Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PQHUFbGWtNpkcUPVQmLMsokUYDk.roa
File: PQHUFbGWtNpkcUPVQmLMsokUYDk.roa (raw, json)
Hash identifier: F2OxGG8PFIj6/lqjo/4FOaLqGIR4sccVO+5c+bilubM=
Subject key identifier: 3D:01:D4:15:B1:96:B4:DA:64:71:43:D5:42:62:CC:B2:89:14:60:39
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9AE2DDD8A64BA06765898DBB6BD12F97
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PQHUFbGWtNpkcUPVQmLMsokUYDk.roa
Signing time: Mon 12 Feb 2024 01:16:15 +0000
ROA not before: Mon 12 Feb 2024 01:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9a:e2:dd:d8:a6:4b:a0:67:65:89:8d:bb:6b:d1:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 01:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d01d415b196b4da647143d54262ccb289146039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:ad:5e:92:70:c7:7e:f4:ef:bb:41:82:30:
47:5c:35:f6:eb:3e:74:3c:1b:e1:91:72:5e:eb:7a:
0a:1d:21:8b:0f:c8:06:37:03:d5:6d:58:dd:19:52:
37:44:a7:2b:c9:e5:5a:59:36:2f:39:1f:17:1c:b2:
6a:81:b0:65:4f:e9:51:75:67:34:8b:06:73:e3:02:
87:be:5a:79:89:f6:0d:f6:a3:06:8c:eb:7b:a3:ba:
8d:11:e2:4f:ae:3f:af:cb:d4:d8:9e:54:41:a8:81:
09:68:8d:d3:5b:24:7f:91:35:71:1a:f8:21:c6:e6:
d3:66:fc:76:12:d4:68:e1:5c:b9:cf:5f:20:4c:05:
b7:b8:ad:9a:61:44:c4:cb:97:63:5e:15:50:90:69:
b1:c3:ed:ed:88:3f:b1:03:d4:b4:b2:c8:c1:dc:e6:
98:d6:05:ad:9f:49:5c:08:17:67:be:92:75:f8:c4:
56:8b:02:a4:91:6b:30:cf:15:2c:77:1d:dd:f4:e6:
73:22:e3:c8:75:24:78:1d:af:69:e6:c2:3c:75:d5:
64:fd:23:24:c7:27:20:88:f6:52:75:f4:30:37:16:
69:1a:ad:88:cb:49:a4:5a:79:e0:78:04:11:9f:8a:
c7:ae:24:46:1f:da:d5:df:2a:09:57:a6:75:3a:7f:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:D4:15:B1:96:B4:DA:64:71:43:D5:42:62:CC:B2:89:14:60:39
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PQHUFbGWtNpkcUPVQmLMsokUYDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:af:bd:80:c3:c5:26:26:03:ef:da:2f:6f:53:1e:17:f6:f5:
35:ee:18:cf:21:7b:a6:fc:2c:c0:c9:12:2a:09:39:0c:78:9c:
20:70:6d:50:6e:35:37:c7:31:9b:da:fe:05:77:3b:1d:1d:65:
d7:c3:dd:3d:42:33:9b:1f:6a:b1:db:f3:a1:4a:55:30:0c:f5:
2e:ef:b8:72:e6:02:c6:94:ee:00:a1:6b:d1:43:19:a8:b6:fd:
9d:3b:8a:f5:21:6c:d0:f3:d0:a3:e0:d9:c1:37:85:05:55:f9:
0a:7e:2a:64:8a:d8:37:69:57:ef:45:6e:ce:82:66:95:6c:d3:
f1:d3:69:c3:31:e3:59:c5:dc:9b:0f:63:e7:36:2c:1e:99:62:
99:d6:a1:2f:2e:4c:95:ee:ec:6c:d7:e7:15:93:8b:63:f4:93:
88:13:86:fc:2a:1e:dd:12:64:ab:9d:ee:b7:11:a0:d0:90:33:
01:c5:26:7b:df:b8:24:45:6e:7b:da:3b:97:d9:c7:24:50:a0:
c6:39:8d:0f:f2:b8:aa:1c:01:5a:4e:93:f5:c5:12:d7:ab:b3:
af:ce:3c:ad:05:39:90:75:81:90:fe:a7:0d:6e:e5:62:c6:5a:
62:74:6d:c9:d3:eb:06:b0:c4:be:86:9a:4d:e0:37:75:46:b2:
b2:a7:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:05:32 2025 by rpki-client