Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ACG0_aXzlt_GJmvec2MdXd-DKeY.roa
File: ACG0_aXzlt_GJmvec2MdXd-DKeY.roa (raw, json)
Hash identifier: IRE/8EzHdVGr2xD+zz1ZrAMTN6bUUWoWJAXRc0919Hg=
Subject key identifier: 00:21:B4:FD:A5:F3:96:DF:C6:26:6B:DE:73:63:1D:5D:DF:83:29:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C995A8FC4C49B40311BBC6103BA7498BA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ACG0_aXzlt_GJmvec2MdXd-DKeY.roa
Signing time: Sun 24 Dec 2023 01:04:58 +0000
ROA not before: Sun 24 Dec 2023 01:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:995a:867/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:5a:8f:c4:c4:9b:40:31:1b:bc:61:03:ba:74:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 01:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0021b4fda5f396dfc6266bde73631d5ddf8329e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:8a:5b:94:c3:1e:3b:9c:cb:3f:d2:91:70:
87:9f:fb:cc:ad:1a:b7:5b:40:5f:e8:bf:42:f8:30:
45:06:35:3d:40:a2:d9:63:60:8d:35:6f:3f:5a:5f:
4c:96:89:1c:b6:b8:71:5e:8c:84:c6:31:37:7c:1d:
a7:d3:79:ec:2b:2c:c7:8a:62:32:d1:4f:23:9d:87:
4d:0f:ac:91:3e:02:0a:82:81:37:69:d4:f7:6d:83:
b8:f4:b8:71:e1:03:8c:8e:df:e4:00:2e:26:eb:14:
36:31:47:60:9d:c3:41:29:4c:b2:87:5f:49:72:dc:
79:3d:6d:5f:a1:77:10:35:47:e4:88:ff:5f:91:d5:
b4:5b:71:93:7f:eb:a3:07:4a:db:0f:bb:99:19:29:
1b:ff:8d:48:e3:12:6f:0d:14:7d:3a:57:23:46:24:
15:82:9a:ca:a0:37:61:5d:94:f9:45:21:1e:c8:d9:
c1:fb:54:27:a5:17:19:fa:e8:26:0d:95:4a:ea:e9:
8d:50:39:f2:88:35:2b:e0:d0:d6:b1:6a:d1:c0:55:
ad:1a:b3:1d:fa:07:80:6f:64:33:02:6a:25:0a:99:
eb:a4:1b:23:e9:93:a0:0c:46:d6:86:49:a9:0c:89:
1e:ef:01:2c:9f:81:59:e1:6d:48:29:09:9e:31:fd:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:B4:FD:A5:F3:96:DF:C6:26:6B:DE:73:63:1D:5D:DF:83:29:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ACG0_aXzlt_GJmvec2MdXd-DKeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:52:1e:af:73:35:49:65:d5:92:56:17:d9:72:8a:54:eb:48:
7b:87:36:d0:1d:c2:22:eb:63:bd:e2:bc:74:28:31:67:40:fa:
30:60:19:8d:a7:19:f2:51:69:3e:88:05:73:e2:f0:e9:6c:55:
0f:c4:ad:de:8c:e1:dc:e3:dd:12:7d:24:1a:5c:8b:08:b5:ae:
ef:0f:22:26:67:c9:3c:95:8c:ff:dd:54:a0:e9:e5:bd:25:3b:
c8:09:9d:f8:ce:a5:ef:0b:12:08:27:21:59:d1:92:51:d4:2c:
a5:22:65:b5:3f:a4:4b:f9:da:bd:73:a6:87:b6:c9:59:4d:dd:
d6:9a:bc:8a:97:ef:cd:8f:06:42:68:9a:57:93:93:97:ee:f0:
81:49:8a:ed:70:79:42:b9:90:a6:fb:c4:ea:d9:5b:72:8d:d8:
5b:23:9b:5d:9b:df:c3:c5:72:74:93:d5:0f:d0:4e:3e:04:8e:
2c:37:a9:e1:b9:46:49:e5:cb:b5:6b:2a:8d:06:d9:98:d1:08:
2b:de:08:6f:9f:df:a0:05:2f:8d:a7:8a:18:3f:13:b4:07:0d:
3f:29:a7:69:36:04:b2:0a:eb:38:fd:13:be:10:70:74:8d:ae:
eb:c4:6e:8d:13:34:ba:4a:82:2b:b8:a0:5b:1f:b9:d7:a5:8a:
bb:4b:c5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:40 2025 by rpki-client