Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p6a3kGe_3A9LgTJonYnENAYT3T0.roa
File: p6a3kGe_3A9LgTJonYnENAYT3T0.roa (raw, json)
Hash identifier: P/VY1Ywbk3KRtzel+ZIuT0Zuvnk5zmZ7CBlnmjuH+Is=
Subject key identifier: A7:A6:B7:90:67:BF:DC:0F:4B:81:32:68:9D:89:C4:34:06:13:DD:3D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C97AA6E82431F59FE13DF6E2FEA3FD2A1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p6a3kGe_3A9LgTJonYnENAYT3T0.roa
Signing time: Sat 23 Dec 2023 17:12:58 +0000
ROA not before: Sat 23 Dec 2023 17:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:aa:6e:82:43:1f:59:fe:13:df:6e:2f:ea:3f:d2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 17:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a6b79067bfdc0f4b8132689d89c4340613dd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:7a:93:03:c4:22:da:ee:b8:a8:31:55:5d:
d8:68:57:73:02:f8:37:ee:5c:ca:1c:33:8a:5a:4a:
55:85:8c:bf:4f:80:60:21:84:5d:07:d5:57:cc:6d:
ee:f9:07:b1:52:b5:15:87:1d:95:0b:84:75:26:ab:
ec:78:dc:e9:eb:10:9e:12:c2:88:6d:ca:21:21:87:
72:2a:6b:32:7d:f0:ac:5d:fe:d6:fa:58:ed:cc:da:
62:79:3e:2c:1b:9f:be:a0:5b:0f:f4:0c:99:29:35:
52:ac:7a:96:f4:78:bd:84:f4:1a:7a:6c:da:6c:95:
7a:61:0c:9c:a8:0b:b7:6b:ad:bf:2f:cc:30:11:09:
4f:12:f8:d5:f4:ba:c4:ee:a7:fa:f4:3d:04:83:fe:
23:c1:81:40:13:33:63:23:48:35:91:fa:02:28:37:
59:78:8f:1f:83:e3:6f:de:9d:d9:83:f1:c1:b0:72:
4b:40:17:58:f5:91:50:d4:f2:61:76:c8:d1:9c:5f:
1a:d2:46:2b:9a:2c:e4:69:ed:bd:0c:00:9f:8e:23:
78:8b:2c:1c:10:5e:81:ff:85:ca:a9:78:d5:3f:d6:
b0:fc:3a:62:9d:70:3b:da:7d:a1:9c:ec:0f:9c:63:
98:91:24:f3:a4:54:3c:ef:9b:22:49:dc:e6:08:3a:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:B7:90:67:BF:DC:0F:4B:81:32:68:9D:89:C4:34:06:13:DD:3D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p6a3kGe_3A9LgTJonYnENAYT3T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:36:c5:06:c0:be:8c:63:4c:55:7a:9f:86:0e:66:81:d0:8b:
ea:6b:de:7a:78:30:d4:8e:90:61:ad:c0:4f:6f:99:98:89:e1:
2b:df:0a:2a:61:9b:05:a3:1b:31:4b:ce:fe:40:01:ed:23:03:
22:c6:a5:92:3b:d3:23:b9:fc:a2:2a:2d:76:3d:3d:51:58:a4:
93:bf:b3:1b:e3:50:9e:d8:68:47:44:00:f0:c7:23:9b:b3:1c:
8d:5d:8c:d9:1a:e7:da:1c:04:46:d4:84:52:ab:b9:86:a7:a8:
1d:2e:c5:c4:89:17:a0:f7:d4:7b:29:23:ae:17:bc:3d:10:ca:
20:31:41:7e:6f:4d:31:8e:30:ce:b3:cc:70:a7:40:d6:60:51:
4e:fd:2d:ff:ed:e9:f1:f5:ec:10:20:03:ce:d3:5c:67:23:28:
38:68:fd:df:b6:7f:05:d0:02:0e:08:45:65:05:05:98:81:48:
c6:d2:dc:27:c7:cc:3e:c1:aa:62:37:45:a9:91:04:f3:7d:f1:
a0:05:80:c3:f6:c0:2e:b2:62:2a:3c:39:6d:7b:43:27:f8:dc:
2f:4f:cf:94:ba:82:aa:c3:94:29:b7:2f:ee:ef:17:75:cc:55:
f9:53:d4:40:69:66:28:a6:c8:b7:8d:6f:a7:52:07:48:ec:35:
98:0c:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:25 2025 by rpki-client