Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xGJLQDHdD3bsDWPvfo0Pyv04wik.roa
File: xGJLQDHdD3bsDWPvfo0Pyv04wik.roa (raw, json)
Hash identifier: VsavtPg/EktJcdUTHR0L93zaNB3jwe8uVx0mRuBDc2s=
Subject key identifier: C4:62:4B:40:31:DD:0F:76:EC:0D:63:EF:7E:8D:0F:CA:FD:38:C2:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE2F6E71F3E162126D359B54D37E271ED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xGJLQDHdD3bsDWPvfo0Pyv04wik.roa
Signing time: Mon 26 Feb 2024 01:10:48 +0000
ROA not before: Mon 26 Feb 2024 01:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:f6:e7:1f:3e:16:21:26:d3:59:b5:4d:37:e2:71:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 01:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4624b4031dd0f76ec0d63ef7e8d0fcafd38c229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:5d:7f:2b:cc:0e:c0:02:8d:89:68:5d:30:
df:7a:16:43:58:6c:ee:55:a4:5b:45:d1:5d:02:e7:
60:75:de:9a:b5:d0:1a:8a:91:30:b3:cb:66:65:db:
48:7e:d7:48:6a:12:16:35:0d:51:7f:83:5d:5f:f5:
04:50:8c:8a:ce:fb:05:67:c4:7c:b6:5e:8d:f3:ab:
25:50:23:59:25:bc:7d:c4:78:e3:bb:eb:83:25:0f:
44:94:fe:e6:d7:67:1d:ad:83:30:4f:bb:96:ed:45:
45:e5:a1:49:a9:82:db:0c:67:b7:96:7b:43:35:d4:
a1:ca:1e:82:c5:ea:62:fd:c2:35:35:30:e8:b9:03:
ec:d1:d1:5d:87:89:09:b4:0c:0e:02:a0:2c:11:93:
b5:5a:7a:cd:8a:b1:f2:23:34:f7:4b:2f:be:04:b1:
95:3c:fd:32:02:9c:bd:f5:0f:c5:4b:e3:98:3c:08:
1e:f8:c8:d1:6f:e2:30:08:e3:26:b3:1f:5d:ae:d1:
57:fc:a2:9b:13:64:a0:ca:ca:83:8d:17:08:63:e3:
d3:42:f7:ad:c1:a9:90:15:f4:51:1a:3b:6f:e4:98:
22:05:7a:f3:ee:ee:f0:77:83:fb:db:ea:12:e1:b7:
fd:dc:06:c2:2a:d1:12:8f:07:fe:bc:e2:8c:c5:92:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:4B:40:31:DD:0F:76:EC:0D:63:EF:7E:8D:0F:CA:FD:38:C2:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xGJLQDHdD3bsDWPvfo0Pyv04wik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:3e:02:d9:28:72:7f:7c:73:a7:c1:79:c2:14:96:66:66:09:
c0:9c:a9:7f:2b:32:cf:b8:ec:32:a1:2d:ec:ce:a9:d1:9f:b5:
50:5c:38:45:82:f8:7f:d7:f4:4f:42:de:a4:f4:e4:7c:2d:81:
44:cf:38:31:bc:f4:b3:35:cd:13:4d:46:a3:78:64:a4:4d:34:
42:05:43:2a:80:35:ca:5f:26:a9:8a:63:f3:d2:af:53:70:3e:
34:13:ed:7a:1d:7a:27:2f:41:af:db:14:a9:f4:e3:c2:4a:d2:
29:dc:3b:4a:0a:4c:c4:7f:d0:8b:19:2c:43:dc:44:f9:38:d8:
63:90:bc:ea:74:d8:8c:c8:ef:b6:97:c0:74:95:cf:9a:5b:b0:
4c:e9:92:95:6d:c6:98:09:c3:f2:c9:99:1d:1e:fb:e1:39:0d:
9d:ed:4d:3f:c6:f3:ff:35:39:06:5b:be:5a:db:5f:b4:e5:c4:
65:4c:de:12:cd:23:02:fa:78:dd:2e:b5:d1:d8:15:49:12:23:
48:b9:05:7a:ff:b6:8e:a1:db:fa:61:3e:c7:68:b6:1d:45:a4:
7b:37:fb:53:bd:57:e4:64:5d:38:1a:0d:90:2a:19:d4:42:7f:
e0:88:86:14:5f:d5:c3:8f:41:85:08:aa:61:60:49:38:ce:2c:
b1:60:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:22 2025 by rpki-client