Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uazMfznvPGn3L5-yizTt5hL0yOs.roa
File: uazMfznvPGn3L5-yizTt5hL0yOs.roa (raw, json)
Hash identifier: ljTonlwdvNTU7nzq1ampRh4tzat07DyjQQ2+J0eE68Y=
Subject key identifier: B9:AC:CC:7F:39:EF:3C:69:F7:2F:9F:B2:8B:34:ED:E6:12:F4:C8:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9CCC6647A894F2D08336B9E2FFD7BB42
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uazMfznvPGn3L5-yizTt5hL0yOs.roa
Signing time: Tue 02 Apr 2024 03:13:44 +0000
ROA not before: Tue 02 Apr 2024 03:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:cc:66:47:a8:94:f2:d0:83:36:b9:e2:ff:d7:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 03:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9accc7f39ef3c69f72f9fb28b34ede612f4c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:2c:9a:89:3c:87:d0:3c:fe:46:cb:ec:0d:
7a:59:61:b3:3e:ee:fd:86:bb:86:31:ac:73:0b:9c:
69:5e:88:68:36:fd:a8:45:9b:bc:33:d8:ef:83:92:
17:da:df:b4:11:a1:78:bc:83:4a:2d:02:f1:bc:b4:
c0:96:39:a1:8b:04:69:fe:8f:20:67:b7:36:da:08:
89:e2:b3:5d:34:f9:0f:f2:9f:f8:1f:09:7a:e3:56:
c6:85:34:9f:3c:60:5b:e9:63:58:de:3b:47:8c:59:
2e:7e:67:4f:45:b9:3d:98:4a:28:4d:2c:6d:b3:f6:
cc:cb:ca:47:36:17:e2:d8:dd:bf:b0:ac:24:db:ca:
2b:22:cd:a7:df:2c:6e:1b:f1:6e:e1:5b:7e:47:d2:
b6:5b:8c:20:37:df:4c:3e:8b:b1:ff:9e:b5:6a:7a:
60:7f:29:c3:b2:fe:1c:da:61:ed:17:d5:29:38:92:
c5:a3:47:5d:23:b6:36:82:f7:38:17:14:4e:dd:c4:
a2:8d:1a:90:99:97:e2:bc:2d:27:76:a7:fa:30:1f:
57:b9:26:b8:73:a3:ce:b2:03:bd:c6:db:23:81:b8:
69:15:c8:21:82:f9:52:c1:78:ec:0a:7f:6c:eb:36:
ee:0c:73:be:fb:40:84:2b:7f:50:27:d8:c8:83:e3:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:CC:7F:39:EF:3C:69:F7:2F:9F:B2:8B:34:ED:E6:12:F4:C8:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uazMfznvPGn3L5-yizTt5hL0yOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5a:ed:cd:65:66:11:c0:e7:d5:93:9e:4d:b1:ad:f1:91:74:
2c:26:de:9b:50:2d:5f:40:4f:62:9f:65:76:8c:fe:33:32:e7:
ec:d5:24:36:5a:b6:57:65:ee:5d:f4:99:d8:1e:54:ba:b9:e6:
23:ba:7a:81:87:4e:32:5c:22:33:bd:75:b5:42:f9:bf:2c:d5:
12:87:b2:50:c4:2d:bf:66:3e:d5:b7:9d:c9:92:6e:84:ba:e8:
bd:97:68:f7:d7:7b:52:40:ca:71:d3:51:0e:5d:41:b0:31:91:
a3:14:8a:11:3b:a7:ad:66:74:22:d7:46:c0:08:e9:5b:0c:a6:
c4:ee:24:e1:8b:94:da:d0:7c:f4:d5:3f:01:4b:0a:45:5f:95:
88:cc:90:20:71:ab:33:22:f9:b2:bb:ca:cd:63:9b:4f:88:4c:
c6:b7:dc:3d:90:9e:a8:07:93:4b:09:4a:66:c3:89:fd:e3:55:
80:d3:ef:c3:ce:33:97:d6:3e:ed:8d:6a:c3:26:85:d5:56:81:
00:07:25:39:aa:3f:4e:9d:35:29:f2:fc:1a:1b:e2:ed:9d:3c:
27:c1:6e:f1:b4:e7:41:08:cf:54:3a:f8:a4:9b:08:dd:a3:bb:
f5:45:02:a7:14:c5:8a:ad:a5:68:55:71:0d:ab:ca:d2:7f:74:
69:d8:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:42 2025 by rpki-client