Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PnkRn71UTibP75KdFWzfUAeTCUU.roa
File: PnkRn71UTibP75KdFWzfUAeTCUU.roa (raw, json)
Hash identifier: oNlQIGJU7v1kztEKJW1MkLb7FS+nGOUkKeuKizhesDQ=
Subject key identifier: 3E:79:11:9F:BD:54:4E:26:CF:EF:92:9D:15:6C:DF:50:07:93:09:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBB43002971945C66A903613DCB384896
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PnkRn71UTibP75KdFWzfUAeTCUU.roa
Signing time: Mon 08 Apr 2024 01:11:54 +0000
ROA not before: Mon 08 Apr 2024 01:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bb:43:00:29:71:94:5c:66:a9:03:61:3d:cb:38:48:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 01:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e79119fbd544e26cfef929d156cdf5007930945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:f1:32:ce:6e:69:2c:3f:56:37:5f:a1:23:
28:db:bc:e4:f1:d7:90:9a:b1:69:d6:8c:57:3f:96:
57:07:0d:23:f7:f5:77:6c:93:14:ca:ff:66:f1:15:
99:bc:a7:fc:50:3c:62:92:34:d4:ac:1a:60:ad:5b:
c9:1f:c7:6d:b1:0e:4e:6d:47:8b:cc:7e:86:d1:11:
03:f7:c0:32:ec:38:4f:84:24:69:3c:28:6e:7e:db:
32:39:25:f3:61:8b:29:7e:df:cb:a7:38:5c:ee:35:
ec:81:d1:54:d0:5c:f3:51:bb:e1:ee:e9:d7:f1:54:
db:62:6c:b5:7c:6f:31:2b:fe:fb:24:ff:1c:ab:6a:
09:5c:53:9d:2f:37:0f:72:d8:22:cd:5e:28:1a:53:
e8:3c:8c:ac:93:ba:5d:dc:14:18:a3:e5:29:96:ec:
bd:fb:72:96:16:cc:36:9e:c8:db:40:4b:96:bb:66:
e1:aa:e4:c4:1c:2c:1e:f3:6b:56:e0:0d:b0:4b:ef:
3d:02:63:bd:05:e1:5a:45:3c:13:2c:38:e0:42:56:
13:68:e5:03:9c:9b:a7:cc:ff:c4:b5:d4:5e:8b:38:
6f:e3:0f:99:4a:37:04:c2:ca:8b:b5:0c:78:dd:50:
6b:50:2b:e5:94:9a:51:07:56:24:88:5d:31:31:81:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:11:9F:BD:54:4E:26:CF:EF:92:9D:15:6C:DF:50:07:93:09:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PnkRn71UTibP75KdFWzfUAeTCUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:e9:81:75:08:83:9c:7f:4f:05:29:17:83:5b:b3:60:5f:e5:
60:51:3a:1d:10:45:1c:81:c5:f6:a6:8b:b8:37:64:84:5a:37:
bc:5f:a3:b7:5f:56:96:c4:05:03:89:df:2a:cd:c1:aa:d4:8a:
13:4c:21:7b:2d:03:7f:6a:e4:a6:26:00:d6:94:2e:ff:43:ac:
a1:af:e2:3c:85:c6:fe:7b:fe:d3:1d:44:ee:93:a3:a3:5d:37:
c3:17:a2:6e:a3:f4:e6:6a:73:6b:bb:28:e3:31:bb:42:e1:24:
2b:de:20:2c:10:1f:44:24:c1:7d:9a:34:2f:6b:83:5f:4b:1a:
d1:7e:a9:ba:81:a1:b7:c3:99:ff:29:4e:ca:32:90:16:e5:b9:
51:9d:4c:fb:f8:cc:9d:4b:96:dc:ef:56:f4:e5:1a:80:b1:a0:
a9:29:27:bf:9b:96:5d:e3:6d:73:98:f5:41:a5:d4:7e:31:7c:
f6:64:4d:70:42:ac:53:6d:31:28:ef:85:ff:92:f2:fc:90:f3:
e2:0c:0d:72:2e:96:29:a8:a0:0f:0d:1f:79:50:be:9f:b3:2d:
f7:8a:bc:29:ee:51:e8:3f:2c:80:d4:ff:3f:50:11:93:c3:c3:
15:01:66:4a:75:aa:86:91:ac:06:22:03:17:20:c3:3f:73:2d:
3b:7e:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:54 2025 by rpki-client