Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PdFNPuSkSv8XyJ1GbMkburFcPrY.roa
File: PdFNPuSkSv8XyJ1GbMkburFcPrY.roa (raw, json)
Hash identifier: HUrnUMmC21c3BF/sDyUcCQuI17ECNUMMZL54svqaNbs=
Subject key identifier: 3D:D1:4D:3E:E4:A4:4A:FF:17:C8:9D:46:6C:C9:1B:BA:B1:5C:3E:B6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E352780DA48FF5FD2A6F9F0632A52A4F1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PdFNPuSkSv8XyJ1GbMkburFcPrY.roa
Signing time: Wed 13 Mar 2024 00:12:45 +0000
ROA not before: Wed 13 Mar 2024 00:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:35:27:80:da:48:ff:5f:d2:a6:f9:f0:63:2a:52:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 13 00:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dd14d3ee4a44aff17c89d466cc91bbab15c3eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:98:c4:0f:ab:42:ab:38:d3:f7:2a:a3:1c:
82:66:da:0f:a9:b5:e3:20:ff:7f:e0:b9:41:6e:c6:
2a:6c:d5:00:5b:05:95:fe:e3:28:bc:41:00:a2:1a:
4d:76:e2:e4:b5:63:e9:90:43:39:ca:38:66:3b:85:
47:32:38:4e:2a:69:eb:88:a0:2a:6c:b4:14:c6:14:
07:7d:1d:70:f9:bb:3a:14:53:40:09:58:9f:a4:f2:
6a:da:a7:ee:24:51:f3:8e:bd:62:de:90:ad:c0:31:
30:5e:b1:32:aa:ae:48:a9:b5:b5:f6:73:e3:14:ff:
2f:b6:85:48:6b:d8:02:b0:77:a6:f7:aa:77:33:42:
84:d2:6c:7d:30:13:8a:52:81:e4:bf:41:6d:11:e1:
3c:2c:de:c3:f5:7e:20:80:fc:74:45:cb:a7:06:f9:
84:0d:e9:f7:c2:33:e6:91:58:db:70:3e:31:d8:c2:
2a:ac:24:ed:a0:c3:7b:1b:9b:51:e7:94:63:59:c7:
07:10:c3:27:4e:07:91:d2:3f:8c:c3:8b:37:09:e6:
6b:f2:6e:d7:5c:16:49:a8:78:83:ed:7b:c5:dd:51:
34:fc:5c:9d:d9:09:a0:50:61:81:2f:0f:2f:4f:1a:
f7:da:e4:0a:27:92:21:17:22:d1:32:1d:b1:f6:db:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:4D:3E:E4:A4:4A:FF:17:C8:9D:46:6C:C9:1B:BA:B1:5C:3E:B6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PdFNPuSkSv8XyJ1GbMkburFcPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:6f:ea:59:52:d0:49:ef:93:7f:5b:8a:2e:ef:79:a4:34:5f:
bc:72:37:2b:0f:20:b3:5a:9c:29:4b:5a:25:8f:fd:e1:1c:01:
b7:21:5a:47:e0:1c:93:26:d5:8b:03:10:56:bd:ae:d6:9f:ff:
5d:56:fe:0f:95:c5:9c:25:e6:65:76:92:9c:79:b5:a1:22:bb:
f0:5b:0e:a4:94:9b:6f:46:9b:5d:ff:7a:5e:92:b9:53:77:7a:
5c:56:71:a2:a3:c2:d5:b5:e1:74:31:22:b9:26:7a:da:a0:6a:
11:97:4e:30:1b:dd:39:ae:3e:0c:e8:b2:07:9e:96:ec:b8:fa:
ab:cb:9f:27:b6:c4:9c:12:ce:7b:dc:aa:fd:6e:ba:76:83:21:
47:2a:79:34:60:29:06:84:6a:4b:03:4d:6f:62:76:b4:99:07:
dd:d2:c2:ef:76:d6:9c:b3:f0:ff:df:22:b6:d8:8a:a1:74:cd:
46:78:47:d4:75:4e:40:30:51:22:82:d9:be:29:78:9a:37:64:
8e:9e:e0:07:20:15:2f:21:32:bb:45:ad:ae:58:44:8d:aa:51:
83:d9:7c:ce:0a:f4:7e:39:0f:19:a8:f0:d7:19:d0:7c:78:8d:
37:a9:54:02:32:98:79:81:bf:54:1e:8f:01:ef:94:89:32:e7:
c9:fc:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:26 2025 by rpki-client