Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y3FA0LtA0aE-4OTLk1ESUMjXql8.roa
File: y3FA0LtA0aE-4OTLk1ESUMjXql8.roa (raw, json)
Hash identifier: 7SNB/nZ3jhmDfgWyPCxLz9JfiWbb2Y2vikfibY9LDNc=
Subject key identifier: CB:71:40:D0:BB:40:D1:A1:3E:E0:E4:CB:93:51:12:50:C8:D7:AA:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF3B0836D606EFFDB8685782E94EFC64B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y3FA0LtA0aE-4OTLk1ESUMjXql8.roa
Signing time: Wed 10 Jan 2024 14:04:40 +0000
ROA not before: Wed 10 Jan 2024 14:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:f3b0:4539/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:b0:83:6d:60:6e:ff:db:86:85:78:2e:94:ef:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 14:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb7140d0bb40d1a13ee0e4cb93511250c8d7aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:c7:8c:ab:5d:c6:e5:dc:9b:98:19:46:b9:
72:b0:7a:b6:a4:8c:a9:9e:9d:ed:2e:2a:45:57:1b:
da:03:07:ea:1a:6b:88:d9:14:16:65:97:0f:cb:00:
b2:84:0a:f3:3a:07:94:e8:fd:1d:0c:9e:ec:3f:29:
d5:2e:2d:a3:57:ff:1d:2f:3e:a2:a0:36:ff:43:a6:
28:d3:85:ed:01:49:38:cf:84:3f:a5:9f:ac:43:3a:
be:d0:86:b6:23:1a:0b:77:fc:10:3e:cc:7f:c9:a0:
45:28:d8:ab:dd:32:7a:a1:1f:c0:53:8e:d1:a6:37:
6b:4a:6e:c8:a2:1a:21:52:dc:b8:2c:ff:4b:71:8f:
3b:17:48:c3:19:a2:30:cf:f0:d6:e2:e1:fc:53:98:
b5:23:93:7d:75:3b:0f:9e:4f:a4:99:29:bb:1c:f4:
d8:42:15:6d:b2:68:cf:a5:ed:09:2a:9f:a8:74:bc:
22:09:7e:d6:ad:1a:c2:fb:71:c7:e6:ac:8a:0b:fc:
3c:e7:15:bb:7b:39:6b:69:22:e7:6c:8a:ed:32:ab:
5f:63:0d:73:f1:9b:37:4d:b4:b8:a2:db:50:50:b1:
f5:74:a3:f9:6e:e9:76:be:62:e4:bc:91:a6:72:b7:
46:42:a4:34:48:4d:60:7a:a4:61:b9:ec:ce:37:68:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:40:D0:BB:40:D1:A1:3E:E0:E4:CB:93:51:12:50:C8:D7:AA:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y3FA0LtA0aE-4OTLk1ESUMjXql8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:ae:1f:20:7c:c8:5c:e6:65:32:7e:ee:b1:ac:22:ad:c7:c1:
ef:be:9e:b4:fb:20:a7:25:23:4f:fa:22:f3:74:56:66:55:6f:
d0:e3:b2:df:6b:5c:b0:5d:5c:c3:ca:75:29:ad:16:f1:8b:0d:
a1:2d:ea:bb:9e:ec:76:ed:62:07:62:a0:ec:cc:c0:c6:0d:db:
98:0c:02:28:80:37:02:12:ca:60:40:37:e8:a7:38:c4:08:d4:
3c:de:8c:3d:2f:b5:d7:0d:57:cb:24:f9:6f:0a:0f:d3:76:7b:
1a:d2:0f:0a:4c:78:73:73:4e:24:c9:17:32:01:60:73:1b:2d:
37:44:4c:b8:51:c8:e5:ba:3b:0b:8a:17:a9:31:a4:df:86:cc:
d7:4a:5e:a1:36:8f:81:40:48:09:69:08:21:b2:e3:b1:c7:b3:
69:65:b6:a2:2a:40:73:6e:ab:cc:ab:0d:3c:7b:2b:3b:87:64:
fd:18:eb:10:27:ab:9d:23:28:e6:72:2e:6a:28:1a:17:7d:cd:
71:e2:e3:48:aa:d7:e7:8d:fe:f2:cd:7c:aa:7e:c8:05:85:fb:
15:25:ff:c4:78:e0:1c:31:8f:2b:79:85:e5:b0:5f:8b:b0:d8:
ad:fb:32:d5:c5:43:ee:f9:45:6d:ac:99:ba:7f:2f:60:40:06:
20:be:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:36 2025 by rpki-client