Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LrPmLCHgE9TnbPxeo2VGCI1Hsv0.roa
File: LrPmLCHgE9TnbPxeo2VGCI1Hsv0.roa (raw, json)
Hash identifier: o140mUHfg3N6EseU0ZijJ9jBtmUc607gnXDStTvvKQ8=
Subject key identifier: 2E:B3:E6:2C:21:E0:13:D4:E7:6C:FC:5E:A3:65:46:08:8D:47:B2:FD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA11B6D43F10DB5C106601AF88A36F5FC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LrPmLCHgE9TnbPxeo2VGCI1Hsv0.roa
Signing time: Mon 25 Dec 2023 13:12:58 +0000
ROA not before: Mon 25 Dec 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:1b:6d:43:f1:0d:b5:c1:06:60:1a:f8:8a:36:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb3e62c21e013d4e76cfc5ea36546088d47b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:eb:33:47:3a:88:04:96:36:fa:bd:27:99:
e7:e9:fa:cc:07:db:b5:a4:5b:04:88:0d:87:b6:c2:
89:18:bf:26:48:fa:54:10:97:ae:60:da:76:4e:d5:
75:4b:42:26:28:6b:80:ad:d5:87:a4:a1:01:0c:b8:
86:2c:53:d5:af:1c:c8:5c:c7:43:4e:46:e8:8d:4a:
48:39:5a:41:22:5d:1d:3a:de:60:96:8c:a6:ed:6d:
f1:f5:6e:7a:ca:62:e5:68:64:af:30:9d:ee:b9:51:
93:a7:4d:b1:e7:e6:bb:59:71:b3:45:de:ca:12:44:
31:cf:50:2d:ef:50:e7:a9:05:10:e1:80:98:74:31:
01:17:3f:b9:bb:86:65:b1:f6:94:41:ad:08:3c:ac:
9a:c1:32:0c:2c:ec:2c:10:92:0b:d7:50:f2:45:0c:
1a:c9:ca:34:61:9a:40:96:45:3b:65:c8:e4:f2:7a:
37:10:bc:3f:1d:76:be:c2:61:3b:a6:59:54:7b:82:
9b:a8:25:1c:aa:ac:e5:7a:c5:00:76:33:c2:9b:ba:
fa:2c:27:64:70:1c:9d:fa:08:3f:61:b2:96:0c:7d:
b9:29:c2:0c:89:d5:cc:a2:e2:8b:01:b2:5d:75:b6:
37:7e:e3:40:d1:f7:ff:bc:4b:55:0e:d1:7a:a8:37:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:E6:2C:21:E0:13:D4:E7:6C:FC:5E:A3:65:46:08:8D:47:B2:FD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LrPmLCHgE9TnbPxeo2VGCI1Hsv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:95:ae:82:4d:56:fe:c0:4e:a9:0f:c3:74:bd:f2:dd:9f:4d:
90:09:06:dc:9e:c7:87:6c:56:d3:6c:2c:26:46:8e:86:ed:4e:
91:b9:cb:29:15:34:49:59:59:54:19:f7:bc:ed:33:ba:03:c5:
a6:7c:85:04:f3:d1:02:90:80:88:e8:70:b0:06:03:cd:e4:27:
b2:7a:fb:ea:49:74:c8:6f:b0:17:ec:51:eb:a0:6e:13:96:88:
d2:dc:c0:12:4b:a8:bc:01:e0:2a:ae:78:81:67:95:bc:08:63:
55:09:8d:17:82:83:75:a4:91:5e:7e:d5:a1:08:3e:2f:68:fe:
b0:ff:25:d1:8f:36:97:75:4a:a1:a2:25:4e:e5:55:72:98:fc:
91:66:d2:0e:39:34:b5:84:ba:5f:53:fd:6a:3b:5b:d3:ad:b9:
33:26:42:d0:80:d3:9a:37:46:55:43:2c:44:0e:f7:3a:ce:5b:
93:ff:74:ac:f5:c8:d4:7a:03:26:e5:a8:9b:dc:a7:65:8b:ce:
16:5e:c5:a9:92:d5:41:99:28:ea:a8:6f:60:35:fa:c5:40:f0:
39:e8:b3:17:e7:a6:10:5a:bd:ad:d5:b3:0d:ea:96:8e:17:85:
09:fb:f4:1d:43:1d:da:ec:d6:4f:de:da:58:bd:ce:75:4a:ce:
f2:e8:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:51:23 2025 by rpki-client