Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hU_6LaZG0ZN-EAETntO8fOa73PA.roa
File: hU_6LaZG0ZN-EAETntO8fOa73PA.roa (raw, json)
Hash identifier: qtvVxab7AEzNb6Um3Eh0/UOZiRKePPQsD4ty7BQa1QU=
Subject key identifier: 85:4F:FA:2D:A6:46:D1:93:7E:10:01:13:9E:D3:BC:7C:E6:BB:DC:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF23666FCE3C31DA86E5EF74D907983B1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hU_6LaZG0ZN-EAETntO8fOa73PA.roa
Signing time: Wed 10 Jan 2024 07:11:40 +0000
ROA not before: Wed 10 Jan 2024 07:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:36:66:fc:e3:c3:1d:a8:6e:5e:f7:4d:90:79:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 07:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854ffa2da646d1937e1001139ed3bc7ce6bbdcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:5f:f7:fe:37:b7:7a:fc:c0:b3:08:ce:28:
f2:3e:58:54:5a:98:23:76:37:b6:24:29:56:f3:c5:
00:db:16:b0:3c:30:14:16:24:9d:6d:3c:1d:ce:07:
ea:8f:ef:fa:cc:4b:8d:55:0b:04:c6:aa:d2:27:b4:
72:4c:0a:20:28:cd:71:e4:bd:d2:43:79:11:14:78:
40:73:9f:5f:c1:95:48:44:8f:b4:7e:cb:dc:a7:dc:
a1:10:3f:87:53:37:f4:be:c2:29:cc:da:76:10:ec:
b1:0e:f2:e1:ce:26:2b:58:8c:6a:37:b4:eb:37:23:
43:e5:98:d3:da:6b:df:5d:53:29:91:b1:07:c6:c8:
01:72:e9:0f:03:d5:55:4a:13:2a:5c:28:bd:c3:2e:
ba:6a:15:fb:d4:0f:bb:6b:ef:cb:9f:fc:63:c8:80:
b1:48:b1:b9:ed:79:69:36:2b:91:c2:81:e5:df:89:
ac:83:e8:eb:23:d4:d1:d4:79:09:bd:2b:24:d3:4b:
87:f2:94:de:9c:fd:49:5d:67:96:5a:4b:2f:76:2b:
1b:e5:0d:29:be:69:8c:70:a8:a2:37:08:84:8a:dc:
46:77:ec:30:12:e4:dc:81:06:54:09:f1:ff:9f:18:
24:e6:81:76:a4:88:a8:02:1c:de:d1:e4:42:7d:24:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:FA:2D:A6:46:D1:93:7E:10:01:13:9E:D3:BC:7C:E6:BB:DC:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hU_6LaZG0ZN-EAETntO8fOa73PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:79:7b:28:32:f3:34:07:b9:aa:43:9d:44:6e:4a:6b:0d:54:
dc:2b:fe:ba:7b:33:58:4c:99:41:a3:18:1a:09:33:13:0f:4b:
d0:6d:11:a6:de:df:b3:ff:ac:63:81:52:13:8c:82:db:8b:2d:
53:40:76:89:1a:a1:b5:a3:18:bd:63:83:64:bf:ae:04:fb:91:
0b:70:4c:c1:a0:30:ce:a5:c0:e9:a8:84:18:59:e1:db:fb:68:
09:4f:93:d6:db:34:e0:68:5e:64:0b:7f:e5:fe:21:da:e8:41:
4e:ce:03:4b:d0:3f:b2:1a:3e:83:21:08:99:f9:07:1c:90:0e:
6a:c0:1e:af:6c:2c:4a:f2:51:2c:19:8b:ca:a9:6f:d0:a9:ec:
ea:96:9b:31:91:3d:a8:62:7d:08:4a:84:94:2d:bf:ee:c4:28:
14:8f:38:a8:6e:3f:ab:a0:f8:ac:4a:fe:e0:08:cb:f5:5c:37:
f9:2e:27:27:9d:cb:06:5c:ab:d8:54:e8:37:b2:06:60:d0:1e:
2a:91:98:c1:68:c9:51:92:3f:3f:83:26:26:5d:bf:97:2d:eb:
c4:12:e3:3f:71:4f:ba:72:42:d7:6c:80:4d:1a:3f:d1:a0:53:
2c:d5:c4:ee:6b:2a:56:f2:39:e0:c9:2b:cd:72:d7:09:7d:de:
ab:d1:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:30 2025 by rpki-client