Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0DdhRyVmq9nsI_BHEpuwZmj0kNE.roa
File: 0DdhRyVmq9nsI_BHEpuwZmj0kNE.roa (raw, json)
Hash identifier: fOyRePOPyODKxpVGV0sBHuYw5HsW4ZXSixxZfrnl204=
Subject key identifier: D0:37:61:47:25:66:AB:D9:EC:23:F0:47:12:9B:B0:66:68:F4:90:D1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBB13FBB2D72590DF93F8ADEBD07F9ED0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0DdhRyVmq9nsI_BHEpuwZmj0kNE.roa
Signing time: Sat 30 Dec 2023 14:14:58 +0000
ROA not before: Sat 30 Dec 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bb:13:fb:b2:d7:25:90:df:93:f8:ad:eb:d0:7f:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d03761472566abd9ec23f047129bb06668f490d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:4c:e6:6e:be:81:80:4a:17:38:21:29:ce:
9f:7c:77:8e:ea:12:76:d6:25:10:a1:33:61:a1:44:
12:1b:42:30:93:6e:97:0b:1c:51:d5:96:21:b2:cf:
81:a6:41:23:fa:54:c8:97:e5:99:59:0d:55:93:6e:
a7:52:d8:96:a2:ef:92:92:11:a4:3d:86:24:53:0a:
04:82:f9:13:00:6c:7e:f7:37:8b:2b:6f:58:fc:e2:
bf:bd:d0:b6:b9:17:78:ab:4e:0b:67:d1:52:ae:d8:
d0:41:73:25:31:b1:b5:25:a8:6f:81:cd:2b:a2:8b:
23:a9:5f:36:3a:93:83:60:5a:04:cc:05:bc:2d:35:
96:92:98:93:a7:39:91:fb:5c:97:30:ba:bb:7e:21:
65:45:94:72:70:ec:60:d4:56:52:4c:e0:0f:96:c1:
55:f6:71:0b:83:81:98:34:46:3a:4e:d4:58:1d:ba:
a3:cf:df:8a:55:c6:79:b1:19:61:cf:01:9c:e4:25:
d7:9d:99:0f:b2:7d:c1:f3:9e:52:cb:90:23:24:e8:
de:d4:9b:ab:25:e7:03:f7:4b:ba:8c:ed:e3:99:09:
45:07:c6:0b:89:ec:f1:e1:66:b5:dd:1e:30:a7:ca:
a7:49:48:4b:49:f9:c7:c6:f4:a5:d1:1e:4d:d7:2a:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:61:47:25:66:AB:D9:EC:23:F0:47:12:9B:B0:66:68:F4:90:D1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0DdhRyVmq9nsI_BHEpuwZmj0kNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:73:32:fe:ac:ce:3f:07:bf:5d:da:43:c1:bb:13:59:e9:1c:
d1:10:12:26:09:85:0c:34:54:1f:54:3d:d3:26:34:19:46:43:
43:8b:d3:e9:af:07:52:cd:cf:24:58:38:14:90:dc:84:e9:40:
99:e6:ec:11:72:68:2a:b9:e9:42:3c:b4:b0:a2:b5:07:64:4c:
49:e9:7e:8b:20:8e:fa:0e:a3:f6:bb:b9:56:6d:02:fa:ce:5b:
3c:2c:09:88:cc:4a:8b:ab:5b:2b:dc:e3:bb:75:c7:9e:90:81:
3b:99:f0:c4:05:87:86:80:31:fb:a3:dd:88:fd:56:07:90:e5:
54:16:1c:3e:62:57:07:f7:e0:48:7a:bc:09:bc:d4:82:62:8b:
1b:91:4b:e1:f0:46:ca:39:8f:fe:d9:82:48:ed:28:c2:ce:ef:
f6:a6:2b:99:be:68:f3:6f:6e:72:5f:99:ee:2f:5b:28:d5:47:
85:86:60:a9:2f:02:72:83:9d:ab:8f:7d:21:7e:40:41:2f:70:
14:86:28:15:5f:67:0e:52:6e:b3:60:3c:fd:d1:0d:78:7d:ac:
5a:57:b0:c1:86:9a:7f:c4:2a:28:ae:e5:df:2e:7f:96:1d:93:
00:1e:1e:c2:53:fd:6b:4f:dd:18:eb:68:b6:6c:8d:fb:5b:af:
ce:d7:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:59:20 2025 by rpki-client