Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HgMraDZUpfvtrz1wqVB1lOAPaYs.roa
File: HgMraDZUpfvtrz1wqVB1lOAPaYs.roa (raw, json)
Hash identifier: elplPMzB89b7ZPipmuzqB1yzi/DpnENyOacT/SniU8k=
Subject key identifier: 1E:03:2B:68:36:54:A5:FB:ED:AF:3D:70:A9:50:75:94:E0:0F:69:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF8A2FF3BDE706258782FF5F67D0C9948
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HgMraDZUpfvtrz1wqVB1lOAPaYs.roa
Signing time: Fri 01 Mar 2024 06:10:48 +0000
ROA not before: Fri 01 Mar 2024 06:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:a2:ff:3b:de:70:62:58:78:2f:f5:f6:7d:0c:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 06:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e032b683654a5fbedaf3d70a9507594e00f698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:96:70:bd:20:f8:e0:07:f1:b0:34:38:5e:
4d:29:32:37:ff:a8:e7:da:83:ed:c3:db:34:e6:d2:
81:44:c3:86:26:da:80:11:1f:96:64:93:51:24:74:
a6:ae:10:18:8c:23:4a:0e:e1:11:10:f9:7f:16:77:
be:ff:18:f3:9d:5d:a4:a7:5c:0f:73:aa:08:2a:21:
f0:a3:51:84:a4:73:0b:32:c9:7c:5a:d2:20:31:8a:
f0:eb:dc:b6:64:fb:fe:a0:b9:f3:98:6f:f9:e0:3b:
51:dd:61:54:7f:11:ea:19:4f:e3:b8:9f:27:0c:a8:
55:eb:5a:05:d9:d2:c0:f4:3b:c9:49:9b:f0:12:07:
80:ff:98:2d:d7:28:4c:d8:29:44:85:d8:7a:94:8a:
49:d0:85:42:04:f7:25:97:d6:5a:c8:e8:9d:15:aa:
ff:87:05:8b:91:d2:73:0b:08:c5:ac:6a:7e:9f:37:
ee:bf:18:91:a7:fd:f9:83:14:b4:36:4b:1e:ce:cd:
33:a9:5d:20:07:ca:d9:fb:7c:c9:94:70:c2:fa:f2:
d4:75:15:ad:60:e9:8d:58:65:67:96:d9:19:47:02:
f4:a1:ce:0f:72:9e:e2:ba:33:a0:e5:94:1f:92:45:
2f:e4:0e:a7:31:c4:e6:1b:89:f7:ac:4c:57:c1:1c:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:2B:68:36:54:A5:FB:ED:AF:3D:70:A9:50:75:94:E0:0F:69:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HgMraDZUpfvtrz1wqVB1lOAPaYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:89:bc:48:d4:e7:9c:01:5b:f5:17:4e:84:a9:e8:c7:0d:40:
1d:1b:ff:f3:05:57:aa:e7:db:cc:d0:af:94:07:2e:ba:b2:d9:
a8:e6:95:1e:6d:be:b0:9f:0a:16:6b:c5:a6:34:59:4b:4c:b9:
97:0f:ca:27:cc:da:87:7f:df:56:03:bb:f4:9f:e8:a5:c2:14:
cd:fc:3b:ab:24:d1:d3:28:a6:67:4f:d1:2f:7a:a4:9e:5e:99:
52:e3:3b:cd:84:56:bf:eb:f4:f7:a6:a1:87:78:bd:b7:b1:6f:
61:fa:98:fb:ae:56:6f:68:15:bb:33:5a:df:fa:e3:1e:51:9c:
5e:bc:92:5d:49:0d:87:ff:ba:30:bd:36:84:db:c1:2a:52:61:
79:c2:d1:67:cf:28:f4:e4:f5:92:74:17:13:30:e2:96:46:f8:
ed:c2:de:5d:b6:de:59:91:fe:35:1f:2b:19:ee:64:3b:03:33:
91:f5:26:2c:9d:9b:b9:c4:19:81:51:d8:6b:ee:29:17:eb:5c:
db:9d:99:25:82:b5:0e:93:69:d6:48:70:4c:5f:e4:88:fb:1e:
30:9b:eb:b1:47:8d:e7:fe:9a:ed:ca:66:23:47:b5:d1:c9:59:
8d:51:f1:9c:f2:32:55:42:1f:84:61:e8:38:e9:60:6c:93:bd:
f6:99:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:09 2025 by rpki-client