Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hx_QxWvFoPuSsJklFUiVEBitv_k.roa
File: hx_QxWvFoPuSsJklFUiVEBitv_k.roa (raw, json)
Hash identifier: driu1De9CP5yuZM2g1yoDxSXn1Oi3vWBmpgR/5xsNlo=
Subject key identifier: 87:1F:D0:C5:6B:C5:A0:FB:92:B0:99:25:15:48:95:10:18:AD:BF:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D87921A7E45405AEDE15556BDC615CDF1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hx_QxWvFoPuSsJklFUiVEBitv_k.roa
Signing time: Thu 08 Feb 2024 07:15:15 +0000
ROA not before: Thu 08 Feb 2024 07:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:92:1a:7e:45:40:5a:ed:e1:55:56:bd:c6:15:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 07:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=871fd0c56bc5a0fb92b099251548951018adbff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:1c:73:c4:94:d3:57:02:5e:8e:b6:d5:28:
2e:2d:ec:05:26:af:a7:4c:5e:2b:f8:3f:c5:29:5d:
ab:cd:83:76:85:ba:f4:68:1e:74:7b:20:68:92:d8:
46:bf:54:f3:47:82:72:15:35:93:18:b1:29:5d:d8:
d3:91:79:77:cc:ab:55:ae:1f:79:f9:44:18:18:13:
0c:b6:b5:bd:ee:06:04:46:bc:b0:db:2e:ca:d0:b2:
32:b2:d3:b8:52:f3:6f:20:d9:b4:fc:3f:25:e5:ac:
51:99:3f:35:a2:97:f9:b1:0a:0a:fd:64:03:b3:fd:
37:17:3f:36:0b:8c:f1:81:c9:22:22:6e:a1:95:a0:
b7:39:42:f6:97:82:60:ae:0a:a8:05:7e:e0:cc:3e:
57:d6:9e:40:3b:71:6f:e4:36:d5:b3:db:f3:f2:6f:
5a:b4:a9:f6:5f:01:55:6e:e2:61:00:2e:48:36:e9:
34:b1:28:08:95:0f:a4:0e:60:82:ee:2a:45:43:bf:
e2:e2:d2:a2:3e:03:e1:da:4e:a8:00:49:11:6e:1f:
ad:25:cc:4e:7f:3e:1e:33:78:b2:2d:63:ba:1b:5d:
9e:45:41:03:c7:78:c9:5a:9d:bc:8d:38:19:4e:ab:
3b:83:20:79:e3:46:20:43:79:e2:b8:4f:1b:29:cb:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:D0:C5:6B:C5:A0:FB:92:B0:99:25:15:48:95:10:18:AD:BF:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hx_QxWvFoPuSsJklFUiVEBitv_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:55:4b:2e:89:0b:63:53:14:64:05:51:87:85:d6:94:0d:e0:
e1:94:77:ba:04:4c:73:fb:cb:4b:02:da:1d:8b:1d:c3:05:5b:
2c:a6:01:9b:a7:16:d2:d1:0a:ec:6d:97:7f:6e:4f:83:a2:73:
0b:b9:dc:3c:03:a5:a8:23:88:a4:74:bf:9e:e9:b7:06:a2:38:
f2:27:55:15:78:84:31:ec:e6:dd:ba:52:38:3f:d7:f9:b4:51:
d7:ad:07:03:89:f9:99:2e:83:81:9b:a3:8c:80:2a:a8:ce:3c:
e5:04:2b:24:a6:1a:ec:10:c3:8e:a1:2b:98:97:f5:cb:2a:73:
9b:7b:55:fe:e4:aa:be:66:31:95:b8:77:c5:d9:04:b9:c7:68:
60:9d:7d:ff:b9:fd:b2:19:21:ad:14:4f:1a:a3:11:d3:4c:7a:
75:83:6a:52:19:d5:f2:d1:a0:74:4d:fb:85:91:da:9a:97:9a:
87:43:87:10:e1:6a:bd:71:25:1f:55:15:0e:55:45:36:ce:0e:
b4:8a:b3:27:ec:85:2c:c8:2c:e6:5f:6e:21:1c:77:4b:47:69:
33:21:79:9c:3e:da:99:e4:1f:bb:66:8d:a6:4e:23:2a:7c:6b:
7e:e5:1c:b5:60:7a:04:2d:34:fb:52:f4:c6:38:2d:22:e4:2f:
8d:22:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:22 2025 by rpki-client