Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9PuiwSwcexi3NsQ_ZwH2YxkM2cw.roa
File: 9PuiwSwcexi3NsQ_ZwH2YxkM2cw.roa (raw, json)
Hash identifier: lQmxcTg/wrQnXAVY+xD/8b1/WUTeHU6vHs86RrAV7OA=
Subject key identifier: F4:FB:A2:C1:2C:1C:7B:18:B7:36:C4:3F:67:01:F6:63:19:0C:D9:CC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE32DD604048DFB74797C2ADF0054F96B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9PuiwSwcexi3NsQ_ZwH2YxkM2cw.roa
Signing time: Mon 26 Feb 2024 02:10:48 +0000
ROA not before: Mon 26 Feb 2024 02:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e3:2d:d6:04:04:8d:fb:74:79:7c:2a:df:00:54:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 02:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4fba2c12c1c7b18b736c43f6701f663190cd9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:22:a5:c8:34:a0:c3:a7:38:6c:8f:27:42:
62:49:a4:b1:9f:f2:9b:cf:05:48:a6:f2:9e:b0:75:
af:dd:2d:b4:a1:86:cc:40:38:90:53:0b:89:6a:a5:
ec:b5:c3:28:df:7b:d0:57:14:11:a9:da:02:87:ca:
d9:3c:b5:33:e6:57:03:2a:3b:c6:4c:c0:1b:fc:1b:
68:ad:0a:00:48:7b:4f:cc:9f:aa:f4:19:37:aa:41:
79:85:40:b6:4b:84:2d:d9:0a:f2:6e:3e:2a:26:ed:
cf:89:87:a2:c4:d1:d9:36:3b:b5:1d:ed:63:54:36:
b7:85:c5:3d:2c:fe:09:e7:a1:a9:fc:b4:ea:c8:5a:
ad:26:58:4f:01:dd:90:c1:b7:65:98:5a:bb:f6:36:
16:a6:bf:88:23:44:e0:8c:84:3c:2c:40:94:ea:4f:
e6:7b:30:fd:4d:89:9c:bd:00:eb:c2:18:22:7d:24:
74:8f:aa:5e:4d:3d:e3:6c:70:fa:8f:6f:ca:9d:a8:
ce:53:b0:7f:22:64:c8:3a:8b:d8:be:09:c8:05:6f:
3e:ff:7a:c5:cb:be:4b:f6:35:91:59:a5:4e:90:55:
81:48:18:d6:d0:51:09:ff:16:78:d1:af:25:17:5d:
ad:eb:d7:d2:18:1a:f8:70:b5:51:f9:92:5f:16:2a:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:A2:C1:2C:1C:7B:18:B7:36:C4:3F:67:01:F6:63:19:0C:D9:CC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9PuiwSwcexi3NsQ_ZwH2YxkM2cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f9:9c:c7:eb:4d:33:f7:4c:b3:e9:8b:38:14:7f:34:6b:6a:
58:b7:29:31:7d:49:64:b7:29:e6:7b:e7:eb:0f:7f:11:e1:21:
ad:c4:3d:05:26:31:d4:34:ee:2f:0d:7c:cb:eb:2b:fd:96:97:
95:f8:01:0a:c1:5e:21:32:e1:93:46:fd:90:78:30:63:dd:da:
c1:e1:8a:9b:86:ca:0c:69:b4:6a:ff:74:8e:d9:d5:17:00:f9:
84:eb:07:20:e0:d3:34:86:c4:ee:f2:cc:ba:f3:3b:61:ba:dc:
69:78:5a:b6:c8:a5:22:ce:61:d3:7c:7e:43:89:ed:ac:2e:f6:
fb:38:88:61:83:2f:e1:ea:de:d9:cf:75:19:fb:a6:02:a8:c5:
35:00:3e:93:bd:44:c5:68:59:b2:4f:48:61:4e:26:5f:5c:c2:
ad:17:95:76:0e:bc:40:5e:a9:07:ee:29:b5:0f:46:2f:ad:1e:
64:5c:35:c7:b3:97:2b:1f:3e:9b:48:b9:7f:24:46:bc:4e:04:
ae:d3:43:bc:4c:b3:22:76:56:43:c4:75:dd:56:72:8a:fc:1f:
b4:60:b2:53:de:6d:6b:95:05:a9:ee:95:d8:52:b2:8d:98:8c:
80:43:82:f2:59:69:fa:ba:a8:b1:55:27:e3:2f:56:2e:60:09:
49:b0:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:54 2025 by rpki-client