Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AcFMP0WYpwNUQsixHep2yndMZJE.roa
File: AcFMP0WYpwNUQsixHep2yndMZJE.roa (raw, json)
Hash identifier: h2GI7C3ZW17z62OkWGBSMEeO1Ch4zarHTjEocvmV8zU=
Subject key identifier: 01:C1:4C:3F:45:98:A7:03:54:42:C8:B1:1D:EA:76:CA:77:4C:64:91
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8F44C695CF2345A0F1B358B62CF6D9BD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AcFMP0WYpwNUQsixHep2yndMZJE.roa
Signing time: Fri 22 Dec 2023 02:04:58 +0000
ROA not before: Fri 22 Dec 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8f44:7a55/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:44:c6:95:cf:23:45:a0:f1:b3:58:b6:2c:f6:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01c14c3f4598a7035442c8b11dea76ca774c6491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b1:3a:65:62:24:4d:2d:95:7e:52:22:da:a5:
e7:45:ef:e3:4f:8b:1e:85:ff:f4:c2:e2:0c:14:ed:
8b:55:75:89:2b:c7:95:71:68:3f:b9:25:81:4f:5a:
59:ea:cb:72:14:84:29:07:ec:91:99:e4:6d:91:5f:
c9:5c:2c:b6:23:9a:fb:ea:21:64:4e:21:c9:d8:fa:
b8:c5:f7:b7:82:c3:0f:1a:e2:29:91:21:84:7f:7f:
ab:a8:4a:7d:13:92:7e:d8:ec:35:d1:76:f8:73:8f:
ee:2d:53:d1:21:0e:e1:91:43:af:dd:62:79:b3:c6:
e0:6a:a0:d4:71:fd:06:f4:22:c0:68:c2:96:91:76:
96:0a:a5:69:12:e0:8e:d2:5f:52:8a:32:cf:81:d3:
39:86:47:e9:5f:9f:39:39:d5:3d:d9:1c:7e:4a:cc:
34:79:e6:5e:54:9f:09:db:d4:5e:c6:76:d7:fe:6f:
ca:2d:d8:22:b8:83:6d:fb:00:3e:94:de:ab:c3:fb:
99:b6:10:f3:01:04:f3:d9:82:09:75:31:50:47:f6:
61:1c:f3:18:fc:a6:ad:e4:06:fc:ca:25:f2:cd:bc:
12:41:f6:b6:f0:b5:47:17:25:90:80:e4:62:08:d2:
60:18:8d:55:73:6b:79:e1:32:b3:fc:43:62:fe:e2:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:4C:3F:45:98:A7:03:54:42:C8:B1:1D:EA:76:CA:77:4C:64:91
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AcFMP0WYpwNUQsixHep2yndMZJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:5d:2e:49:3e:7b:ac:f2:b6:e7:6f:60:90:a3:bc:4c:69:1a:
cd:6a:5b:81:e3:e6:b7:af:d2:74:ff:d6:e8:6d:85:c1:70:d8:
08:ee:d9:fc:54:18:86:25:3a:84:56:a6:15:53:1e:11:07:8a:
35:d4:03:27:89:84:d4:3b:9f:8a:e3:44:72:04:b3:e4:d5:74:
50:90:d1:35:8a:2d:a4:3d:94:0d:54:c4:3c:8f:b0:e9:81:d9:
3d:a2:9d:1e:4d:11:21:a1:7f:96:e0:7a:11:d8:90:eb:7c:11:
35:7f:42:7c:0e:d6:88:cd:ac:3d:4c:23:87:a5:ab:fe:f6:78:
e2:14:01:3f:4d:a6:34:1a:1f:de:19:f4:5e:23:e6:1f:20:e2:
e8:03:47:37:7b:3c:bd:f1:1f:a9:d4:92:ca:4a:de:91:77:cb:
9b:d2:71:76:38:bf:90:37:3f:c3:6a:2e:94:b9:21:83:2f:f2:
7e:6d:b5:9d:5b:23:9c:1a:fa:bd:3b:c2:e3:f1:c7:e8:ee:85:
46:9b:ea:a7:1c:8c:3c:9e:81:22:71:2c:dd:94:39:f5:0b:aa:
d4:5d:3c:54:03:4b:02:82:09:6f:a8:7c:f0:26:ee:cc:cb:87:
58:03:9f:96:cd:31:b4:73:58:17:b0:af:eb:4e:88:52:80:02:
03:aa:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:34 2025 by rpki-client