Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PJvMVVfsX_milSWgoVkI-PpfVJM.roa
File: PJvMVVfsX_milSWgoVkI-PpfVJM.roa (raw, json)
Hash identifier: F9je3AD9ZsBAM9eB/8leeU1+Srtv2KU8wtw4rPtb2/M=
Subject key identifier: 3C:9B:CC:55:57:EC:5F:F9:A2:95:25:A0:A1:59:08:F8:FA:5F:54:93
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CED48CE537D9386E8CC90CC368AE6763A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PJvMVVfsX_milSWgoVkI-PpfVJM.roa
Signing time: Tue 09 Jan 2024 08:13:40 +0000
ROA not before: Tue 09 Jan 2024 08:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:48:ce:53:7d:93:86:e8:cc:90:cc:36:8a:e6:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 08:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c9bcc5557ec5ff9a29525a0a15908f8fa5f5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:a6:a0:e4:e7:1e:92:b2:a7:45:43:55:c3:
77:92:6a:da:83:16:d9:f8:70:dd:ea:0a:53:05:69:
15:d9:79:d0:66:de:fc:f5:ea:25:5f:40:95:b6:21:
7d:75:34:c4:47:8f:ad:43:bd:21:ce:4b:3e:df:1f:
a2:7e:36:77:40:e1:78:29:d5:b3:cf:c4:83:fa:8b:
34:77:35:de:4b:04:a6:42:1d:f4:e5:7f:0c:56:a2:
d4:d3:ac:67:7f:7b:b3:e9:88:24:41:ee:b5:6f:2e:
fc:02:2c:81:a0:0f:c9:8e:10:f1:9f:6c:71:f1:34:
3b:ae:3d:23:c3:09:da:e4:8f:47:4b:c0:99:00:a9:
af:b0:b0:a5:3a:7f:42:65:54:de:4f:64:da:d8:07:
f4:c0:98:23:71:c3:d2:23:14:22:ab:d5:d0:c3:db:
2e:4e:46:24:93:80:21:07:d9:05:14:70:06:5e:f9:
f4:97:ff:98:ab:e3:bc:27:ca:55:ef:62:ff:f1:df:
5a:8b:c9:d2:92:b3:45:ff:de:93:3d:2c:9f:90:1e:
92:ff:be:94:2c:d1:32:5e:ab:ba:3b:a2:04:ec:4e:
7e:63:a6:dd:86:f8:6d:97:95:bc:2d:eb:e8:5d:da:
a3:3a:00:a6:a1:2b:0d:31:57:3e:d6:2b:32:41:7b:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:CC:55:57:EC:5F:F9:A2:95:25:A0:A1:59:08:F8:FA:5F:54:93
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PJvMVVfsX_milSWgoVkI-PpfVJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:9f:df:5c:1f:ea:3b:1e:c6:b6:c9:87:3a:23:4d:46:35:23:
01:27:93:7f:05:c4:d9:96:d0:0c:6e:f2:e3:48:d3:42:77:ac:
65:64:1d:49:6b:bb:48:60:ea:06:bf:43:b9:52:09:ab:55:b2:
2a:69:ea:23:eb:44:75:31:d0:14:fc:cb:33:b4:ae:8c:9e:8a:
f2:1c:5f:c1:2d:3a:62:aa:ae:e4:96:cf:a9:83:d3:04:be:d4:
66:bb:c1:f8:ac:12:e6:3c:be:65:b6:fc:61:d8:c3:6d:14:71:
b4:59:34:c9:ef:d7:b2:51:92:ae:a8:eb:2e:51:58:de:1a:a0:
76:14:8b:87:96:df:9f:c9:cc:ce:4e:74:8a:1e:30:db:95:2b:
bc:7c:44:4d:8e:ae:b7:4a:dc:ea:e6:30:67:44:ff:2d:d6:a7:
6d:e3:05:d6:08:d4:da:17:55:8c:f8:f7:29:56:66:49:c4:fd:
ab:3b:a8:b2:af:54:51:c3:81:0c:8b:30:c8:ad:fb:cf:08:99:
2b:08:f7:68:9e:e2:f8:51:78:e5:d0:80:d6:99:aa:4f:af:39:
bb:58:4c:de:1f:88:d2:0d:7c:4f:91:10:09:ef:5d:5e:df:9a:
5f:a1:26:9c:49:a1:68:e8:2a:23:46:a9:c7:86:75:e1:79:0a:
78:18:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:01:05 2025 by rpki-client