Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H5dvTkMNgZeqgoF8dzb3fTB5n0k.roa
File: H5dvTkMNgZeqgoF8dzb3fTB5n0k.roa (raw, json)
Hash identifier: lPFNLGY11dT5yc+dp9EkDvJS8C7u2uA+IFhYD0FI1RQ=
Subject key identifier: 1F:97:6F:4E:43:0D:81:97:AA:82:81:7C:77:36:F7:7D:30:79:9F:49
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C87C22A85F7C434BBA808DB4038CC37EA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H5dvTkMNgZeqgoF8dzb3fTB5n0k.roa
Signing time: Wed 20 Dec 2023 15:04:58 +0000
ROA not before: Wed 20 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:87c1:8579/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:c2:2a:85:f7:c4:34:bb:a8:08:db:40:38:cc:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 20 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f976f4e430d8197aa82817c7736f77d30799f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:7c:8d:ed:50:05:6b:e8:bf:f4:ed:23:0e:
39:a0:e0:e8:46:f8:f5:3f:45:e9:97:18:85:26:d9:
20:5e:7d:da:b3:7f:bc:a5:69:22:50:3e:7f:32:13:
eb:74:80:4a:63:56:f9:e4:eb:7e:94:23:9c:38:f6:
1c:45:8f:f6:2a:a1:e2:c2:24:82:4b:6d:ce:5f:c2:
14:64:aa:83:3d:36:41:0c:ea:58:58:3a:a5:a5:89:
c2:96:45:00:94:2d:08:9a:e1:98:3a:a9:88:60:89:
ab:07:01:41:ec:c2:4b:26:d0:6b:8e:19:b2:a6:4d:
32:05:25:8e:f5:e3:d8:a8:78:a9:62:5a:b2:2b:d8:
7e:65:54:f7:ed:e3:55:ce:45:83:db:02:2a:d2:17:
c2:85:47:77:d4:a9:bc:67:86:75:a4:ed:61:b8:de:
8d:f9:09:f5:e1:ab:55:4d:27:35:fb:c8:79:29:86:
0c:98:f3:6c:40:a9:8a:9b:ff:7c:8e:dc:10:dc:49:
c2:6a:fa:14:a3:2b:34:95:05:6e:06:ff:ed:5f:0d:
06:f7:e1:97:a1:59:27:0c:7e:cb:a3:42:d0:8f:11:
cc:45:df:72:5c:7f:bd:9f:1f:e5:d0:01:12:e7:25:
f2:f3:1d:7d:1d:77:9c:86:12:29:c4:f0:9b:59:fb:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:6F:4E:43:0D:81:97:AA:82:81:7C:77:36:F7:7D:30:79:9F:49
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H5dvTkMNgZeqgoF8dzb3fTB5n0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:55:be:0f:cb:8e:91:f9:37:27:05:93:c3:44:cb:62:6a:5b:
6c:65:1c:46:05:49:f4:bb:0b:d4:d9:77:d3:79:a3:ef:53:93:
b8:53:60:85:d0:b4:ac:7f:d1:2c:57:34:80:fd:01:3e:9c:71:
b1:fe:90:25:bf:40:89:66:90:5c:4c:ad:59:d3:dc:e3:10:19:
80:0c:97:89:56:98:e0:59:9a:cf:41:9b:fe:4b:01:ab:ac:38:
bf:62:c5:ef:f7:30:67:20:71:0d:2b:60:87:61:3d:11:7c:c3:
fb:2f:cb:23:8a:8f:b9:0e:5c:72:ec:d2:31:61:ac:24:ac:91:
c8:a0:2e:7e:03:c1:70:15:70:80:13:9e:7e:cf:32:e9:3f:46:
26:ab:d7:43:63:3c:cf:de:92:a1:71:ee:e2:a8:ed:38:64:c5:
5a:53:04:c4:d7:2e:bd:22:d7:3c:b1:93:04:82:db:b2:ad:87:
a9:eb:ed:56:35:9e:c6:4c:93:5b:92:d8:d1:21:bb:da:0e:f9:
bd:82:1a:2f:49:c2:86:3e:4a:ed:7e:1a:07:de:c0:6e:2c:b3:
26:a2:19:b5:fb:4f:2e:31:2c:fe:5c:4d:62:43:ce:5f:91:6d:
e6:b4:59:8f:e3:d5:45:ce:16:20:ee:eb:44:59:15:b6:3f:70:
23:01:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:08 2025 by rpki-client