d:97:ee:71:79:b1:3f:3f:c7:cd:45:10:ac:ba:4c:27:
78:02:22:8b:01:0f:90:19:ab:bb:11:a6:42:a9:6f:59:e8:a4:
b9:c2:bd:8e:5c:f7:0f:47:d9:86:ca:9a:16:03:6c:aa:d4:e4:
66:b8:3d:eb:70:5a:6c:b7:c0:b9:fc:c6:28:d9:f7:ed:38:94:
39:99:f3:85:92:4e:1c:59:96:fc:73:f7:de:87:e9:1d:3f:3a:
74:dc:43:12:67:ac:72:22:07:64:91:92:6b:6d:80:d5:8b:c4:
d7:65:cc:1c:c3:75:a2:33:35:62:b2:b2:f6:6b:44:46:df:f4:
2c:10:93:c7:22:ee:ec:78:a3:6d:c0:70:d0:27:8e:30:0a:03:
92:bf:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:05 2025 by rpki-client