Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A8HNvmWhRd087DE4Phw7eFGp0V0.roa
File: A8HNvmWhRd087DE4Phw7eFGp0V0.roa (raw, json)
Hash identifier: 0hMGNWQG/dvjcVtNkdBqBqE5XIFxUIVT7ekujM/oT3Q=
Subject key identifier: 03:C1:CD:BE:65:A1:45:DD:3C:EC:31:38:3E:1C:3B:78:51:A9:D1:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E262396B1A5EB03DEF2A6F59619B8B11F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A8HNvmWhRd087DE4Phw7eFGp0V0.roa
Signing time: Sun 10 Mar 2024 02:14:10 +0000
ROA not before: Sun 10 Mar 2024 02:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:26:23:96:b1:a5:eb:03:de:f2:a6:f5:96:19:b8:b1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 02:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c1cdbe65a145dd3cec31383e1c3b7851a9d15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:70:8b:8a:9f:40:62:99:5d:af:b7:8a:d9:
2d:10:71:c8:42:5b:7a:05:7e:64:dd:26:33:fe:cd:
b6:8c:36:0b:b6:4f:15:4e:86:45:32:8c:c7:a8:55:
1d:81:f8:05:28:e7:c7:04:88:77:aa:47:08:0e:b1:
3c:f4:6d:46:92:c1:b5:92:a6:a8:e0:fd:b6:5c:72:
10:bd:49:95:20:ff:29:2d:af:c9:4a:92:b4:d2:ea:
66:b6:44:8b:0d:0a:64:cd:1b:09:b5:bc:ed:a8:60:
d4:f4:c0:20:88:31:ea:e8:c2:63:0c:3b:82:34:77:
d8:21:a0:81:7d:8f:99:4c:e4:81:b0:05:d8:cb:82:
37:41:65:87:2d:82:06:fa:7f:e1:ae:32:4f:94:9b:
70:81:a1:67:ce:c8:78:1d:a8:1e:44:f3:c2:a4:22:
33:7e:6e:c3:a5:ae:2b:69:52:73:d0:ee:29:24:37:
c7:c9:2c:8c:81:ce:79:99:29:ca:08:b7:5c:eb:7c:
d0:35:7a:54:55:b0:4e:18:f0:cb:e3:6e:e2:f0:51:
11:71:5b:df:80:ac:be:65:a0:f6:ab:be:19:4b:f5:
b6:b5:be:1d:a7:23:df:b2:94:1a:65:b9:98:c9:5e:
11:2c:bd:a3:71:fc:8c:f4:3b:cc:77:61:b6:f2:af:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:CD:BE:65:A1:45:DD:3C:EC:31:38:3E:1C:3B:78:51:A9:D1:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A8HNvmWhRd087DE4Phw7eFGp0V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:d5:ea:ce:e4:2e:13:8a:f9:ea:99:0a:16:96:44:31:6f:96:
89:75:f2:74:2e:36:70:97:2f:f2:16:b6:b9:88:54:0d:b2:a7:
0d:63:1b:62:3a:85:11:35:87:6b:9f:05:ca:01:5c:40:b1:4d:
1f:22:cb:03:2d:9c:64:e5:36:cd:f2:fd:16:7f:f3:18:33:5e:
1b:42:94:d9:3f:e3:b7:2f:1b:11:a1:98:9d:8b:80:82:b6:c6:
dc:d1:17:17:30:bd:6f:83:44:14:15:7a:32:78:e7:98:8a:b7:
1f:99:50:a5:0c:0a:ee:d1:2c:a8:7b:bd:c5:18:4e:a0:e4:fc:
e8:43:0b:df:01:6d:34:6a:49:69:45:0e:f5:29:c5:85:05:f4:
0e:58:fb:6e:6b:e0:30:94:94:92:93:31:78:03:20:52:fc:1e:
c3:62:2e:06:a2:31:8a:c4:f1:bf:9c:eb:82:e4:af:08:85:88:
a4:5e:50:3a:67:ae:26:86:64:01:1c:95:a0:42:ac:7b:3d:00:
56:45:eb:67:65:eb:8a:dd:4d:a4:b9:1f:03:24:4b:99:0a:10:
1a:0c:3c:5e:e1:3d:cf:b5:5b:e7:51:ab:2e:02:33:9c:8f:49:
64:4c:12:67:3e:26:5e:56:e7:cb:eb:aa:81:68:34:2a:8d:b6:
c7:a1:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:49 2025 by rpki-client