Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vja3OBBB2MJVr-HKlAuCNaAlnSU.roa
File: vja3OBBB2MJVr-HKlAuCNaAlnSU.roa (raw, json)
Hash identifier: YDtn3fLhbboaOhguPEJN7YDlksHohTPHXgbP20aJ6qE=
Subject key identifier: BE:36:B7:38:10:41:D8:C2:55:AF:E1:CA:94:0B:82:35:A0:25:9D:25
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD94FE63B25312A44353F2E0F78650D3F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vja3OBBB2MJVr-HKlAuCNaAlnSU.roa
Signing time: Sat 24 Feb 2024 04:11:48 +0000
ROA not before: Sat 24 Feb 2024 04:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d9:4f:e6:3b:25:31:2a:44:35:3f:2e:0f:78:65:0d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 04:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be36b7381041d8c255afe1ca940b8235a0259d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:89:ce:2e:0e:29:7f:87:75:ff:10:5b:03:
4c:c7:8f:c5:d2:24:ea:ff:df:4f:4a:7c:e3:46:94:
00:42:fc:70:d2:e4:70:96:ae:8a:8f:c4:48:bd:a3:
85:9c:fb:d4:37:d4:52:1a:cf:04:e8:f9:ce:e8:79:
f2:ba:86:44:24:bc:58:7c:46:ac:4f:53:2e:55:c9:
9a:f7:09:d2:f4:7e:06:9d:11:80:e4:d1:38:e7:b9:
ea:85:89:e6:de:55:1f:7e:f7:ad:6d:3d:a7:44:57:
46:54:34:e9:59:b8:65:f2:65:e7:93:d1:76:37:67:
19:d1:7d:21:42:b8:ce:4a:a3:65:92:2e:0a:b8:8a:
17:1c:84:4d:35:9e:64:1c:45:b1:ac:43:fe:1e:9f:
b0:30:df:14:b9:49:14:db:cc:51:54:0e:d5:89:ab:
f3:67:b5:0c:d4:61:fc:09:68:e8:a6:c8:8b:4d:08:
41:c3:0d:5f:95:73:fe:77:31:b6:f6:fb:5f:24:d6:
c0:80:16:75:cf:e2:9e:3e:6f:38:b4:db:d2:14:74:
7d:9d:0a:cc:1e:24:5a:e8:1d:bc:01:61:2a:01:bd:
bf:c3:34:05:7b:e1:fe:25:a3:fd:90:5b:08:6d:54:
fc:ee:0a:c5:fc:7e:96:1e:bd:db:8d:9f:52:6f:5c:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:B7:38:10:41:D8:C2:55:AF:E1:CA:94:0B:82:35:A0:25:9D:25
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vja3OBBB2MJVr-HKlAuCNaAlnSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:0a:47:84:9e:c6:31:85:97:6c:04:eb:9e:69:94:3f:99:9c:
08:9b:b2:3e:87:af:12:c3:7f:59:09:07:6c:84:65:3f:0e:1c:
73:38:d4:67:50:34:3e:42:ed:56:13:b2:6e:e3:7d:ad:f8:9a:
9c:41:bf:ab:78:ab:2f:c2:47:d8:66:fc:3b:82:bc:ce:ed:0d:
9a:50:5e:11:01:c7:d6:56:6b:84:ff:18:15:7c:a8:a4:59:2a:
da:04:b0:0a:c5:0b:95:b1:58:8d:3a:ed:fa:00:d2:7d:44:ac:
88:18:ba:12:5c:c1:f2:e2:97:cc:db:96:aa:c1:1c:51:e1:8c:
d0:5e:0f:9a:9f:83:f0:2f:d6:15:53:68:ec:cf:43:91:0c:77:
99:9a:09:58:83:3a:0c:09:70:f6:55:af:35:08:7a:a8:b5:b3:
b5:fc:dd:80:56:3e:0e:21:c3:f9:98:4f:7d:7e:84:df:ff:1e:
bf:6a:92:1c:78:33:9f:3e:50:5a:d2:b7:4a:e7:9b:76:9f:42:
33:b3:cd:e3:35:67:fc:82:bb:f2:9d:69:00:58:78:27:4e:bf:
c6:e6:a9:86:32:53:79:0b:ef:22:7d:ab:28:64:14:79:36:6c:
73:f0:87:89:e7:06:80:2c:74:18:10:62:f4:a0:d5:09:1c:30:
10:eb:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:11 2025 by rpki-client