Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9HsZr_FTNoDRaVW-SjVQHaS7104.roa
File: 9HsZr_FTNoDRaVW-SjVQHaS7104.roa (raw, json)
Hash identifier: Jjq7/rnQm3tk3OkmBNM/DiFACMJBmRZS8oHBijMfOUo=
Subject key identifier: F4:7B:19:AF:F1:53:36:80:D1:69:55:BE:4A:35:50:1D:A4:BB:D7:4E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D95E872B10E387E94D6A859C8AA6CF95F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9HsZr_FTNoDRaVW-SjVQHaS7104.roa
Signing time: Sun 11 Feb 2024 02:04:15 +0000
ROA not before: Sun 11 Feb 2024 02:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:95e8:6c59/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:95:e8:72:b1:0e:38:7e:94:d6:a8:59:c8:aa:6c:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 02:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47b19aff1533680d16955be4a35501da4bbd74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:bd:cd:96:74:4c:6e:f3:d6:4f:69:5a:5f:
65:4d:7c:7e:1f:e5:4b:63:30:3b:ff:c7:7e:47:43:
af:67:c4:d6:dd:22:fc:07:00:a9:e7:46:d7:37:33:
38:fb:23:17:a6:8e:8a:f7:c9:b9:68:fc:6f:e9:d1:
24:e7:73:e9:e2:a4:3f:db:d9:dd:20:d2:0c:69:27:
7c:0f:99:f5:23:5b:5d:03:5b:1c:8e:20:e3:25:85:
2a:1c:c9:01:f0:53:ef:d0:29:50:c2:0c:77:82:48:
fe:77:db:12:17:25:ac:67:be:f7:a8:65:4e:df:2e:
70:e8:c0:fa:c4:c9:5b:fe:17:f9:f9:2d:64:af:f2:
be:0c:0e:6d:f3:e7:9d:f2:53:ea:d3:b5:fb:07:ed:
f1:1a:d9:60:ed:a5:1b:a8:5d:a6:10:c3:12:a9:3a:
b2:b4:18:25:10:0f:4c:18:e3:34:a3:a4:10:85:ae:
2d:d7:5c:63:45:1e:11:c5:12:63:91:20:6c:3b:ca:
87:af:d1:03:42:f2:14:f8:9f:13:a9:a6:25:4a:f9:
4d:c9:f8:fa:cb:93:e0:6c:d5:7f:d6:19:fc:17:65:
58:9b:f5:6b:8b:2d:a9:0b:4c:66:5e:52:c3:6c:59:
5d:04:fb:16:72:cc:0f:4b:ca:ca:4f:6a:6f:42:b8:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:19:AF:F1:53:36:80:D1:69:55:BE:4A:35:50:1D:A4:BB:D7:4E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9HsZr_FTNoDRaVW-SjVQHaS7104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:87:cb:e8:e6:5d:9b:d1:86:b7:00:cd:b2:db:55:13:9e:42:
af:48:9b:02:5a:96:15:8d:e1:1e:d9:86:e0:76:0c:c4:42:ce:
f7:57:f9:5e:02:b9:98:dc:7a:e6:09:e9:36:e5:00:0c:59:98:
74:d6:00:5e:6f:fe:9c:03:d8:b1:da:09:25:8a:09:83:0c:14:
8e:ee:7f:4a:6c:57:da:1b:44:ff:7f:45:ee:43:e4:44:1c:ee:
8f:c7:37:4b:25:63:23:b6:ff:68:83:da:1e:9a:60:74:47:b4:
00:e6:e1:d6:e1:54:96:2d:62:42:df:66:e6:7f:70:dc:ee:99:
ed:96:d2:f8:77:91:1b:e2:b8:31:15:e2:9e:14:ef:c6:9d:6e:
59:6f:06:6e:f9:c4:aa:57:50:b7:7e:4e:9f:c2:23:7d:0f:15:
f8:33:f6:74:b2:9f:c0:cc:b2:46:27:45:4d:3e:e7:6b:ec:40:
fa:8c:f7:5c:e5:be:6a:af:6b:10:06:94:bc:b1:30:0f:22:08:
b2:8d:32:15:5b:a4:ea:2f:f5:30:af:c8:8e:3a:86:37:77:3d:
73:d8:0d:81:c7:bf:ec:0c:3f:86:80:c7:9e:e4:73:bf:ef:d7:
00:ab:68:ce:c5:a0:bb:40:59:7d:a1:11:46:2d:b9:ce:12:b8:
75:c5:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:01 2025 by rpki-client