Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-a3qHm6YN4nr1S4FTcCXntVkatQ.roa
File: 1-a3qHm6YN4nr1S4FTcCXntVkatQ.roa (raw, json)
Hash identifier: j4xA3ghwqL4GPSytL6LLM6d7i6hJpI6fFPiBq4pDvPY=
Subject key identifier: F9:AD:EA:1E:6E:98:37:89:EB:D5:2E:05:4D:C0:97:9E:D5:64:6A:D4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5D4945FBAE5CE059F08570140AE0C192
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-a3qHm6YN4nr1S4FTcCXntVkatQ.roa
Signing time: Wed 31 Jan 2024 02:11:39 +0000
ROA not before: Wed 31 Jan 2024 02:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:49:45:fb:ae:5c:e0:59:f0:85:70:14:0a:e0:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 02:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9adea1e6e983789ebd52e054dc0979ed5646ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:27:50:53:bd:f9:a2:c0:c2:09:7a:91:92:
63:a4:7b:3e:58:ff:9e:ca:8d:8d:be:d6:66:2b:f7:
40:14:89:cd:85:f7:4b:cd:9a:c5:32:3a:79:b4:dc:
60:db:a7:78:c9:58:7d:60:9f:67:97:76:07:c3:08:
6d:7e:c7:28:9b:17:be:cc:54:4e:cc:bc:a5:73:70:
3d:11:8c:bb:e2:0b:b0:13:4e:01:7b:ff:3a:18:82:
7d:4a:8d:65:9d:eb:81:75:93:3b:fc:e5:03:98:83:
d6:38:d4:f8:a1:8d:23:b4:5f:89:8a:78:41:06:ce:
77:5b:f8:a0:56:14:e5:f5:58:47:6b:97:57:bc:58:
99:ac:e1:94:da:57:38:a9:9d:4b:17:31:9c:03:67:
6c:53:33:6a:b7:fc:dd:4a:8a:ef:81:f7:82:9f:2b:
51:76:87:21:a4:06:8e:c9:31:b2:8e:b1:18:11:9d:
c7:1c:f5:30:f9:bf:1c:f6:2f:3f:89:3b:7f:a2:31:
b9:d0:bd:22:6d:f8:99:3d:71:f5:db:06:66:f4:65:
3a:ac:5a:5a:00:5d:91:7a:5f:fd:13:17:4f:78:08:
ae:5f:66:6b:af:70:b8:7b:e6:ef:22:47:38:14:cb:
0e:88:31:98:af:27:94:2e:34:d9:4c:73:1f:38:3c:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:EA:1E:6E:98:37:89:EB:D5:2E:05:4D:C0:97:9E:D5:64:6A:D4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-a3qHm6YN4nr1S4FTcCXntVkatQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:78:eb:73:6c:78:06:1f:d0:4a:6b:a2:52:f4:2d:2e:3e:34:
57:d8:30:f6:a7:b5:a4:34:28:02:c1:78:56:9c:b9:4c:1a:23:
9c:be:6f:81:ed:cc:3e:71:9f:36:0d:81:f3:56:d5:ac:0f:8c:
cc:ed:1c:ed:1f:d5:0a:50:2d:b8:21:33:bc:5e:d1:4a:b7:43:
f5:f7:dc:92:4d:7a:22:a4:d3:9d:08:e3:d6:dc:0a:af:40:bc:
4c:08:23:77:93:78:b9:84:54:d3:ea:8d:db:1d:29:a2:23:49:
2c:b5:db:cc:c4:f6:d0:b5:0b:a3:ef:12:1b:eb:12:90:c8:75:
97:cd:7f:81:8c:4f:39:b2:f6:c9:98:e1:10:30:0b:e3:40:02:
84:49:38:b0:35:e2:b6:03:cd:2c:f6:2a:11:99:42:99:ef:2a:
fb:23:d8:81:3f:85:a6:10:11:a3:3f:d2:74:53:d9:88:04:0e:
be:73:e8:ae:41:74:37:24:e8:5d:f9:db:b4:16:c0:e4:81:70:
0e:99:87:ca:1b:29:1c:02:7c:2e:cc:ce:3c:6f:09:4e:41:c4:
be:2e:e3:23:6e:12:59:85:34:86:7c:af:d8:09:80:40:ba:d4:
b8:f7:ca:3f:7b:a9:d2:a3:8b:f7:3a:c7:03:9a:b5:2b:a5:9b:
43:b7:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:07 2025 by rpki-client