Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u5S3-FX4QB0wimsOHIkucx8h6N8.roa
File: u5S3-FX4QB0wimsOHIkucx8h6N8.roa (raw, json)
Hash identifier: KgiGSYJ8Lna7YUwFniG7Fd++1L8g1VhT/1sFMO+L/1Y=
Subject key identifier: BB:94:B7:F8:55:F8:40:1D:30:8A:6B:0E:1C:89:2E:73:1F:21:E8:DF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA078A58D90E2B8A1263E329BF50A7350
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u5S3-FX4QB0wimsOHIkucx8h6N8.roa
Signing time: Tue 13 Feb 2024 03:17:57 +0000
ROA not before: Tue 13 Feb 2024 03:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a0:78:a5:8d:90:e2:b8:a1:26:3e:32:9b:f5:0a:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 03:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb94b7f855f8401d308a6b0e1c892e731f21e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:f8:3c:83:25:fb:28:54:98:14:f3:ef:d8:
3b:a4:8e:eb:1e:05:58:4d:5e:aa:bb:69:66:47:89:
7e:89:b3:17:00:2e:08:26:20:83:ed:05:f1:7f:c2:
e1:a0:2b:a5:35:17:51:5c:da:9c:67:0b:80:f9:80:
01:ed:95:87:bd:72:31:ba:dc:d5:4a:a2:70:f2:bf:
5f:03:69:6a:f7:06:0d:17:0a:fb:be:9e:ff:a9:1c:
0d:49:c8:fe:51:f5:43:35:dd:f0:36:38:3f:eb:a0:
df:d6:14:4f:2b:5e:d3:94:cf:78:96:1f:8b:5d:e6:
43:71:62:02:13:c9:b2:a1:36:d7:ae:1a:fe:a2:3d:
58:d4:aa:1d:91:10:5a:e2:43:7d:89:5f:fc:49:14:
7b:21:61:d7:2c:fd:db:31:e2:7f:c3:11:44:37:37:
17:fd:95:82:17:b3:3d:9a:d6:ae:18:72:18:48:ed:
91:82:6c:61:c1:2d:85:84:c8:2e:2b:a5:62:bd:4b:
ce:f2:c8:1d:87:9c:44:3b:8d:89:d0:a5:8f:e7:1f:
7d:a0:ea:6d:40:88:00:3d:ab:3f:cd:10:a4:13:72:
30:eb:3c:d4:b6:29:30:1a:f5:8d:92:e0:63:42:3c:
4c:7d:2c:76:23:ed:09:9e:fa:ac:d2:f6:27:c9:05:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:B7:F8:55:F8:40:1D:30:8A:6B:0E:1C:89:2E:73:1F:21:E8:DF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u5S3-FX4QB0wimsOHIkucx8h6N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:a0:9b:9b:de:26:f9:a8:ea:62:ac:9f:e9:81:28:f3:62:fb:
91:e0:b3:5f:85:91:e1:db:f9:fd:26:15:ff:d6:c6:1d:5b:f8:
1d:76:1f:f1:90:6d:5d:27:96:f7:86:2c:c3:45:a4:7c:ed:70:
5b:45:52:84:e4:d6:12:5c:e3:89:3e:de:4f:b2:94:85:f6:47:
c2:d1:15:bd:47:65:0f:58:89:0d:ae:38:d8:29:73:8c:aa:5d:
f2:75:7f:fd:4e:cd:3e:bf:9b:17:2a:00:72:6c:9f:25:46:6f:
fb:ec:51:d6:43:57:d9:5c:02:9f:c8:e4:ee:98:68:6d:37:6e:
e5:7e:f2:f1:43:e6:87:7d:5d:16:aa:dd:3e:ba:5f:ef:83:e1:
68:58:24:fe:e2:5c:2d:55:57:65:e4:da:d7:12:95:ae:5f:90:
86:6a:37:ee:69:c3:3b:13:cc:75:ad:75:b7:e3:82:90:0d:dd:
9f:b7:32:21:72:ee:67:df:3b:ff:04:d3:c8:da:1a:fe:66:a5:
54:ca:4e:c5:15:ba:11:52:85:4e:76:2d:f9:45:df:e0:5e:13:
86:52:25:19:7c:4c:9c:93:4e:3a:45:ba:85:ec:f1:3d:a7:ab:
20:d3:c3:ff:e1:0a:bb:31:ab:3b:2e:59:43:b9:f2:b6:fc:86:
f7:af:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:32:45 2025 by rpki-client