Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H_KTHoAcPP3SoU_gRypqdrZd7IM.roa
File: H_KTHoAcPP3SoU_gRypqdrZd7IM.roa (raw, json)
Hash identifier: P3OxPI6mQ6CYoX9w+/eHNbhaoJ0PALCQ0sEx6TT7WDs=
Subject key identifier: 1F:F2:93:1E:80:1C:3C:FD:D2:A1:4F:E0:47:2A:6A:76:B6:5D:EC:83
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9B1A41049868BEFA1DA955D2ABDB8EC0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H_KTHoAcPP3SoU_gRypqdrZd7IM.roa
Signing time: Sun 24 Dec 2023 09:13:58 +0000
ROA not before: Sun 24 Dec 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:1a:41:04:98:68:be:fa:1d:a9:55:d2:ab:db:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff2931e801c3cfdd2a14fe0472a6a76b65dec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:d2:f3:63:d1:4c:d3:91:3a:d9:19:7a:ef:
e9:65:79:f3:70:28:f6:e1:dd:d0:bd:0c:e2:18:af:
34:e3:27:5b:94:f9:19:ef:ad:6e:43:f0:bb:e1:4a:
be:19:df:ae:73:1b:2f:81:7c:2d:4e:13:81:b7:90:
d4:e4:95:fb:93:ce:06:13:df:d2:3a:37:a9:c1:b5:
09:d0:e1:1d:77:4f:15:c5:38:8d:6c:21:3f:dd:b4:
5e:39:58:c3:9d:08:12:df:8e:78:65:56:12:a0:58:
06:41:de:d4:8f:72:fd:26:04:dd:09:9c:1f:bc:4d:
9b:aa:36:c4:a5:7d:e1:95:a2:bb:f1:d7:6c:59:8e:
27:cd:29:d0:90:6a:0b:4f:1e:51:c5:76:20:31:02:
28:fe:df:3a:e2:92:f2:07:14:40:80:0a:53:eb:7f:
46:d4:fd:ce:31:12:48:ac:2b:91:eb:9e:58:96:e3:
84:e2:93:fa:4d:8a:52:9d:58:4b:da:93:80:40:0b:
b9:2c:bf:6e:2c:59:b8:a5:48:2e:3c:af:ef:ef:08:
34:14:a0:d4:ac:7f:44:17:7d:46:23:22:67:c8:7c:
2e:1d:84:41:f5:3d:42:8a:7d:fd:e5:f4:6b:c2:f0:
53:ea:43:d5:54:06:45:13:72:15:24:36:62:ee:03:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:93:1E:80:1C:3C:FD:D2:A1:4F:E0:47:2A:6A:76:B6:5D:EC:83
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H_KTHoAcPP3SoU_gRypqdrZd7IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:86:c4:65:61:98:e6:70:99:b3:2c:73:80:52:dd:ff:84:c2:
4d:43:fd:79:95:8f:89:2a:66:84:33:02:33:49:a2:69:e4:91:
fd:df:fa:4e:b4:f0:e6:06:14:ae:01:a2:f4:8c:fc:72:0c:d4:
f3:f7:9c:d3:fa:b1:7e:db:0a:0d:35:e5:4a:a5:a8:c6:37:92:
ee:70:35:97:05:bf:a6:84:f0:bf:3b:ac:8d:90:f0:b3:b5:c5:
eb:17:f9:60:0a:80:61:d3:7d:2b:18:df:a2:ae:36:8b:74:1a:
30:d0:b9:93:da:af:e1:06:8d:df:a8:61:2e:62:7e:c4:01:4a:
96:27:3e:4a:c6:6a:37:4c:4c:65:38:ec:64:96:aa:b7:eb:72:
2b:2b:ed:b8:0b:58:fb:da:78:05:4c:14:ae:d0:a7:65:45:e0:
af:1a:fe:36:a7:1a:78:36:27:e3:5c:7c:d6:6d:72:3a:95:a2:
49:3e:84:73:12:4f:29:34:e7:fc:2d:c0:84:8e:bb:7b:45:b7:
28:d4:8f:28:00:40:e8:ad:74:b9:f7:ef:71:7e:c7:f8:e4:ff:
b6:13:f5:10:93:32:1d:0a:db:ee:0d:1e:2d:3c:44:6b:90:47:
df:88:f2:d8:08:e0:79:85:92:93:68:c5:e0:a2:de:fc:95:b4:
1d:9c:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:33 2025 by rpki-client