Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HWFjCVEHa1QdHRdFvQuOgJhxi4A.roa
File: HWFjCVEHa1QdHRdFvQuOgJhxi4A.roa (raw, json)
Hash identifier: g+Zu6EMJSPavTpfL6XqPsjd/qlpf7QhypsteoVBg184=
Subject key identifier: 1D:61:63:09:51:07:6B:54:1D:1D:17:45:BD:0B:8E:80:98:71:8B:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB3830D59233A4DCEBAF356E4D7BF80A9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HWFjCVEHa1QdHRdFvQuOgJhxi4A.roa
Signing time: Sat 06 Apr 2024 13:04:54 +0000
ROA not before: Sat 06 Apr 2024 13:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b382:75ba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:83:0d:59:23:3a:4d:ce:ba:f3:56:e4:d7:bf:80:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 13:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d61630951076b541d1d1745bd0b8e8098718b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:b0:be:e5:dc:f4:2a:1f:34:75:d8:e1:8e:
e3:e6:1e:f4:7b:2c:c7:66:65:92:25:b8:c3:22:03:
32:02:57:41:43:37:d9:ce:9a:55:bb:a5:92:03:54:
c7:33:e9:6e:71:e9:47:13:aa:d3:c1:15:99:8b:91:
fc:38:62:3d:27:d7:f8:2a:97:d3:d3:87:b4:d1:8c:
1a:3d:9e:de:15:7c:29:6e:df:d9:b8:87:45:e3:58:
62:60:43:3c:d0:d4:92:2d:f4:11:70:d0:4b:2a:46:
6b:28:1c:05:2f:e2:d8:bf:9d:0a:4e:13:27:27:cb:
02:13:f3:98:b2:ac:aa:8e:82:96:b6:67:01:a9:b0:
3a:f1:0d:1d:ef:a4:74:90:0a:e0:d1:b7:93:e3:ee:
df:4c:62:f1:ea:db:5f:24:d9:8f:b5:a9:91:2b:df:
b9:10:1a:de:e1:51:56:c1:de:7e:42:19:f1:ed:2d:
e4:de:84:1d:0e:45:d2:2f:74:13:fb:62:50:d5:33:
9c:e9:2b:1f:75:88:c5:74:c5:0c:93:b1:c5:46:e9:
73:8f:ee:a0:13:a4:69:fa:84:87:5e:73:ee:6b:1e:
5c:a0:b5:ad:c7:13:d1:9a:d1:e4:f9:c0:df:58:6d:
c1:8d:0b:5b:70:42:75:49:1a:d7:c2:cf:42:d6:5f:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:63:09:51:07:6B:54:1D:1D:17:45:BD:0B:8E:80:98:71:8B:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HWFjCVEHa1QdHRdFvQuOgJhxi4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:b7:77:2d:24:b2:31:01:28:c8:33:e2:ff:90:60:8f:23:29:
eb:95:f7:8b:01:81:10:df:00:fc:30:c6:88:91:09:c1:86:a1:
67:72:e1:24:8f:34:37:1e:a0:76:9b:33:6c:88:21:0a:a3:dc:
e2:e4:88:d1:f9:db:f1:d0:4a:40:a9:f9:c3:09:8e:e9:b3:78:
9b:6d:6b:26:28:38:d2:a1:0b:5a:25:76:64:9a:ed:f0:e8:89:
66:34:4d:ce:0d:f5:73:86:45:1d:4b:23:05:66:71:39:33:fe:
cb:f9:77:15:5e:8b:ca:ff:11:ad:4d:9b:73:94:cd:83:a2:e5:
08:8d:e1:dc:d6:58:38:4c:c7:ec:0a:c6:c1:35:14:7a:16:3d:
64:ba:3d:98:ff:8c:2f:05:70:34:ee:6d:be:e0:17:56:b5:c0:
be:3c:2a:40:78:be:d1:c9:e6:26:60:71:99:ea:04:3f:2e:9d:
19:bc:0d:98:75:60:8a:4c:09:7b:ab:d2:73:fd:a5:1a:0e:5f:
38:06:77:96:a6:62:8b:d2:cd:13:21:f0:a7:a9:0e:7b:01:f3:
ac:c9:05:34:96:32:27:b2:b8:da:d7:73:a8:d8:6e:38:3c:44:
43:d7:91:81:29:2d:1f:a3:d8:35:d9:04:0d:b8:69:bd:c0:cd:
a4:1f:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:12 2025 by rpki-client