Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/te7mE71GK3fdGOMwuJWp2oN7R7o.roa
File: te7mE71GK3fdGOMwuJWp2oN7R7o.roa (raw, json)
Hash identifier: NWgGFSZBtVs3yjvdPeG1fMbHJewDVVrhgn0A+YvjzSY=
Subject key identifier: B5:EE:E6:13:BD:46:2B:77:DD:18:E3:30:B8:95:A9:DA:83:7B:47:BA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9847E7672B111E8AF857641C9D4A7B54
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/te7mE71GK3fdGOMwuJWp2oN7R7o.roa
Signing time: Sat 23 Dec 2023 20:04:58 +0000
ROA not before: Sat 23 Dec 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9847:4af2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:47:e7:67:2b:11:1e:8a:f8:57:64:1c:9d:4a:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5eee613bd462b77dd18e330b895a9da837b47ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:f8:ad:e8:f6:30:f0:77:7a:7a:7c:cd:f9:
cf:30:b8:03:19:13:36:df:15:20:e0:4a:f8:a0:6f:
75:b1:86:64:83:3a:f5:47:e2:bf:ca:66:9d:59:b7:
73:3c:2b:ec:23:33:25:51:e9:01:f8:9e:cd:50:ae:
c6:a1:b8:f2:6b:dd:12:09:d5:7b:f5:2a:ea:e5:4c:
b5:b6:5e:c3:5f:ba:e6:db:72:f7:85:d8:6d:0a:cd:
21:48:1d:ba:9b:40:6a:63:ce:70:94:68:80:50:ed:
21:ad:09:b7:80:5e:28:0f:c1:1c:21:32:ce:9a:19:
c9:7c:d8:bc:dd:8d:cb:7a:80:82:d5:f4:3c:31:38:
d4:bd:00:22:99:f7:52:18:0c:52:99:19:1a:56:07:
13:4b:d1:d7:46:41:b2:33:d5:58:cd:ee:7e:78:d7:
2d:fc:37:c4:8f:01:4b:00:fc:c0:df:cd:b2:90:99:
62:29:00:4f:75:4c:15:7c:dd:91:01:9e:f2:46:b6:
64:21:ec:ea:67:e1:5d:54:a5:b5:e6:ee:2e:a5:17:
9a:73:5a:26:6e:41:a5:21:17:5d:b3:82:f7:cd:43:
ab:29:bd:ed:d0:2f:7c:60:62:4b:70:27:28:a7:56:
ed:25:cd:96:32:92:07:83:58:f1:f2:9b:0a:4c:b5:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:E6:13:BD:46:2B:77:DD:18:E3:30:B8:95:A9:DA:83:7B:47:BA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/te7mE71GK3fdGOMwuJWp2oN7R7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:90:ff:94:88:b4:3b:0a:c7:d0:ea:8b:72:a0:79:4e:a4:b1:
88:20:9e:35:5f:f2:0e:96:db:b1:f1:ce:31:89:79:9c:7c:92:
23:b2:b4:d4:15:2d:5b:2a:27:10:e3:3e:5b:a5:00:67:ee:7c:
48:bc:cd:db:76:6a:ab:76:9e:e8:89:79:81:47:34:2c:82:8c:
a3:89:9a:76:4c:03:50:d3:6a:64:10:d8:0f:ab:1e:d7:ee:c4:
59:46:43:1f:23:0f:95:ec:24:ce:01:46:ef:1f:4a:5b:a2:d4:
2b:5a:29:66:70:5b:6b:1f:2f:05:c5:8e:c6:a0:4a:ce:e6:be:
db:7f:dc:63:98:44:cf:bd:a4:96:ca:56:57:c1:58:e4:a0:5e:
e5:88:ff:33:a4:b2:a9:3a:4f:7e:03:58:e1:89:48:e4:d8:58:
eb:57:27:d2:3a:9e:63:b8:f0:5e:31:0a:33:b2:59:43:49:d0:
c5:58:da:82:4d:ab:6d:d4:0c:7f:a7:22:28:36:f6:b1:79:9d:
c6:60:aa:fd:bd:57:24:3e:11:13:26:77:2a:e5:cc:17:c5:53:
b0:e8:69:78:5b:7a:23:8e:a6:4d:e8:61:03:f1:59:21:9a:30:
58:15:48:4d:cf:5e:fa:60:d2:0a:c4:b9:70:32:2d:25:6d:0a:
6e:b1:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:51:45 2025 by rpki-client