Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/no0NIIVDywzWFyrOJ8zdir8Gims.roa
File: no0NIIVDywzWFyrOJ8zdir8Gims.roa (raw, json)
Hash identifier: XcFurXlIxY6MztDzNga/MSswKyPBpJNVZEzthrg+5gU=
Subject key identifier: 9E:8D:0D:20:85:43:CB:0C:D6:17:2A:CE:27:CC:DD:8A:BF:06:8A:6B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE6A20AB20995AF76475B5C3D89EF437C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/no0NIIVDywzWFyrOJ8zdir8Gims.roa
Signing time: Mon 08 Jan 2024 01:13:48 +0000
ROA not before: Mon 08 Jan 2024 01:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:a2:0a:b2:09:95:af:76:47:5b:5c:3d:89:ef:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 01:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8d0d208543cb0cd6172ace27ccdd8abf068a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:4f:40:2a:68:1c:e7:c2:38:2c:03:db:38:
51:52:99:38:6c:48:45:3a:3c:5a:f0:76:e8:3f:00:
06:5d:ef:99:8c:b2:e2:62:ab:30:d3:f4:fd:79:86:
39:cd:2c:0c:ba:09:5d:29:3d:97:f5:90:5a:4c:6e:
1a:4e:5c:f8:18:03:2c:bb:a9:ca:5f:af:0d:e5:41:
81:e2:2e:83:d1:b3:ba:08:5d:50:4f:0e:15:c1:b4:
ca:cf:ed:39:80:03:b6:9b:91:6a:0a:70:7f:fb:a6:
5a:f5:9d:af:61:8f:29:83:53:d0:35:80:4d:73:09:
6e:dc:61:21:80:40:a5:d2:56:a8:7c:e8:28:4b:1f:
0c:ab:b8:8e:0b:29:09:f0:62:8e:28:c9:52:3a:83:
b8:00:3e:c0:51:8a:12:73:35:06:a1:a7:1c:34:e5:
ae:be:3d:b9:5a:a8:c4:f2:59:2b:d6:6f:d4:83:ed:
49:91:9f:63:c0:92:d5:ef:7f:6e:de:38:f8:fd:b0:
1f:7f:cd:5b:7e:36:d2:b1:73:64:64:b1:06:cc:7f:
e3:37:93:c2:3b:00:18:86:0f:6b:69:bc:e2:ab:55:
51:4d:e4:10:41:02:a8:18:68:07:80:00:dc:19:19:
57:f8:79:3a:3a:b6:76:a8:d4:44:de:c6:37:9b:c8:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:0D:20:85:43:CB:0C:D6:17:2A:CE:27:CC:DD:8A:BF:06:8A:6B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/no0NIIVDywzWFyrOJ8zdir8Gims.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:34:1f:ea:0c:7d:63:4a:6a:9b:0e:6a:e3:02:4e:14:1a:ea:
28:02:f0:b0:0f:06:86:bf:35:eb:33:af:dd:b4:99:5a:4e:42:
f9:4d:c2:32:a0:fd:0c:3f:6a:7e:40:11:35:01:13:9e:da:22:
75:03:d6:36:f3:6d:08:86:9d:41:9f:98:a4:41:16:de:fe:4d:
45:f1:9c:e4:5d:1e:37:24:19:9b:f6:de:28:a5:f4:b1:5e:20:
4c:71:fa:ec:97:b8:b4:4e:1a:47:d7:7f:d6:86:e6:a9:6d:91:
60:bd:08:d8:e2:51:2e:5a:86:69:58:0e:5d:90:7e:37:8e:d7:
18:06:5b:80:de:c5:83:dd:4a:38:d4:3b:6a:96:7e:3a:f0:b0:
c2:b5:fe:9b:c6:10:1b:36:6b:05:7d:a3:a9:3c:de:ce:27:76:
97:46:71:89:aa:fb:38:af:38:47:46:20:f1:58:f9:4b:44:cd:
d3:0b:b8:b5:fa:62:3f:d7:ba:86:18:68:bc:f4:5e:8a:4a:bd:
6f:a0:7c:b2:99:76:ac:32:27:05:27:19:cf:08:71:60:af:de:
59:56:9d:1c:86:ae:a8:be:f5:f6:37:33:56:fc:96:fa:73:a2:
3b:8f:33:03:54:dd:7f:36:ca:f0:53:d9:6f:15:5d:36:88:58:
51:0d:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:37:06 2025 by rpki-client