Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DPECebdFD9twsYZNZ-pSP-a022Q.roa
File: DPECebdFD9twsYZNZ-pSP-a022Q.roa (raw, json)
Hash identifier: N+c61gLSmJ/z/bK6JEI72u6u5W2xb6cBpm/HnlQiakM=
Subject key identifier: 0C:F1:02:79:B7:45:0F:DB:70:B1:86:4D:67:EA:52:3F:E6:B4:DB:64
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA2D10B913DF440CEC8C09046158C3AA6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DPECebdFD9twsYZNZ-pSP-a022Q.roa
Signing time: Mon 25 Dec 2023 21:10:58 +0000
ROA not before: Mon 25 Dec 2023 21:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a2:d1:0b:91:3d:f4:40:ce:c8:c0:90:46:15:8c:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 21:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cf10279b7450fdb70b1864d67ea523fe6b4db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:a2:cb:3c:47:ef:b7:67:6c:6a:8e:3c:75:
05:8b:c3:7a:21:77:f1:d8:20:5f:9f:ab:11:fc:31:
0c:33:0f:5e:0b:9b:66:0a:64:02:aa:31:51:2d:92:
77:2a:7d:bb:61:98:9b:57:1d:af:67:a9:df:bf:cf:
5a:df:75:f1:76:95:9e:3f:b8:f9:7a:a6:21:06:38:
77:93:8a:72:b3:a3:a0:62:1f:4c:78:1b:a0:3f:b0:
3a:1b:17:70:e1:6c:9d:85:65:f3:9c:b6:30:7b:72:
b1:91:5e:22:a1:14:47:9a:43:e5:91:5b:18:01:a3:
cc:0a:cf:1d:c4:c6:10:68:52:97:1e:3a:c3:48:2b:
e1:ba:d7:10:16:5c:98:41:3f:8f:b8:06:13:51:22:
ab:91:dd:ff:2a:0f:2e:60:1a:c3:0f:be:d6:9a:ee:
b8:64:90:8e:fb:12:82:d9:dc:1a:e8:18:63:06:ab:
d8:0b:dc:23:69:7d:c5:dd:97:d7:43:0d:5b:c4:78:
0b:f1:ca:93:26:91:47:13:ea:0e:1f:40:ba:2e:ba:
e6:e0:4b:36:86:c7:6c:5d:56:51:77:c8:dd:1f:9a:
f2:a6:af:e3:5b:f2:da:b4:9a:57:e0:c3:85:0c:fa:
58:b3:81:3d:74:03:a7:67:71:6a:d2:e3:4f:86:ad:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F1:02:79:B7:45:0F:DB:70:B1:86:4D:67:EA:52:3F:E6:B4:DB:64
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DPECebdFD9twsYZNZ-pSP-a022Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c8:a2:10:9d:fc:20:fb:a4:4f:e5:bc:d3:76:74:5a:44:d1:
f0:58:b1:8d:cd:3b:6a:13:1b:60:db:3a:6b:ae:ac:23:e9:0f:
8c:46:eb:06:f9:ab:64:b7:44:b2:fe:2b:7e:66:5d:05:50:7b:
0a:e3:2f:9b:ed:bb:94:35:cf:ba:d6:d4:6c:55:f5:1e:e2:34:
25:87:2a:ce:25:b5:04:0b:a5:a4:0a:dd:6c:ed:dd:22:8b:2f:
5c:78:2e:0d:61:7d:ea:66:55:b7:70:b8:46:da:e8:b0:b8:6e:
4c:92:bd:7a:72:db:f3:05:eb:44:e2:2a:c6:bc:ea:4d:2c:bc:
dd:0f:fd:1a:40:07:9c:bf:a2:6b:1c:33:01:65:f0:a7:9c:c5:
41:72:2d:63:74:ab:7e:92:c1:c9:a5:2d:fb:76:28:52:b6:57:
40:fb:aa:d8:ce:0e:3e:72:6c:c3:58:0e:05:30:e5:28:ed:c3:
94:1e:6a:72:1b:2e:08:5e:2f:a9:ab:1c:12:32:82:72:f1:66:
ab:57:fa:ac:25:c5:e3:9c:2e:77:5d:03:f2:b5:0e:ba:0f:2d:
dc:56:1e:b1:92:d2:e3:a0:2b:e0:22:ac:9c:9d:d1:3c:11:32:
f3:5f:ce:21:ea:8d:16:6c:72:c4:86:18:7a:69:d4:27:7b:79:
76:d1:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:17 2025 by rpki-client