Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBmQBB61mvwDvCWZbv3b9WAFsCc.roa
File: PBmQBB61mvwDvCWZbv3b9WAFsCc.roa (raw, json)
Hash identifier: pwmAiXBEnJ6sgSznpdlU951ozISbISOOfHO2KQIq3VI=
Subject key identifier: 3C:19:90:04:1E:B5:9A:FC:03:BC:25:99:6E:FD:DB:F5:60:05:B0:27
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8E9FFAF139D7AF9531361EDA5A8B8081
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBmQBB61mvwDvCWZbv3b9WAFsCc.roa
Signing time: Thu 21 Dec 2023 23:04:58 +0000
ROA not before: Thu 21 Dec 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8e9f:3d98/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:9f:fa:f1:39:d7:af:95:31:36:1e:da:5a:8b:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c1990041eb59afc03bc25996efddbf56005b027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:f6:94:b0:06:84:6c:42:cd:29:3a:3e:37:
3c:84:a2:a8:dd:25:56:35:43:7c:52:6e:2d:8c:00:
d0:14:8a:a5:1d:5e:12:7b:96:ba:41:0c:8e:9e:7b:
ee:02:92:37:d1:65:39:c1:67:ca:b6:a6:cd:3c:0a:
80:a4:dc:41:91:a5:c3:a5:d4:4a:85:16:2d:ab:65:
78:38:e1:32:fd:46:69:49:3d:f0:52:75:23:99:c2:
f5:8d:16:09:cf:dd:e8:fb:9f:f1:60:10:da:71:38:
d2:d2:b0:ec:39:92:d0:4b:e9:91:7f:39:c1:db:fc:
7b:fc:72:55:f6:2f:c1:62:9e:11:8d:67:57:f7:cf:
b3:57:b2:e3:d6:25:66:fc:83:08:04:f3:ed:6a:2d:
4d:bc:1e:57:a8:c2:53:c3:79:65:c1:c9:eb:8f:83:
48:5a:40:4b:f7:39:3c:df:26:53:39:75:91:7b:1d:
ef:71:96:51:4f:10:e0:c1:67:de:1f:dd:07:9b:12:
1c:a4:18:d4:0c:a0:31:eb:a8:0c:cc:21:da:ea:eb:
dc:52:85:96:ec:ef:48:8e:20:07:96:13:53:1a:59:
ce:de:ce:a9:a2:d8:9b:1f:89:12:0c:78:23:e9:32:
c8:fc:4b:90:e7:df:14:4e:ed:41:8e:47:09:3b:72:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:90:04:1E:B5:9A:FC:03:BC:25:99:6E:FD:DB:F5:60:05:B0:27
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PBmQBB61mvwDvCWZbv3b9WAFsCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:05:88:47:57:61:cb:83:bb:61:8c:bb:56:73:27:28:b6:be:
52:d9:3a:07:36:04:fd:1e:99:85:42:74:f3:57:dc:eb:1d:34:
c1:90:41:5f:4f:80:06:1e:9a:80:b2:8c:d7:f4:71:1c:41:ac:
5b:b1:43:b7:c2:56:0a:d1:20:c9:3d:6c:a2:77:fa:9e:3a:b4:
ae:bc:b1:ab:54:4a:49:15:4a:8d:fc:06:9c:35:20:8e:17:0d:
01:85:15:d7:00:96:fd:d4:bb:93:17:0e:7c:95:53:2e:16:6f:
da:d5:88:c8:8b:0e:2f:3c:83:e8:81:28:08:b9:27:13:19:9a:
e4:ce:c9:79:28:48:ab:88:69:c3:e5:b8:b2:e0:83:89:a5:30:
44:8c:54:33:16:d6:e5:f5:78:af:69:af:70:2f:60:0e:04:02:
24:fe:52:61:af:65:1d:62:8a:11:85:c2:f1:0f:53:db:5a:dc:
18:55:95:d2:a8:51:ad:4f:57:fc:c8:57:1f:2b:e1:b7:9c:23:
13:30:3a:6d:18:08:de:0f:77:b8:b8:89:d5:3a:20:f0:15:52:
31:2e:9c:71:34:b6:fe:fc:f8:d0:95:8b:d7:88:f7:57:d1:a2:
da:42:16:c4:95:ac:17:91:a8:6c:f7:94:37:32:46:9f:38:d4:
14:27:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:38 2025 by rpki-client