Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sKvTFgCw3dfvgxslQe_TkHKSNuY.roa
File: sKvTFgCw3dfvgxslQe_TkHKSNuY.roa (raw, json)
Hash identifier: PUA7XP6TnQMcRx/gp3tg8AW2TrqFA99x34ogW7yO8As=
Subject key identifier: B0:AB:D3:16:00:B0:DD:D7:EF:83:1B:25:41:EF:D3:90:72:92:36:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6F510172E043E9E53AD5DE6D0B29AA74
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sKvTFgCw3dfvgxslQe_TkHKSNuY.roa
Signing time: Sat 03 Feb 2024 14:13:16 +0000
ROA not before: Sat 03 Feb 2024 14:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6f:51:01:72:e0:43:e9:e5:3a:d5:de:6d:0b:29:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 14:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0abd31600b0ddd7ef831b2541efd390729236e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:05:ac:b9:08:41:ab:55:c9:f9:dc:13:50:
96:a3:cc:0b:e0:9a:04:db:94:45:c8:21:f9:6c:88:
19:3e:4e:32:94:c5:d2:60:95:b1:bb:8b:8d:4f:f8:
51:19:81:15:9b:8a:3a:a6:9b:11:65:35:2f:a1:8d:
7a:92:74:b9:58:11:0f:ea:1f:06:7f:8d:5b:2c:10:
6a:1c:49:ad:0c:21:bd:73:e9:78:6f:ef:04:4f:52:
ee:ca:07:b4:05:7d:4e:9a:79:b3:4f:66:73:31:6e:
74:4e:f5:4a:2d:ae:77:07:0c:e2:5d:85:8b:ec:22:
2b:38:31:4c:0c:cb:55:2d:08:64:d0:6b:44:2c:3d:
82:40:5b:ad:de:b8:61:0f:79:2d:c0:0a:0c:32:9c:
84:14:84:5e:38:b2:24:30:90:87:e5:c6:37:ab:eb:
c6:59:28:b3:98:ec:7a:3a:98:e9:ff:3c:e5:88:24:
02:d8:3b:23:64:e7:01:6a:3a:9f:36:c0:d4:a3:5a:
b8:41:22:66:42:04:b0:97:27:ff:c7:a6:25:5a:df:
60:a7:a8:90:5b:c4:7f:85:38:c3:05:fa:88:99:62:
22:f5:2f:75:89:de:88:08:a1:59:d0:91:a9:33:28:
f1:52:a5:8e:4b:03:f3:b6:6b:e9:d0:b8:0e:bd:18:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:D3:16:00:B0:DD:D7:EF:83:1B:25:41:EF:D3:90:72:92:36:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sKvTFgCw3dfvgxslQe_TkHKSNuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:b0:fd:96:5a:2b:69:c0:d7:8f:04:c2:ca:dd:07:4a:99:9b:
2b:bb:75:8d:57:70:96:00:33:93:30:d0:5f:14:67:de:6b:85:
0b:8d:32:bd:ff:9a:4e:4c:f4:3d:1a:cc:6e:b1:68:51:a9:77:
95:4c:dc:33:00:59:08:b6:6e:34:f4:57:2f:fb:52:db:30:94:
0a:d7:f1:e0:8e:53:71:35:f1:30:f2:bb:3f:f6:2d:70:d7:f9:
9a:38:a8:65:b5:48:84:f2:bd:58:a3:1c:63:cb:f9:35:7a:8e:
c5:7b:1f:1a:67:9f:92:a0:ce:00:00:ac:f6:89:b2:93:43:95:
8f:ff:54:45:c2:62:00:96:5c:d9:66:af:63:96:eb:42:e8:6c:
e2:38:f5:03:b7:61:10:d3:de:aa:01:e7:49:e0:fa:6d:75:4f:
87:11:5b:ed:38:a4:2e:d0:de:0e:66:94:d4:5b:fd:16:61:a8:
83:40:bf:ce:5b:a2:0d:d2:5a:1f:c6:9c:af:e1:a0:39:6c:62:
54:76:77:42:ef:2c:9a:a0:fc:89:31:fa:db:6f:83:8d:f3:00:
96:a9:14:15:23:f8:5e:6d:85:f2:75:c5:07:0b:62:0b:8c:c1:
6d:f8:9c:7a:89:61:4d:11:75:a5:16:27:37:54:f6:82:a3:29:
b9:d7:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:26 2025 by rpki-client