Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2HGRjcLErLPJE-SwXGfU4b-DLqw.roa
File: 2HGRjcLErLPJE-SwXGfU4b-DLqw.roa (raw, json)
Hash identifier: jZ9ac+X1/DBKgIuymUIOKYgymV+G7iXeX9LW00cWkXA=
Subject key identifier: D8:71:91:8D:C2:C4:AC:B3:C9:13:E4:B0:5C:67:D4:E1:BF:83:2E:AC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDE449EBF7EB80496F0DD5044A00EDF28
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2HGRjcLErLPJE-SwXGfU4b-DLqw.roa
Signing time: Sat 06 Jan 2024 10:14:48 +0000
ROA not before: Sat 06 Jan 2024 10:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:44:9e:bf:7e:b8:04:96:f0:dd:50:44:a0:0e:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 10:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d871918dc2c4acb3c913e4b05c67d4e1bf832eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:de:8b:e2:c0:2c:83:07:f7:ca:4c:cd:31:
7f:aa:e9:35:f7:12:c9:27:8a:0d:09:97:16:e0:fc:
1b:cd:61:2b:6b:d9:ab:c0:b0:f3:df:f5:50:41:03:
5f:c4:bd:b2:d4:f7:0d:c6:ae:8a:34:5d:22:34:d6:
f6:72:81:7a:52:66:dd:bd:87:e8:91:31:3f:cd:88:
89:c6:b6:7a:b0:7f:e2:73:f9:dd:86:36:61:32:a1:
54:59:87:35:cf:55:e6:24:e2:9d:4e:65:77:25:a0:
87:23:f4:91:88:ad:8b:a4:3e:b7:a2:9c:a6:e1:3d:
88:41:3b:65:8b:8f:a9:5d:d4:3a:4b:7c:41:1f:1b:
dc:c8:88:a8:f6:18:2a:be:5d:7c:b3:d4:08:48:5b:
8f:a6:9a:51:ba:6d:e2:9c:c2:ac:1e:f2:bc:d2:af:
7e:ed:fe:07:3f:26:0b:2e:a6:02:52:12:16:ad:05:
3d:99:90:ee:40:50:a7:3b:91:95:67:38:b4:6c:41:
8a:9f:64:9e:2f:06:b6:ce:28:6a:a2:f6:29:90:c5:
a1:e1:fb:11:66:ea:d5:76:7d:f9:34:2a:d7:89:f2:
0f:55:0b:da:90:ae:56:ab:d6:d3:f7:72:d2:db:d4:
19:4f:31:d2:69:43:a9:ca:64:8f:a2:0e:a6:3e:31:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:91:8D:C2:C4:AC:B3:C9:13:E4:B0:5C:67:D4:E1:BF:83:2E:AC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2HGRjcLErLPJE-SwXGfU4b-DLqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:00:f0:af:2c:fd:c4:cd:a6:3f:f9:77:63:e5:ba:96:c2:69:
11:16:2d:93:9f:e2:d4:1a:40:aa:7b:a9:0b:90:d3:3f:be:2d:
c0:56:4a:ef:62:83:91:c7:05:1e:0e:1b:fd:18:3f:cc:df:70:
cb:34:6f:1b:de:be:55:ee:6c:38:68:79:75:21:dc:2e:de:5c:
9e:1b:6f:16:fb:a5:d4:aa:84:06:80:de:8a:ca:93:98:6e:39:
b9:aa:e0:69:7f:2f:51:28:95:8c:1f:9b:9c:62:67:ae:c8:63:
a8:cd:c3:11:83:11:af:91:b4:7d:11:49:54:7f:02:aa:ae:42:
6d:ee:92:ba:8a:30:71:07:28:dd:87:3d:db:c9:7e:13:63:93:
19:78:98:8a:c0:7f:38:c4:ea:79:ed:2e:45:94:6c:7a:a4:e8:
e7:b2:8c:5f:08:9c:2c:96:35:30:be:1f:85:67:3d:8d:ae:c9:
e6:42:c7:54:8c:a8:d5:29:23:af:0b:6a:e4:b8:6d:12:36:ad:
8a:da:bf:b2:5c:fd:be:0e:bf:07:ee:4a:66:9f:b7:66:51:ec:
87:b2:13:3e:80:c1:c2:ed:50:c0:ec:f3:f6:3f:44:27:69:ea:
4e:f3:06:be:da:11:80:ca:40:73:d7:3d:fa:61:e2:0d:2b:81:
a4:5d:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:34 2025 by rpki-client