Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H3v_yrLSPTYSmCEy6-kxjADr63g.roa
File: H3v_yrLSPTYSmCEy6-kxjADr63g.roa (raw, json)
Hash identifier: HWtzvmFI2NS2bf2hMkKuh9F3NMc1V2yyYXVuP833H6Q=
Subject key identifier: 1F:7B:FF:CA:B2:D2:3D:36:12:98:21:32:EB:E9:31:8C:00:EB:EB:78
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8D5EA0DCAC2F1A3E48F9FF43B879B90C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H3v_yrLSPTYSmCEy6-kxjADr63g.roa
Signing time: Thu 21 Dec 2023 17:13:58 +0000
ROA not before: Thu 21 Dec 2023 17:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:5e:a0:dc:ac:2f:1a:3e:48:f9:ff:43:b8:79:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 17:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7bffcab2d23d3612982132ebe9318c00ebeb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:57:3c:13:14:aa:fe:75:4f:48:2e:9a:2f:
b5:1a:88:32:3e:c3:4f:6e:55:f1:33:03:ad:ad:cc:
9d:71:08:76:73:74:61:e7:08:0a:b1:84:ba:ac:4f:
1f:ab:92:13:45:da:c8:f4:e0:fc:0e:a4:81:22:d9:
de:09:05:34:da:f1:4b:be:81:82:db:75:06:50:52:
28:98:9e:3d:c7:cf:24:35:dc:f1:11:6c:1f:8e:fd:
c4:5c:76:d8:09:2f:75:8e:5c:7f:8f:4e:9a:13:0a:
13:10:80:5e:29:8f:07:f4:ea:a7:f7:10:22:07:f6:
23:6d:f7:a6:a1:05:3f:56:56:71:d9:4e:19:1b:9d:
8f:c3:8d:2c:d0:19:69:27:a4:48:79:c4:69:22:3d:
fd:a2:ae:b6:a0:ce:d7:50:c7:04:9d:32:59:f7:4b:
6a:f6:a7:dc:57:5a:6a:d7:8e:ec:b8:78:32:b9:f1:
c3:e6:3d:bc:d5:79:be:86:3f:8b:23:da:81:de:b4:
ea:bd:30:0d:34:b3:ad:a8:93:d4:e7:3f:48:82:93:
49:2e:bb:ff:f9:0b:2a:4f:2c:48:07:c6:ee:c0:d7:
45:75:cc:0c:0c:2b:e8:1b:b4:5f:2c:d5:7a:d1:e4:
96:02:a2:0c:65:61:10:a7:b6:73:74:60:1c:e4:5b:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:FF:CA:B2:D2:3D:36:12:98:21:32:EB:E9:31:8C:00:EB:EB:78
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H3v_yrLSPTYSmCEy6-kxjADr63g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:df:43:46:b0:5d:34:80:5e:05:de:63:6e:62:9c:26:08:13:
00:f3:25:7b:21:35:14:1b:ae:e5:da:b5:87:2a:50:8d:9a:12:
fc:a8:e4:3b:12:1a:2b:d6:cb:c6:3d:49:51:8c:a7:74:44:ae:
42:7c:0a:64:d1:0a:f4:29:83:cc:25:54:96:a4:6f:a6:5a:01:
da:5c:94:7e:df:26:6e:d9:de:6b:22:c0:47:df:74:95:3f:e3:
ea:7c:c7:de:19:39:8e:d4:f3:9b:b4:f8:50:7f:5f:6d:b7:20:
4c:1f:2a:6c:79:95:a0:7a:e3:c9:7d:45:7d:a0:82:ae:65:da:
dd:22:7f:94:f3:23:e5:a9:c0:af:59:f3:82:61:3f:53:c0:e6:
fe:2e:a2:28:a6:31:c1:4e:67:25:d4:37:9a:09:8a:59:81:64:
10:76:18:bc:4d:d1:9b:d9:7a:62:8a:da:23:90:7a:2a:c7:a5:
93:63:98:44:6a:12:9a:c8:1d:b9:d5:21:3c:3b:91:d1:32:e0:
e3:3f:62:e3:b1:be:5c:77:b8:15:1c:6d:a1:04:74:d3:75:a6:
10:a7:88:58:01:aa:2f:3d:b3:7b:8b:ca:25:a3:4d:6f:9c:6c:
68:cd:93:fd:89:7f:61:ab:c4:e3:df:90:0a:d0:b1:4c:d8:03:
52:ac:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:33 2025 by rpki-client