Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s60rfPlH7RcY6v_DPI_svWk-Ojg.roa
File: s60rfPlH7RcY6v_DPI_svWk-Ojg.roa (raw, json)
Hash identifier: IUZ7kggpIfc0OR4FLDmnpG4PnAwHqNGYKaAXdyGoqcA=
Subject key identifier: B3:AD:2B:7C:F9:47:ED:17:18:EA:FF:C3:3C:8F:EC:BD:69:3E:3A:38
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C92EA9CB30E5F59CACC9C698F4651C493
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s60rfPlH7RcY6v_DPI_svWk-Ojg.roa
Signing time: Fri 22 Dec 2023 19:04:58 +0000
ROA not before: Fri 22 Dec 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:92e9:f42c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:ea:9c:b3:0e:5f:59:ca:cc:9c:69:8f:46:51:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3ad2b7cf947ed1718eaffc33c8fecbd693e3a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:b1:4d:65:4b:3e:a7:be:59:18:5f:64:df:
2b:c5:d7:79:9b:87:fb:39:24:4b:6d:e2:3e:3e:7f:
68:61:ea:ab:54:6b:11:96:2c:65:0b:e2:5a:0f:fe:
8a:2c:d1:57:b1:42:fe:4c:a1:fe:3c:fb:3e:9a:f0:
e1:de:1e:53:b9:8b:eb:e9:2c:29:a1:84:16:25:0b:
0f:2e:d4:d1:74:59:33:ee:fd:96:46:b5:4b:58:8f:
b1:f5:80:33:46:c3:e3:5a:1e:d8:77:c0:d2:54:ec:
17:d8:87:ba:8d:16:e6:67:59:8c:ae:67:5d:4e:52:
4e:63:50:6b:14:b1:24:7c:89:ac:2e:28:08:57:c8:
e9:aa:a6:ab:f0:fb:fa:9a:71:a5:79:d8:6f:cb:93:
58:12:a5:23:b6:39:4a:d2:34:42:ee:36:f5:8d:f6:
d3:45:2a:a4:ae:ac:a9:b7:5b:11:24:85:43:b4:9b:
04:66:65:4d:b8:9c:33:5e:3e:b7:c6:d9:ff:7a:66:
48:c4:5d:45:97:3c:51:6a:0f:c6:a0:5e:2c:40:72:
3b:89:1b:24:2f:69:a1:7a:29:81:80:34:8f:94:f3:
72:c7:06:08:fb:4d:67:20:a8:08:e7:3f:02:5e:5c:
2e:df:af:d1:67:2d:3b:35:15:fa:d5:06:cc:01:54:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:2B:7C:F9:47:ED:17:18:EA:FF:C3:3C:8F:EC:BD:69:3E:3A:38
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/s60rfPlH7RcY6v_DPI_svWk-Ojg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:a4:68:d7:14:be:bb:d8:69:df:7c:f7:7e:0c:17:c4:a3:9a:
96:f3:4c:c5:cc:90:f9:e5:2d:fa:f2:b0:dd:9e:32:b4:21:0c:
1b:61:08:52:08:a0:80:9a:47:9e:1c:66:ba:3b:e0:b1:88:6e:
17:b6:68:1a:f6:b9:de:7d:0d:df:e7:04:28:3b:53:d0:38:ce:
63:de:ad:26:64:15:9d:a1:b6:3e:ac:90:2d:07:08:8f:c2:9d:
dc:d1:26:95:cd:16:77:b7:08:ee:53:6b:a2:25:f5:16:33:72:
1d:c9:20:65:10:01:15:7b:91:d7:ab:52:ca:b2:c9:bf:51:e8:
7c:c9:fa:33:7d:bc:cb:ee:d6:ed:66:2f:95:f1:61:e1:34:95:
40:b7:cc:cc:ad:0c:80:82:f5:cb:3e:05:18:c9:29:fe:a8:0b:
a1:88:e7:2c:42:b5:32:cd:5c:61:54:3b:1b:9a:7d:95:c9:71:
ef:17:19:f5:70:82:1c:90:cd:1a:1b:ab:75:70:86:91:4b:e5:
7f:96:47:5a:ed:75:85:63:00:73:12:02:2f:04:25:a0:50:c8:
69:ef:c7:d7:95:40:72:a0:66:3c:b7:1e:f1:0e:90:b6:cc:64:
51:20:d1:34:ba:1b:0d:37:8d:31:93:64:91:0c:67:72:3c:da:
bb:51:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:21:50 2025 by rpki-client