Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pJAr1nwI4224bWPKUVpRVkAQcec.roa
File: pJAr1nwI4224bWPKUVpRVkAQcec.roa (raw, json)
Hash identifier: rFe/BA69w1yz5QXtpOIulLjtHGJWhtGFuumkA9MgcTY=
Subject key identifier: A4:90:2B:D6:7C:08:E3:6D:B8:6D:63:CA:51:5A:51:56:40:10:71:E7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3D51DD34C9FA4448417A76D397DBE9C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pJAr1nwI4224bWPKUVpRVkAQcec.roa
Signing time: Wed 24 Jan 2024 21:13:11 +0000
ROA not before: Wed 24 Jan 2024 21:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:51:dd:34:c9:fa:44:48:41:7a:76:d3:97:db:e9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 21:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4902bd67c08e36db86d63ca515a5156401071e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:3d:ba:48:92:5e:0c:7d:8e:a6:fb:2e:8d:
a3:16:50:c0:88:0f:6b:a8:7c:60:b1:a4:fc:b8:0f:
35:60:71:f1:d6:ed:f6:50:25:a0:1f:21:5d:8d:a6:
92:1f:3b:e4:53:5f:d1:1e:99:58:d6:da:b5:a1:f5:
9f:c6:32:05:43:06:4a:db:83:d8:d9:54:c3:b9:28:
f8:c3:70:84:b2:9f:b8:13:8a:93:88:ce:a9:9b:cc:
2e:d3:7b:1f:b8:17:2e:90:73:21:d6:8c:8c:a1:64:
b5:21:bd:40:de:1c:e5:a5:35:20:34:ed:42:54:29:
1b:d4:05:03:55:5f:b4:82:f7:48:a1:ea:e3:d1:22:
74:9c:67:f8:de:98:86:6d:6f:46:8a:86:82:3e:f6:
62:41:d6:ef:d9:05:04:01:6f:4b:f8:eb:bc:67:a2:
07:22:42:24:42:d0:c9:78:26:96:db:0a:b5:5a:0a:
03:8b:18:64:5a:80:d1:2b:9f:ba:50:60:c0:89:d0:
45:db:21:37:11:5b:8f:cd:93:64:81:8c:39:00:97:
32:b1:e8:d9:8b:df:2c:22:9e:06:fb:39:41:f7:1b:
f3:3e:29:38:9f:14:69:a5:bf:cf:68:3d:f8:6d:8b:
9a:8b:5e:9a:b1:fe:ec:00:99:f5:1d:c6:2a:d7:36:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:2B:D6:7C:08:E3:6D:B8:6D:63:CA:51:5A:51:56:40:10:71:E7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pJAr1nwI4224bWPKUVpRVkAQcec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:31:f1:c0:b6:0e:4c:02:bb:10:1f:33:9e:34:a9:2f:81:4a:
96:44:e5:85:f0:31:c4:79:68:0a:93:6c:d9:13:a4:15:9a:94:
67:43:e2:59:02:71:43:24:a3:af:2c:43:c4:cb:fc:2d:fd:1b:
93:c7:99:7f:fe:17:9a:f9:6a:b5:a6:67:ad:08:60:2a:66:22:
e4:40:74:26:9a:e5:6b:fc:c8:9c:2b:4b:7d:0d:d4:85:01:d1:
40:1b:3f:87:2f:9b:52:a6:f4:df:2f:e5:13:10:86:4e:5c:69:
c4:f4:f4:6b:ad:64:42:a4:99:ca:ba:f8:07:39:d9:3e:93:16:
7e:89:32:8e:0f:49:42:ba:26:39:2a:3b:73:5a:8b:03:7d:2b:
c9:85:60:98:7f:47:26:c5:18:84:ce:53:f0:d3:bf:c3:32:eb:
0c:26:bd:4d:b3:1e:1c:8c:09:d0:25:ab:d8:bd:74:57:9c:94:
75:07:96:bd:0e:99:32:69:e4:78:ef:27:ee:21:23:ab:f7:b0:
a5:b6:3f:a4:b5:80:c9:09:d0:2d:95:ce:35:f3:01:dc:f3:47:
c1:a8:38:99:52:65:90:90:63:6f:1e:a3:6b:49:36:df:d6:18:
e2:fa:9c:81:ea:45:fc:74:68:e0:45:ec:91:8b:a4:9d:38:64:
67:19:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:03 2025 by rpki-client