Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pgwoRtDxgUT4PUNRbt106ZybiJk.roa
File: pgwoRtDxgUT4PUNRbt106ZybiJk.roa (raw, json)
Hash identifier: Xg4IF5DQpLDJatWIy+QS58vtQOwJEdDTUAhyzlQzDJo=
Subject key identifier: A6:0C:28:46:D0:F1:81:44:F8:3D:43:51:6E:DD:74:E9:9C:9B:88:99
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E130E5D922A4B04D3388871CD4E1631D8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pgwoRtDxgUT4PUNRbt106ZybiJk.roa
Signing time: Wed 06 Mar 2024 09:18:12 +0000
ROA not before: Wed 06 Mar 2024 09:18:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:0e:5d:92:2a:4b:04:d3:38:88:71:cd:4e:16:31:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 09:18:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a60c2846d0f18144f83d43516edd74e99c9b8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:cc:28:83:2d:ac:ef:82:3f:92:be:6e:51:
58:a4:d2:5d:33:70:28:a7:ff:d8:d4:6f:1c:67:0f:
ca:40:ce:17:c3:70:ad:55:15:61:3e:52:91:fe:8d:
10:a6:d5:72:e3:ff:4c:43:f7:53:fa:3b:32:9e:f4:
3e:e3:69:a4:a6:d8:31:0b:e4:be:d8:7b:46:62:ce:
5b:96:08:39:2b:d8:f9:9f:d5:55:46:3c:1a:d6:b0:
13:4a:b2:87:10:28:c0:a3:3d:0a:ad:64:82:f0:58:
a8:dc:90:35:af:7a:3d:9c:63:bb:ff:71:6b:44:a9:
c9:06:e6:3d:f6:9a:ef:97:15:bf:d1:22:8b:13:7a:
d9:a7:a6:2e:51:73:83:23:7f:19:27:22:f2:60:2a:
46:59:46:14:34:e2:17:42:1d:d9:ce:9c:a8:27:01:
95:5a:20:4c:82:a8:27:04:04:d2:63:74:0f:ca:77:
d4:c7:8a:d8:16:26:61:c7:cd:21:78:53:5f:eb:1f:
6b:c8:07:58:ae:77:08:d1:07:ec:6e:b0:60:d5:28:
50:48:87:07:a0:05:81:98:e0:ac:ca:ed:7a:8a:54:
c0:89:40:82:62:c9:69:8b:06:fb:10:28:4e:1b:68:
65:eb:cf:3b:c1:f5:25:58:2d:df:99:94:d8:f4:a5:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:28:46:D0:F1:81:44:F8:3D:43:51:6E:DD:74:E9:9C:9B:88:99
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pgwoRtDxgUT4PUNRbt106ZybiJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:c3:29:0e:b4:ed:c5:4c:9c:49:e2:43:8b:4f:b9:3c:aa:31:
1d:cb:34:ec:7d:91:87:4b:ba:d3:3c:4e:ec:6e:85:46:95:3b:
72:40:6c:79:fe:2d:85:41:8c:7f:23:4b:07:22:64:0a:83:3f:
ab:bc:f9:fa:f4:fa:7e:16:f8:d4:6d:7b:3b:a0:26:59:2e:e7:
50:38:15:ad:b1:ca:f2:60:03:6d:87:38:38:fb:69:c7:2c:7a:
09:c5:22:7e:07:23:ba:0f:2d:7b:ea:08:88:2c:11:5f:67:48:
2c:46:4b:8a:a3:4a:94:a3:e4:87:29:26:fa:b6:60:25:bb:b3:
95:79:4e:08:73:f0:19:f4:70:e4:af:ac:59:d0:07:a0:a6:31:
32:62:0d:4a:c4:eb:de:06:bd:eb:e4:17:ae:d7:02:b3:e0:8d:
9a:45:c5:d0:f7:75:e7:ee:15:3a:35:d1:73:66:4a:9d:24:28:
f8:78:72:51:2e:7a:e9:ab:96:5d:16:85:43:d8:8a:29:7d:6c:
95:f9:1c:19:5a:03:af:a7:ae:83:2e:ed:2a:8f:8e:0c:d3:f9:
71:30:06:19:55:35:73:f3:17:7a:b8:f5:6a:8b:81:b1:18:d0:
01:1b:e5:97:e3:5d:b3:e2:e6:ce:ad:3d:7c:df:06:8b:a7:3f:
08:fc:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:57 2025 by rpki-client