Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hr5sRV9knXdTA3dXaOjgONy7qhY.roa
File: Hr5sRV9knXdTA3dXaOjgONy7qhY.roa (raw, json)
Hash identifier: i4t9veaR0nwFiXy3dCUqMAKHrgMlSppB958VVmAmLbw=
Subject key identifier: 1E:BE:6C:45:5F:64:9D:77:53:03:77:57:68:E8:E0:38:DC:BB:AA:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E45747A1BFC1260B851F88EE0E01F1B73
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hr5sRV9knXdTA3dXaOjgONy7qhY.roa
Signing time: Sat 16 Mar 2024 04:10:45 +0000
ROA not before: Sat 16 Mar 2024 04:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:45:74:7a:1b:fc:12:60:b8:51:f8:8e:e0:e0:1f:1b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 04:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ebe6c455f649d775303775768e8e038dcbbaa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:c3:62:b9:7f:e3:b4:78:76:e0:aa:53:84:
44:73:95:09:8d:f8:a7:74:53:0e:53:66:13:49:5a:
3b:28:ca:74:66:b9:7d:5e:a8:ba:4e:8d:b4:60:50:
97:2e:f0:29:4a:81:e4:f7:a7:92:ef:fc:3f:c6:93:
70:a9:c5:90:f6:91:0c:61:72:c4:39:72:53:71:2a:
1d:b7:43:df:85:8d:6a:68:95:6f:da:89:31:58:9b:
7c:2c:93:d5:53:5b:3b:6f:33:09:f9:59:f3:5e:67:
99:e9:02:1f:65:e2:8b:33:82:b7:68:ca:0e:67:46:
1b:59:17:3f:3d:7a:20:c3:5b:b6:08:60:fc:5d:7c:
42:ea:4c:46:e8:7f:1c:b5:af:2a:56:09:53:25:bd:
17:85:fa:bb:2b:ed:d8:5d:aa:2a:57:56:2a:25:18:
04:41:13:1d:b3:27:52:d1:dc:96:8b:b6:63:b0:77:
e5:c7:a3:6e:2c:48:bb:9d:cb:d7:f7:cf:3a:07:b0:
f5:9c:5a:3f:47:1b:18:b3:bf:fe:69:57:d5:46:15:
6d:e1:28:7a:79:63:56:e4:62:5a:92:5a:32:94:e5:
12:e9:6e:77:17:58:d4:8c:a3:b9:37:12:25:84:18:
93:26:32:9f:59:98:43:5c:2a:f9:78:26:da:5d:a7:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BE:6C:45:5F:64:9D:77:53:03:77:57:68:E8:E0:38:DC:BB:AA:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Hr5sRV9knXdTA3dXaOjgONy7qhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ee:06:ad:3b:c2:af:db:82:85:db:2e:4f:8e:2b:c7:d9:53:
7f:e1:d3:50:a4:9c:09:ab:49:ff:47:a1:c3:41:64:91:87:08:
f8:c5:fe:76:89:c5:43:e0:55:41:71:99:11:57:27:44:ae:55:
64:45:cd:9b:84:16:1d:64:c6:97:4d:70:40:1d:fe:c1:e0:44:
30:43:9a:61:c5:67:15:7d:ab:e8:c9:27:32:96:64:2c:44:fb:
fb:0d:e1:51:43:7a:c7:3b:ee:ce:c3:d9:92:c7:57:b3:4b:2f:
f0:9d:49:90:66:b5:16:45:9b:29:37:fd:26:68:a4:ad:38:d4:
9d:fe:ec:b3:44:4a:49:83:49:29:cb:d4:77:66:7b:eb:83:ba:
d8:80:e0:4a:b4:ea:5d:02:9f:dd:12:11:c9:fc:1f:82:84:4f:
e2:2e:16:af:db:20:d1:96:e5:17:ba:dc:ae:81:1a:5f:3a:a0:
01:ae:31:08:e9:6d:7f:c6:64:35:00:09:97:31:35:9b:16:e6:
4d:be:b6:48:2f:69:0c:4d:38:9a:b4:1a:1b:69:02:88:83:b0:
6d:7e:f8:a6:e5:ce:54:27:dd:2e:04:b3:2c:50:a8:8f:e6:a7:
19:8e:da:ad:d0:9b:ad:5d:15:8f:85:ce:a1:01:bb:cf:d1:e9:
47:9e:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:06:54 2025 by rpki-client