Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa
File: h_CwbAE7dV39lgBkgd4LqcyZvnM.roa (raw, json)
Hash identifier: pCRH+L511mlvZe9rq3BflC8q600+B8W02nlqKIs3oTc=
Subject key identifier: 87:F0:B0:6C:01:3B:75:5D:FD:96:00:64:81:DE:0B:A9:CC:99:BE:73
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB4635C74E7697A70771ED06C15C7B0FC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa
Signing time: Sat 06 Apr 2024 17:09:54 +0000
ROA not before: Sat 06 Apr 2024 17:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:63:5c:74:e7:69:7a:70:77:1e:d0:6c:15:c7:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 17:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f0b06c013b755dfd96006481de0ba9cc99be73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:54:7e:64:80:4c:c2:d7:2a:05:69:10:a8:
54:4c:19:d2:ee:b4:fc:b3:7e:c6:52:36:41:a4:84:
f8:0f:65:2e:c2:42:30:a4:84:3a:d1:78:59:8d:b7:
94:bf:41:38:2d:a7:28:f1:c2:6c:d6:2d:6b:8b:30:
33:84:33:be:31:d9:9d:fc:a3:9d:8f:23:74:93:75:
a0:b2:fc:50:04:bc:b2:fb:20:c8:7e:19:13:ea:3e:
de:22:37:61:63:f5:76:43:9f:7a:89:5d:5a:74:7f:
6e:5b:cc:c9:80:e2:15:cb:9a:fd:45:52:b3:24:57:
98:7f:cf:ef:43:22:f7:16:7b:ca:52:10:c2:f0:05:
21:95:8b:9d:0c:55:56:31:43:9c:d3:d8:2e:28:a3:
f7:15:c5:c3:17:23:28:d2:73:a2:d5:ba:e0:d8:d3:
bb:8e:dd:09:d3:f2:b0:37:99:d0:af:72:fd:bc:b6:
56:55:8b:2f:b0:1d:64:3f:5e:63:34:b2:de:58:8d:
94:cc:4f:5b:53:77:0e:9e:4c:88:55:4c:64:44:4e:
b8:b2:e7:ed:d4:7a:dc:b2:f3:44:43:4b:5f:ca:da:
8d:b0:3f:5a:d3:b5:90:af:00:df:f8:5e:3c:0c:2a:
5d:fb:f0:42:6e:bf:d2:35:0b:82:ef:4d:33:2e:24:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:B0:6C:01:3B:75:5D:FD:96:00:64:81:DE:0B:A9:CC:99:BE:73
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:8e:b6:7a:1f:af:a6:e0:12:05:cc:c0:be:56:9a:50:0d:93:
b5:dd:2c:58:7d:f6:a8:2d:02:47:5e:a5:7b:10:2c:18:c3:50:
43:1b:9b:f5:3d:e1:f7:05:30:31:7f:46:62:e8:d5:25:56:c8:
8c:e3:7f:af:46:ef:16:b6:b1:e7:cf:44:29:09:91:e0:d8:af:
57:61:0b:7d:9e:13:a4:5c:a9:23:42:dd:c1:6a:31:aa:b6:2b:
78:84:72:6c:d9:02:4e:3d:25:95:c1:6d:29:10:00:5a:f8:5f:
22:da:a6:c8:2f:fc:e8:d2:54:f5:b6:20:be:49:15:82:df:07:
d6:83:34:28:15:4b:8e:cf:72:ff:36:a3:97:3e:5e:8b:b0:9f:
c4:4b:5e:62:9c:fc:bc:9b:b6:64:6d:01:ca:07:bf:26:31:99:
5b:55:58:b2:9a:a6:cd:68:fb:43:1a:54:8a:7f:f2:d9:01:60:
b0:f4:70:29:5a:e1:4c:22:01:79:28:f1:79:1f:91:3a:d2:c5:
3e:89:95:4e:5c:c1:c0:d3:2c:69:11:d1:d9:53:1e:8a:29:38:
ec:f8:7a:e4:9d:63:07:01:33:2b:27:74:d6:a2:76:ca:3b:0a:
e1:b6:37:aa:dc:2e:6a:2e:f0:4d:27:97:9d:a8:7b:ae:05:3a:
31:b0:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:41:53 2025 by rpki-client