Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PsIk7MuIOqgPEaF3mA2Hnv68sjg.roa
File: PsIk7MuIOqgPEaF3mA2Hnv68sjg.roa (raw, json)
Hash identifier: ncmGewzR3BrX58WViMEcY/0jeftIWJ8wU+2I3a8KMpc=
Subject key identifier: 3E:C2:24:EC:CB:88:3A:A8:0F:11:A1:77:98:0D:87:9E:FE:BC:B2:38
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8F7C9EED028807307C114CE1815762FE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PsIk7MuIOqgPEaF3mA2Hnv68sjg.roa
Signing time: Fri 22 Dec 2023 03:05:58 +0000
ROA not before: Fri 22 Dec 2023 03:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8f7b:d916/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:7c:9e:ed:02:88:07:30:7c:11:4c:e1:81:57:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 03:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ec224eccb883aa80f11a177980d879efebcb238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:e5:af:7e:f7:15:9e:e4:e8:79:13:75:e2:
2f:0a:73:12:7b:b0:3b:47:5c:6f:70:43:ef:6d:63:
b6:d1:62:10:b6:f0:8c:39:38:02:e2:a5:72:34:68:
a4:77:ed:12:21:35:f8:76:e0:0d:d2:ae:6d:a8:5f:
f8:57:19:fa:29:19:11:17:4e:a5:a3:2a:70:00:05:
df:95:bf:d3:27:06:d0:ed:d6:21:e0:e9:76:55:fe:
08:94:ef:6c:2c:b4:68:19:23:2c:1b:32:2f:9e:2b:
4d:33:95:6e:8d:8d:44:80:b8:2c:63:32:63:dc:83:
8a:1d:00:a5:7b:de:95:80:75:21:9c:6b:9c:29:9e:
81:0f:f8:99:04:73:70:81:64:69:d0:76:e4:70:ac:
cb:c6:3b:ec:d8:11:1c:a0:b5:f9:de:09:da:ca:e4:
13:8a:0f:a6:9e:90:de:98:27:ae:37:b2:21:99:2c:
87:02:06:76:5a:40:31:04:e9:ce:c4:f1:39:49:55:
40:f4:a5:50:79:92:de:e9:7b:73:5f:01:0a:70:f6:
89:b6:eb:f2:a2:5a:47:07:79:e4:78:47:03:4d:cd:
e9:69:50:65:7e:a9:4c:05:3c:ef:44:73:3f:a0:d7:
8e:da:e5:db:25:0f:f8:42:ba:65:0d:29:0a:df:98:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:24:EC:CB:88:3A:A8:0F:11:A1:77:98:0D:87:9E:FE:BC:B2:38
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PsIk7MuIOqgPEaF3mA2Hnv68sjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:11:b4:ad:50:8d:46:6b:15:32:2e:bd:4f:b9:08:c0:c1:d2:
e2:af:19:07:3b:09:8c:30:88:f0:20:97:98:c4:78:59:1a:10:
b0:ec:e5:85:b4:e1:7c:ed:56:b1:1a:72:06:25:b2:be:e6:89:
82:4a:71:fc:ce:8a:37:e3:98:5a:19:31:5d:1d:65:a8:ec:ce:
d3:27:6a:1f:b6:c8:db:24:f6:27:a6:81:bd:25:de:bf:cc:cf:
d8:02:db:56:80:02:a1:af:c7:7a:c4:2b:fb:72:9c:45:7c:c1:
bc:3f:fe:4d:39:12:ff:bb:33:e0:c2:89:a2:75:f1:ac:f1:d4:
f2:33:8e:e7:79:e4:30:18:c8:3d:e2:83:db:5c:93:49:07:ab:
36:ae:98:e6:64:1c:d4:51:7b:7d:ce:81:67:37:92:88:b8:6c:
2b:96:65:0c:ff:06:e3:48:28:ab:2a:de:aa:22:cc:36:b7:e0:
9a:9e:6f:b2:f2:43:a0:46:39:b3:ec:85:ee:43:d6:bb:a3:7f:
9b:8b:2b:43:59:28:aa:66:2a:f0:67:fe:88:40:2c:34:88:29:
c8:6b:10:f0:2c:c5:aa:25:cd:39:2e:2f:eb:b6:9e:9e:2e:54:
70:5b:40:eb:0f:33:3b:b1:d4:57:f3:a0:58:62:c0:bb:e2:91:
2f:29:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:03 2025 by rpki-client